Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: j3XKOq1aewVR6NBKfEZWy3j3eR4d1rufKyZ8HkkXa78=
Subject key identifier: 22:22:68:76:12:4A:CD:3B:E0:11:37:11:1C:D7:3A:EF:2D:6E:4E:38
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0194BD85B79EFE37FA75F00EDCA2FF5B98CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 9NDvzR_WKUQO196L-TBCfw3PmmA.roa (hash: SlohtJFQX/x4xoPn1zolb9U015gVcD0ydJW/eKvlMPs=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: +xPkP7KBy0AysKM2Jo363CyP25tYZyoH9YbDUEsUkow=)
3: feuWbN684NC0tpApVi7tWaRcPd4.roa (hash: xnbqWg5wH1NxKTKlEYNAP3nAQw3zSSpqXFNEvSxFsxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:9e:fe:37:fa:75:f0:0e:dc:a2:ff:5b:98:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=22226876124acd3be01137111cd73aef2d6e4e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:e3:3b:0e:de:f3:d2:44:cb:a0:c7:ac:b3:
49:8a:35:c1:31:04:5a:24:b8:3f:62:6c:0d:9f:1f:
c3:6d:8f:f4:2f:6d:2d:8c:09:15:38:a2:db:67:85:
a7:9f:5a:c6:aa:1c:e4:d8:64:f5:47:d9:51:3a:ee:
f1:3a:f0:0b:57:d5:4d:ca:e9:29:3f:05:27:4e:18:
73:8d:df:62:93:93:09:e0:af:01:f8:f2:63:23:84:
2c:74:d5:7b:33:b1:04:a8:bd:af:e8:23:51:56:8c:
e9:c1:1b:c5:c9:b0:3f:44:02:1a:3d:18:46:4c:21:
24:29:2e:df:49:da:3b:a2:5a:cb:0f:80:d0:0c:15:
8c:af:02:41:74:93:70:a2:f9:29:15:a8:5e:98:aa:
1a:b3:1c:22:7e:04:34:d7:a2:96:b2:9e:d5:a2:18:
35:81:b4:83:35:f5:77:67:c6:dd:ea:8e:b5:d7:e3:
2d:0e:82:db:6a:96:68:9a:9c:24:cb:c5:e9:59:c8:
64:5b:c5:35:c9:a3:06:57:01:b8:37:1f:91:3c:72:
be:d9:07:2b:82:6c:d9:9d:62:6f:07:47:3b:d9:1d:
3a:8a:7e:e1:ff:8b:98:95:4c:74:93:76:ae:3d:6b:
a0:65:64:e3:23:f0:ad:7a:2b:ca:b9:5c:fd:89:75:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:68:76:12:4A:CD:3B:E0:11:37:11:1C:D7:3A:EF:2D:6E:4E:38
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:30:ee:cf:4c:a4:0f:65:94:bd:a1:33:5a:83:59:59:d1:
93:71:1b:51:c9:c2:b7:e7:73:c6:eb:d0:d6:5d:81:8d:3a:c2:
8f:6d:e1:b7:20:79:dd:3d:1d:13:ee:03:fa:f2:da:48:5e:f6:
a8:f6:fd:1e:74:96:37:ed:6b:03:70:17:1f:8b:64:7a:05:19:
13:98:9c:68:8f:01:3e:53:b4:70:76:9c:e8:f3:0c:36:e7:f6:
10:00:12:a1:b0:07:07:34:f0:9c:bc:60:93:b1:a3:72:02:ba:
35:0c:be:41:48:7a:c5:30:08:13:9e:8d:0a:bc:2a:79:c4:3e:
1e:eb:43:63:85:b4:ab:5f:f6:32:a9:45:3b:38:d4:eb:67:cd:
d8:f9:9a:59:42:2e:01:12:cb:39:d0:08:bb:16:e6:7c:47:54:
f3:48:63:0e:01:40:37:d1:d3:6c:86:f5:f8:e9:f4:d7:d0:a1:
50:61:68:bc:6e:ec:ce:5d:06:22:62:6f:cc:e8:3b:e2:ef:30:
2d:ac:7a:de:0f:80:0c:a4:94:47:b3:db:36:80:f3:52:88:8c:
a5:fa:17:f9:2d:3b:18:12:5d:97:e4:68:af:c3:1f:72:88:f2:
d8:56:f5:2a:61:1a:0a:a7:4b:27:2b:e2:41:7e:0b:d9:87:69:
36:ca:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:47 2025 by rpki-client