Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: mfF2QHTAXbTOTWmJcYsahFQGHdUGkRJFoa3nF3cceA8=
Subject key identifier: 1F:D3:19:A8:0E:CA:2C:4F:19:CF:A1:2F:4B:DF:4A:E4:3E:E1:3E:62
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 0194BD4EA7EBC285592BAD86E60821B456A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0979
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: +T3XM6u+CC7HCfYSiOLH9OKdj5Qlw5oxSI4WryeiZwg=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:eb:c2:85:59:2b:ad:86:e6:08:21:b4:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=1fd319a80eca2c4f19cfa12f4bdf4ae43ee13e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:61:56:ba:1d:02:f7:88:4d:35:a8:ac:e5:
72:ad:54:67:bf:cf:97:08:1d:2f:35:4b:21:c4:8c:
54:46:09:bf:32:39:94:ae:35:87:a2:41:28:92:d9:
a0:6a:8c:af:1a:42:25:42:58:bf:c8:8a:93:2b:a3:
8a:6b:ba:d3:4c:50:35:aa:8e:0a:3f:a5:72:76:f1:
e0:6c:16:2c:37:39:1a:b5:a2:90:a8:f5:70:10:b7:
c0:0e:f5:ea:66:b8:f1:cd:c5:25:c8:82:f0:0a:33:
4a:08:78:65:57:a1:22:8f:55:6b:96:90:97:31:d6:
0c:b0:2d:25:a8:9e:db:38:29:88:db:4c:c4:6a:b5:
b9:6b:a8:92:2b:00:03:b5:a3:b6:5f:25:03:9c:85:
f5:3e:3b:87:50:75:0f:c6:e7:5a:8e:00:86:d2:fb:
01:4d:26:22:a7:ff:16:39:88:a2:79:2a:10:8d:9f:
77:d8:45:97:45:0d:2d:c5:67:40:b3:cf:b7:98:54:
9f:8d:d1:13:55:1e:ea:f2:f4:d6:69:7d:e8:ff:43:
a7:ce:59:eb:e7:e2:d6:3e:45:17:e2:ea:bd:b8:bb:
1e:61:cd:f1:3a:9c:6b:72:d8:78:65:b4:96:10:2e:
7d:f9:47:d9:09:9d:fc:c3:d8:52:bf:39:57:0d:40:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:19:A8:0E:CA:2C:4F:19:CF:A1:2F:4B:DF:4A:E4:3E:E1:3E:62
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:81:4b:dc:8c:62:19:b3:df:fb:0e:19:17:e2:1c:c8:5f:
2f:bc:01:c9:8c:73:a5:38:00:af:15:07:29:66:79:a5:82:87:
bb:00:bc:dc:65:61:ff:22:a6:6a:b5:e0:ed:da:b5:d2:84:ba:
a3:ca:36:b7:14:6c:68:14:9c:e5:db:a4:5e:6e:c0:fe:a7:e5:
99:a9:42:bd:5c:73:91:1a:55:33:57:67:cc:ff:de:d2:8f:93:
21:22:9d:65:29:68:af:f6:b2:f9:ae:76:31:ad:a0:f0:43:5a:
95:f9:0c:0f:38:55:f6:63:33:89:81:95:78:55:a2:fc:80:2e:
d7:dd:95:bb:6a:9d:57:11:3f:cf:f1:c3:93:16:9a:c7:50:d2:
c1:7c:7f:73:df:5c:86:51:2b:68:55:79:2f:30:dc:4e:0d:d6:
5c:98:27:ac:5d:d4:fa:b2:47:97:e0:63:3e:6d:d0:3e:d0:66:
91:9c:0b:fb:7b:d9:30:d2:70:f6:eb:57:10:8d:6d:6b:0a:19:
2f:aa:56:db:20:83:ec:3e:a0:3b:ab:e8:06:2d:bd:3c:92:8e:
5c:3b:28:aa:83:5b:3c:3d:22:78:58:1a:55:c3:c6:5d:f1:de:
b8:cf:ab:b2:89:05:2c:e9:2c:03:f1:f1:34:3b:df:18:29:b0:
89:5c:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:00 2025 by rpki-client