Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: tgHpcw3KHOu9nbVO81XqmWjBwGySxiLiimJ7SAQA1XI=
Subject key identifier: C3:34:CD:6C:77:23:A5:43:42:89:30:01:F3:EA:4D:03:60:11:46:3B
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0194BBCEA7DD99308307ED8F51B9212BE789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1343
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: mrsubHLqRyKXcxMU/RyG8jggObo0a9+jSd5MzsF8dwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:dd:99:30:83:07:ed:8f:51:b9:21:2b:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=c334cd6c7723a54342893001f3ea4d036011463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:49:53:9c:b5:85:f1:bc:58:70:79:32:71:
af:6b:fb:13:aa:f0:3d:c0:90:35:1c:24:55:19:ba:
8f:c6:5b:14:cf:b3:81:57:cd:2e:2b:09:a7:bc:3e:
62:7c:a4:82:5e:c6:1c:90:c2:c5:3f:92:c5:a1:d1:
3a:cc:e8:23:7e:7e:99:05:52:c5:fa:2b:f4:90:67:
a4:7f:53:04:ab:18:a4:dc:73:cd:a6:49:81:1b:75:
4d:5e:b7:ba:d0:da:fd:cd:80:98:80:f5:5a:07:6a:
48:e7:09:4d:f7:67:52:12:c1:a2:46:0e:4e:3b:6c:
4b:99:bf:c8:71:05:13:fc:8f:65:9f:ec:b6:e9:b8:
2e:cb:8b:ff:7b:ba:f8:04:4b:f1:35:d9:07:61:69:
9f:fc:b3:38:eb:40:af:9b:35:0c:bb:2d:e1:ee:18:
20:cb:8d:bd:b0:e2:b4:1f:1a:48:5c:b9:e1:1e:ef:
86:40:f8:9f:86:46:7a:bc:e4:de:ce:b8:5f:48:26:
36:ee:5e:0f:5a:e6:07:64:48:70:be:0f:13:a1:b3:
3d:2d:36:e6:1f:91:2b:19:15:7c:c6:dd:b5:f7:69:
09:75:55:17:3c:97:26:c8:cc:36:87:71:60:47:2b:
8e:59:f3:b8:12:89:27:9a:62:31:0f:d7:0c:b0:fc:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:CD:6C:77:23:A5:43:42:89:30:01:F3:EA:4D:03:60:11:46:3B
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:9d:ef:6a:85:c0:4c:65:85:b0:3b:68:a4:da:13:5b:4e:
f4:17:af:37:c8:c9:fa:69:52:6d:51:3c:bc:84:35:15:be:17:
35:1b:cc:c1:98:20:36:5e:1f:f2:ad:cb:51:52:fd:ad:d9:ec:
fd:2b:3e:75:d3:31:ec:76:d4:56:b5:e6:6f:34:8b:3c:aa:37:
51:d6:22:f6:dc:cc:16:a5:61:b0:b9:fd:a1:89:a7:c5:08:03:
fd:0b:9b:75:00:b8:44:65:22:ec:ee:58:59:91:af:66:e8:0f:
ed:e3:b5:00:62:2c:f2:67:98:8a:a4:b6:c0:69:63:24:56:98:
f4:d7:9b:73:95:5d:27:0f:c4:bf:0d:b6:b7:4e:27:42:da:66:
d7:11:d7:46:e4:ff:d3:14:f8:04:d9:83:56:6a:78:f2:4f:64:
22:05:ee:ed:4e:ec:f9:15:8b:8c:c9:7b:2d:3a:aa:f9:bc:68:
e0:15:3b:34:9e:50:c7:83:a8:fb:28:b7:85:9e:f0:01:94:89:
8c:19:8c:01:f6:37:21:ce:79:15:18:e5:e6:bf:8d:38:3f:f8:
8b:e9:2c:d7:c9:d4:b7:b9:de:87:da:6a:94:26:9e:cf:7c:dd:
69:54:d2:96:90:b9:41:fe:31:90:c9:bc:9f:aa:cf:cc:13:ae:
58:16:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:39 2025 by rpki-client