Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: xGKZSNzbkFkmijO6FUFnxIYRDslUP1muC54riLSzexw=
Subject key identifier: 6C:9B:79:85:A6:5A:F0:80:BB:4E:D2:79:70:0A:D6:96:22:5A:EB:A4
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 0194BC3BF827126DF12944EC04E2AC330BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 018D
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: eXuNa+G0tz0U3URbfEaDPwQapiHd9iXtCjwYsKkyqkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:27:12:6d:f1:29:44:ec:04:e2:ac:33:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=6c9b7985a65af080bb4ed279700ad696225aeba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:a0:0d:a2:6c:d3:8c:78:ea:f7:78:1c:d4:
66:1e:56:d1:bf:4e:54:13:27:de:d7:dc:47:7a:19:
86:3b:35:87:e0:6d:4e:36:98:5f:0f:19:e5:f8:fc:
87:b1:f0:fc:aa:f6:cf:89:ea:38:98:31:ec:e1:b1:
b6:e3:35:d9:12:83:50:a5:b5:84:61:68:34:4c:b6:
96:02:ad:49:c5:5f:00:c1:cd:26:6c:f2:d7:95:f9:
4b:05:a9:15:54:8a:3e:97:79:c2:b5:05:41:44:11:
2d:72:f4:9e:41:9a:cc:28:6f:81:00:cf:a3:c8:a4:
4d:74:f2:61:a9:a3:db:f5:91:eb:f8:a4:5d:08:bf:
6e:df:9a:4e:ab:72:57:e4:da:01:2d:0c:97:6f:7b:
7a:c4:0c:8b:14:ce:02:e8:1c:6b:04:69:66:f9:4f:
26:70:39:85:28:8e:d4:58:21:dd:c7:23:f9:45:3f:
09:23:9e:d9:f7:de:60:91:62:c5:69:76:0c:50:52:
5b:6c:9c:6a:be:21:ef:b7:c0:fa:89:ae:25:e6:92:
d0:4d:da:8c:04:c9:4b:23:86:bb:3f:ea:64:0e:45:
96:dc:c9:9e:0b:b4:61:fd:b9:8d:5b:f7:32:00:30:
9c:67:6c:58:b5:d6:1c:32:a5:64:75:9e:84:0f:01:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:79:85:A6:5A:F0:80:BB:4E:D2:79:70:0A:D6:96:22:5A:EB:A4
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:74:12:0f:cd:75:78:a0:d1:4a:48:52:98:a5:1e:b3:a9:1f:
61:10:91:db:b3:c8:81:66:13:f6:d9:a6:9f:8e:b5:31:22:4d:
61:a9:f4:9b:b9:c0:55:18:86:86:49:4b:52:f0:da:8e:33:a1:
8d:70:76:b4:05:87:50:15:dd:fc:f1:70:3a:24:1f:10:de:dc:
bb:2e:dc:2c:b2:ad:37:0b:f3:66:83:ac:f8:48:e3:d9:27:90:
4f:ad:63:02:a5:b5:ef:23:d7:3f:88:a8:50:77:3b:c2:72:8f:
86:0b:d0:5f:c3:8c:99:0f:3e:a7:4a:85:12:71:ac:d7:72:84:
c1:89:0a:b2:84:5f:b2:ab:c0:bc:f7:45:5f:0c:ab:e8:09:cc:
5c:54:fd:3a:90:ba:c4:f1:78:4e:f1:ec:ee:02:5e:ea:e0:ed:
4b:33:d3:ed:5d:fe:71:d2:1f:cf:8c:5e:94:8b:50:dc:1f:d3:
e3:e5:00:16:a8:1e:de:75:1c:32:90:e8:18:2a:ac:9f:2a:75:
f3:9d:3a:8e:b7:48:83:d4:c3:41:5c:b0:fc:43:9d:45:1e:c9:
8c:d0:80:cd:f2:02:35:66:c5:81:12:da:cd:f1:f9:6b:60:fc:
ba:fc:1b:95:0b:5b:30:f6:7d:9a:08:2d:37:36:54:b6:73:5f:
d9:c5:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client