Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: H+uGn7dLISbl6NcFM6GQNtlKPmJFS3oVddEAXD10dSA=
Subject key identifier: 9E:94:21:6E:AC:99:4C:A4:7B:7C:4F:75:9E:A1:AC:23:D6:83:93:26
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 0194BBCEA7ADD31154DF5C7C6E3E6A550779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: mppbzhAyAXEBnGK4+aWrPeNjyu3Ycq/4el8lI4Tccck=)
2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:ad:d3:11:54:df:5c:7c:6e:3e:6a:55:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=9e94216eac994ca47b7c4f759ea1ac23d6839326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:e7:7e:70:f1:4a:14:eb:93:7e:1f:92:d3:
fb:ee:79:74:1c:08:b1:bb:4f:67:38:3d:43:55:45:
9d:91:7c:cc:a1:43:d3:d5:9e:67:2e:8f:8d:5b:23:
a3:7a:5d:17:71:40:af:c9:27:56:dd:31:e3:2b:6e:
c9:d9:81:54:3f:9d:6f:43:eb:0b:30:57:45:b9:6d:
81:1f:c2:3d:ce:14:5d:31:3b:0b:9c:fe:f0:d6:e2:
14:00:ae:d1:07:c4:7d:dd:fa:61:88:8f:4b:16:b4:
12:64:6e:7a:f6:48:69:91:09:82:79:2d:09:08:0d:
39:98:5e:63:11:a0:ac:dd:10:52:9e:5d:b9:6a:67:
84:b4:0d:01:86:db:3c:00:65:a6:ab:0e:bf:03:11:
c2:32:b3:a7:91:4d:3c:14:2b:2e:f6:69:99:37:47:
64:76:45:c6:db:73:cd:d7:15:37:46:4e:14:6d:a6:
7a:7e:65:98:c3:7d:d3:fa:bc:5b:0f:29:21:cf:f5:
4d:e9:79:4e:33:96:87:04:76:6a:d0:5f:36:fe:fa:
29:65:64:ed:81:35:f2:f2:83:d0:63:de:ea:50:be:
11:4a:33:5b:36:bd:01:55:bb:62:9c:1a:c5:2a:12:
cc:0f:e8:a5:bd:54:8d:ac:9f:9b:49:3b:d0:3d:35:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:21:6E:AC:99:4C:A4:7B:7C:4F:75:9E:A1:AC:23:D6:83:93:26
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:2e:5a:99:22:3c:2b:9a:26:8d:c8:84:05:a2:4b:46:6a:
55:fb:b5:40:d9:58:b3:3c:62:ca:79:3b:17:09:12:4d:db:9a:
26:34:71:ae:3a:7a:15:5f:58:ef:38:fe:36:49:ea:20:81:44:
52:fd:98:2c:a3:0c:42:68:3e:5e:96:cb:77:0d:50:1c:b9:c9:
3d:b9:39:dd:3f:8a:1d:4b:87:09:f5:f7:2f:07:7c:98:a4:be:
23:46:07:0b:af:d6:5b:7e:27:ed:fb:c0:c6:12:65:1b:14:2a:
96:f9:cf:2e:26:d9:e1:74:15:e5:0f:53:af:ac:a9:4a:77:2f:
00:fd:0e:70:c7:67:9e:43:14:64:3c:c7:25:89:4a:bf:96:3d:
a4:75:b8:f9:28:74:c4:6a:91:57:e1:fa:6e:60:b4:9f:54:60:
57:6a:23:fe:c6:ce:24:a9:e1:90:b4:dd:51:8b:36:4e:52:8a:
2b:53:da:93:22:71:c1:26:92:65:d1:f9:24:0b:4f:b0:6c:1c:
c8:1d:89:7e:bd:2e:b7:fa:a6:93:cb:cd:f3:79:f6:95:cc:2b:
b8:26:f8:5e:86:45:ec:9e:9a:3d:f2:a1:09:a0:d7:42:64:8e:
c3:24:62:c9:50:a0:ae:6e:88:5e:36:f1:a7:8d:d6:8a:ca:53:
43:e5:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:04 2025 by rpki-client