Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File: WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier: 0GM4X2Qd/ARX2mryJvx/EFhf8oCo24DeTsmIIMC+NaI=
Subject key identifier: F1:5C:2A:B5:9B:3C:9B:DA:EC:2A:9E:80:8E:1F:F0:FF:3E:DD:1C:4C
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 0194BD178B4D0C4AA0603592B7D957356F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: IopWMeRqXOypB_fRacr3ZaxFtQI.roa (hash: FppOmUQRJ7eFBYEwXngpnxhSpl+Hc5qsOfWlbbkaJzw=)
2: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (hash: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=)
3: OL6yc8ZRNNzUrmUlMJiUidDHuh8.roa (hash: yRgWUM0pwyoXJeRdU0MzJI562R7I/kz9Vz80Sl7k9NU=)
4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: /6MAgxtFlRwzQUZpTLdVQGf1s0xyLXhQnxCLLbAEjQc=)
5: s4RqD1BS5l0_C1DY6qiIvroBiqY.roa (hash: zMF8j8B+bWyi3iOyQzBoW2FngUlQmNbr8zpHXcZBvR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:4d:0c:4a:a0:60:35:92:b7:d9:57:35:6f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=f15c2ab59b3c9bdaec2a9e808e1ff0ff3edd1c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:ec:d5:dd:81:1b:f8:8a:2d:3f:22:37:16:
a3:92:5e:88:33:0c:59:b0:7b:f9:77:09:1a:ec:d7:
e4:f3:76:fe:4e:1d:0a:e3:4b:af:ba:f7:70:e8:85:
56:1d:8b:f7:8d:8a:b5:ad:71:bd:4e:45:cd:29:47:
e0:7a:00:7c:d3:cc:35:41:8a:a2:05:6c:aa:e5:18:
d8:27:18:7f:76:0c:cb:e3:95:71:a5:af:53:39:0a:
4e:21:a3:57:9a:ca:43:b1:4c:1e:de:a0:ef:9e:7e:
f5:fd:cf:fc:74:b8:87:13:70:07:61:06:2f:d8:97:
03:48:dd:dd:f7:f7:82:6f:0e:85:eb:55:91:a3:53:
92:e8:07:c2:87:72:6b:ef:2c:4f:2d:3b:28:53:f1:
40:bd:1e:b8:01:37:fa:b1:c3:5c:f9:a2:71:a8:03:
ed:e4:e8:59:61:91:6e:7c:13:d9:b0:12:00:4b:49:
de:42:98:19:06:fc:79:9c:9c:e1:88:c6:77:8d:1b:
be:32:39:4e:ed:3b:6f:b4:2f:70:77:50:26:1c:01:
11:0b:45:21:ee:82:43:28:90:77:43:5e:cb:3e:9e:
ae:dc:ee:79:61:b4:8a:eb:ef:c7:b0:b8:0d:fd:fc:
c2:4e:db:91:d0:86:62:97:a8:a2:5f:46:54:c2:bd:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:2A:B5:9B:3C:9B:DA:EC:2A:9E:80:8E:1F:F0:FF:3E:DD:1C:4C
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c8:0a:46:8e:12:84:dd:c9:cc:7b:c8:c0:77:3a:e8:f7:e9:
b4:9a:1b:0b:bb:28:8d:f4:a8:43:c5:0f:bb:5f:c2:c7:85:2c:
6b:31:69:30:73:12:21:ef:a2:1c:bc:fc:b0:05:e8:5c:f9:cf:
44:57:50:a5:be:94:61:2a:8f:35:89:b3:dd:a0:44:76:61:84:
90:9f:fc:20:97:81:64:b4:ce:fb:f0:ca:eb:3d:15:81:d1:3a:
46:df:71:0b:d6:a8:54:93:f1:27:8b:19:74:65:31:09:92:84:
9b:ee:f4:62:80:de:af:a2:32:a1:da:76:e2:18:40:8f:08:b8:
01:02:2c:64:f3:54:25:4e:9a:6a:3f:9d:a5:8e:5f:4b:fd:c2:
83:2f:0d:51:92:f0:35:3a:f7:3a:d8:1e:6c:61:f2:f5:30:1f:
d8:9f:46:bf:87:60:6e:a5:2d:69:5b:cc:a5:fe:01:ca:e3:7c:
9b:20:62:d0:72:5b:78:38:b8:87:59:29:c4:e1:a9:31:d4:5c:
5a:98:5d:62:0c:35:a2:6e:11:e6:13:49:f5:3d:81:67:31:77:
90:98:ca:92:95:08:05:12:e3:86:0c:45:a4:3b:8b:60:b5:59:
87:6c:7e:0e:46:49:62:57:32:a3:91:5a:f5:38:6c:f7:2f:78:
3b:61:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:52 2025 by rpki-client