Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: pbxdKkpIqigBk6/CAErM+LwoKAlENoeYpIPTRZy7+2I=
Subject key identifier: 1F:05:F0:5D:2C:3D:05:B1:6A:1F:CC:87:33:E3:ED:55:B8:1E:1F:7A
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 0194BD17B3B63331913D22290AF3D44D7C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0C5A
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: gD83x7tr24j7Uxz2kyPSFEQMUIfK1HwS09E2cnz13ow=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:b6:33:31:91:3d:22:29:0a:f3:d4:4d:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=1f05f05d2c3d05b16a1fcc8733e3ed55b81e1f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:14:6b:8e:63:44:22:de:cd:9c:e3:93:1d:
fd:c1:2a:47:50:11:bc:da:e1:63:ce:ff:35:8a:ed:
35:a6:64:b7:6e:65:31:7f:22:3b:65:8a:22:fe:6e:
be:55:19:a7:f0:e0:0f:72:c6:f7:67:f2:74:d7:50:
ee:ef:74:c7:86:af:58:20:24:8c:bc:6f:57:a5:11:
b9:23:55:54:17:24:74:2d:fc:d7:79:3d:1d:01:01:
81:62:df:d7:b8:c9:38:e7:df:c1:28:fc:4c:95:1b:
06:87:20:3b:7e:ae:4d:9a:09:55:ab:8f:84:e7:9f:
c2:75:a6:41:07:5e:d5:70:81:b9:72:3e:dc:19:b1:
83:e8:02:fe:d1:3c:93:5c:e0:5b:58:69:07:77:94:
b3:88:9e:a5:4b:26:e7:f9:80:99:1e:5e:83:48:cc:
cb:7a:91:e6:04:67:0e:30:e5:a1:68:41:d8:08:55:
b9:49:33:01:c8:aa:83:c4:65:ab:a7:5e:14:e5:9f:
b9:40:41:10:50:bd:aa:28:00:17:fb:32:2e:0b:e7:
0a:78:92:7a:70:83:1a:a4:52:ad:20:fa:07:15:cf:
8e:fe:a2:06:bb:72:b4:50:de:12:3f:88:c1:ae:39:
bf:44:d2:66:ba:bf:f5:04:f4:84:15:25:ce:ce:b2:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:F0:5D:2C:3D:05:B1:6A:1F:CC:87:33:E3:ED:55:B8:1E:1F:7A
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:c9:98:2b:15:32:86:ac:73:78:86:55:ae:16:d6:42:7c:
b1:ac:54:6c:d7:e2:e5:8e:27:7c:b9:32:c7:3d:28:7c:e4:5a:
96:68:60:4b:56:a5:fe:98:a5:fe:ba:34:04:55:d4:08:ab:d9:
9f:f1:c3:7e:2d:c5:5f:3f:21:a4:19:a3:2f:a4:15:21:f4:35:
6d:59:c5:9a:cc:1b:28:16:be:03:1c:58:e5:79:d4:0c:06:64:
93:14:64:ea:70:41:3f:d8:a8:22:20:2e:76:9e:41:42:ff:b9:
48:f8:d6:7e:70:3a:2f:dd:8e:68:af:a0:f5:8d:7c:5c:ca:02:
53:46:f1:22:c5:0d:7c:7f:40:29:19:99:fc:9b:07:d0:b4:63:
2a:c2:22:78:ac:bd:d5:35:43:bf:b2:b9:57:87:39:a9:b5:5d:
08:2f:06:e8:35:d2:8a:0d:30:25:25:99:e7:86:51:3b:f3:b5:
bb:3e:aa:0e:8a:63:08:33:3c:c8:64:0a:b5:23:20:a2:34:74:
aa:dd:e0:f0:61:f4:c6:9a:07:2c:72:56:30:b0:e3:b2:db:45:
57:67:b6:63:51:95:91:70:98:d1:a3:ba:f6:37:5c:ff:78:8f:
f1:9e:60:c4:18:72:32:2d:31:90:d3:fe:5d:c6:d2:fe:ff:41:
48:79:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client