Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
File: WnMRox5rU6F10ZE1sryZOh-5hLE.mft (raw, json)
Hash identifier: s0mVeTZa7w5ABTzKW0OMXmyv5b0qxZSalzq+LchkPTg=
Subject key identifier: 07:10:E7:C7:E6:10:01:98:0B:5B:1F:4C:C4:A6:68:F6:A6:CB:E1:39
Authority key identifier: 5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1
Certificate issuer: /CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
Certificate serial: 0194BD175899B9E8FF71D6793CB1798C5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
Manifest number: 1250
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: WnMRox5rU6F10ZE1sryZOh-5hLE.crl (hash: aDMcAMBtkTXHpL0JavfiOFpX7LyFAiwql3JZJltfMkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:99:b9:e8:ff:71:d6:79:3c:b1:79:8c:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=0710e7c7e61001980b5b1f4cc4a668f6a6cbe139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:a1:6b:85:fe:46:5e:91:4c:66:18:9d:db:
fb:a4:38:27:f6:f5:76:3f:25:bf:28:12:d1:90:e6:
5e:c7:a6:59:3f:74:dd:ee:bb:0d:47:e6:b5:1a:d0:
1f:07:9a:83:73:90:95:7b:a4:e1:2b:b8:51:d0:1f:
c3:d4:29:3c:2f:1c:19:a1:f7:ff:cd:41:38:26:6a:
f8:62:ba:5c:61:1b:54:8a:9f:5e:0c:98:07:81:75:
ce:db:cd:b1:96:5d:63:b0:e3:24:02:98:aa:c8:cb:
e4:10:86:f8:3b:29:80:09:61:68:02:51:08:61:8f:
b6:6a:8e:a0:a3:4b:ca:a5:8d:7a:3d:50:2f:33:78:
ba:de:27:26:84:d7:3a:27:59:1f:13:92:d6:3d:02:
9e:9b:af:e2:65:40:0d:cc:5d:cf:9d:e6:e0:94:07:
85:f1:1b:bf:b4:93:b3:15:19:e3:04:ef:7f:bf:e7:
aa:7a:7a:c8:39:65:fc:14:f6:eb:09:a9:c3:4b:47:
1b:db:3c:26:fe:30:64:2a:83:12:d6:a8:2f:95:00:
f1:2c:84:65:70:29:18:37:21:39:71:af:5a:a8:94:
e1:38:96:ef:34:3f:8e:37:b7:f3:40:cc:fc:59:7f:
7f:90:0a:51:32:13:c7:08:f1:51:a2:73:47:26:19:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:E7:C7:E6:10:01:98:0B:5B:1F:4C:C4:A6:68:F6:A6:CB:E1:39
X509v3 Authority Key Identifier:
keyid:5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:6f:c1:49:e5:22:1b:bf:c5:9a:87:92:59:2f:f5:a5:23:
f4:6d:f1:88:06:2e:d2:26:db:40:4e:96:a7:97:4e:74:92:3d:
cb:f1:c2:7c:73:52:2f:5c:0e:e2:b2:09:da:97:b4:2d:24:ba:
45:26:d4:b8:a7:36:1d:7d:3d:63:f7:85:f0:af:ec:3c:a7:18:
75:18:28:4f:6a:fb:fd:9c:e6:97:39:1a:54:15:e6:aa:a1:dd:
04:db:f4:34:43:f7:d6:4c:70:cf:f8:f4:8f:11:4a:3c:e0:d7:
99:f4:79:24:ad:8d:77:a5:93:e5:61:1c:d5:5c:cb:a2:a8:29:
8a:40:23:1a:c2:2f:f7:02:46:28:ca:56:b3:f3:a7:d5:44:b4:
a4:1e:b3:44:92:5b:d5:68:48:10:7c:3b:aa:7c:5f:ba:3d:95:
1a:4a:37:24:8b:c4:16:3f:84:e7:cc:b8:29:b3:28:c1:ff:15:
dd:12:9f:40:6f:bc:82:24:19:e8:6e:09:50:2e:41:3c:f4:82:
71:ad:e2:1a:fc:b6:4b:20:85:8d:04:16:ea:96:3b:2b:29:d5:
2d:6d:ff:e7:d4:ee:6b:d7:5d:cc:9b:60:32:c4:78:5a:67:26:
2c:cb:3f:04:4a:b3:73:fb:89:90:a3:ed:39:ee:61:51:f7:77:
c6:d4:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:56 2025 by rpki-client