Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier: BAx8GvuRc/eBIrTUZj55SiDDJ21LKb8KRHRPAxx110w=
Subject key identifier: 85:ED:05:D6:7C:CA:7D:7C:2C:ED:D2:0E:EC:E8:1C:22:AF:53:D6:9D
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial: 0194BD8522B377BD2462E2D94861A8420D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number: 048F
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: pYNfo9I2KQfkYK7JXNSzHNp8GnQVvza4pZBw3slzTJE=)
2: s5QSQwev5CqksmjM0AaoSdiOZEY.roa (hash: r2aK748rLgMwkpT8AEvF91wvzX74j/vxHw/8YYI08JI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:22:b3:77:bd:24:62:e2:d9:48:61:a8:42:0d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=85ed05d67cca7d7c2cedd20eece81c22af53d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:d3:b3:bb:06:37:2e:f4:db:bc:5f:b2:43:
cc:e7:c2:75:12:8c:85:92:64:55:01:33:15:05:51:
85:50:bb:eb:f6:22:9e:80:1b:c2:37:0b:6a:79:a6:
42:a1:f2:58:4d:c2:39:c6:22:d1:36:f6:e5:3e:62:
f8:83:76:5c:85:a0:eb:c9:25:f3:ac:d5:cb:da:a7:
c6:f6:01:88:31:60:d8:4d:22:bb:9a:6a:99:c0:ad:
3c:6a:7a:9e:4f:d4:05:43:88:1b:95:48:0e:97:df:
0b:7e:44:76:85:58:79:92:77:a7:ca:de:80:34:d6:
6d:9a:0b:ba:48:f2:b4:8a:3a:de:83:40:b2:ed:43:
41:d6:68:6e:6a:cf:ea:cd:46:ff:38:99:7d:f0:1b:
b3:c9:f9:c0:f8:80:04:7a:a0:85:98:a7:51:1c:c5:
58:a9:d9:b8:cd:ef:fc:69:27:d5:cd:5c:f0:52:34:
c8:06:16:6a:8f:ad:0f:1c:d1:03:fe:a6:95:35:ac:
48:af:54:5f:38:f2:b1:72:7b:1f:4b:d2:82:b8:cf:
ab:1a:9e:db:de:27:a9:89:7f:ea:24:66:cb:58:d6:
80:5a:c7:a0:04:b5:eb:2d:80:ca:3d:1f:69:67:93:
fb:16:b9:3a:d2:e2:5c:41:31:8d:61:cf:be:3a:e7:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:05:D6:7C:CA:7D:7C:2C:ED:D2:0E:EC:E8:1C:22:AF:53:D6:9D
X509v3 Authority Key Identifier:
keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:97:4b:5f:3c:99:c6:f7:49:1e:07:b0:84:3d:1e:30:02:60:
c2:e1:ea:d4:26:dc:07:e5:06:34:91:50:ec:65:6f:f1:bc:6a:
ec:fb:97:e2:53:3a:53:81:47:b5:f3:77:72:d0:16:4a:1d:04:
d2:8b:f3:ff:e5:6f:92:3a:f0:37:05:72:16:15:fd:dc:ca:f2:
4f:48:15:99:a2:33:66:9a:78:92:a2:af:2b:52:29:a0:3d:67:
3c:f8:9d:c6:42:f4:04:e0:5d:f6:22:70:2e:e7:82:bf:9f:ce:
03:aa:ed:20:dc:68:a9:2c:cb:61:5d:c7:f6:99:5c:59:99:67:
7b:f0:35:07:a7:11:8d:54:ef:9c:ce:4e:82:84:43:fe:ec:20:
46:29:52:ea:24:aa:74:0c:9e:0b:60:86:89:5a:ac:21:13:f7:
c6:f2:81:3c:18:6a:42:ed:88:60:1d:7b:69:e5:d5:af:d7:14:
fc:8d:73:8a:37:0a:69:61:3c:0c:62:e0:50:36:d8:d5:67:03:
e4:02:84:ad:fa:4e:eb:a6:62:6d:ca:94:df:22:c8:e2:50:ed:
28:a5:60:83:3a:db:a4:fc:59:81:30:0f:c1:2b:ef:a2:2f:cc:
1c:c4:c8:fd:97:b7:9e:2d:5d:31:a8:20:09:ab:40:e2:42:33:
f7:3a:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:42 2025 by rpki-client