Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File: WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier: wlj/xL5HbUJlTsTU5lT6aPTEBSoKl06btOwkGaxEKO8=
Subject key identifier: 49:6F:F2:25:F8:DC:75:2B:7A:23:C9:F1:56:E8:5F:F6:F9:D7:E8:A4
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer: /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial: 0194BCE0D9FC54A3109BCF17273692F50676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number: 0D17
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: tkNJ3/62XfAfzKtF62kK06a8qPK5MjkI1vH8MfHFEgA=)
2: ZXKWQfRE88E_ZwRT5Glhot_mt4w.roa (hash: XeEunBfn7xXqkXVhGJTEJsHjOb84Sh1nBv8wJiQd6M8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:fc:54:a3:10:9b:cf:17:27:36:92:f5:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=496ff225f8dc752b7a23c9f156e85ff6f9d7e8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:90:31:1a:39:ee:2c:1e:ec:4a:92:3a:b1:
5f:cc:b7:bd:48:a9:9e:c3:9c:0f:6f:d3:b7:6e:2a:
0a:48:08:ad:03:f2:c7:1b:e7:84:f4:5b:87:63:7b:
52:15:d6:62:5c:76:2e:e4:49:98:d0:da:07:6c:76:
cd:2f:0c:a3:bf:be:ac:14:89:fc:a5:6b:9e:f8:fe:
4d:ca:cf:c6:ae:a4:2e:f7:a1:21:2e:02:15:d7:9b:
10:29:ae:66:21:47:ce:a3:a9:46:e3:d6:d1:cf:4d:
bb:1f:c8:8b:f0:f6:ee:53:ef:b5:54:2a:37:89:23:
9f:79:de:da:38:6c:dc:3e:02:ff:63:75:c2:e6:ea:
50:12:49:c6:69:91:4e:38:99:02:86:d6:b3:ae:cf:
2f:00:38:9c:6a:93:a6:a9:5d:32:8e:4a:c1:64:fa:
22:9f:25:a6:71:9e:63:cc:dd:21:dd:15:30:cc:05:
5c:6d:08:d6:75:77:66:96:d6:aa:af:48:94:4a:fc:
86:a1:c7:30:c5:42:5b:97:68:8f:82:6c:c7:a7:fe:
4b:dd:67:ca:54:06:f9:74:ae:74:3e:b4:2c:58:73:
84:f3:02:ca:05:0e:f9:7f:8b:c0:6a:40:d0:2d:c7:
25:d5:21:80:17:6d:d8:5d:81:10:7a:ce:70:79:14:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:F2:25:F8:DC:75:2B:7A:23:C9:F1:56:E8:5F:F6:F9:D7:E8:A4
X509v3 Authority Key Identifier:
keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f6:f0:10:ce:bf:76:f2:0f:54:d7:54:50:ca:fb:42:9c:e1:
d9:09:f9:d6:61:28:b8:af:2e:56:71:a0:01:c8:8a:ce:5e:a2:
2b:68:83:ed:cf:d8:c5:28:b3:97:73:78:35:04:d8:7e:f8:ab:
84:5d:27:6d:c5:1c:11:c5:e8:05:06:c6:29:74:e8:99:d2:b0:
73:7f:6a:e1:ab:ff:7f:0e:55:af:41:e2:92:c6:0c:85:fa:f9:
1c:87:1f:88:01:89:ea:83:0b:3a:eb:73:9d:b2:c6:73:6f:7b:
d0:7f:aa:80:79:18:a5:84:c6:fc:2f:fa:f7:83:33:a2:fe:1a:
0e:ea:24:6a:64:8d:b9:d1:0c:89:20:dc:88:04:2d:58:25:f2:
76:bb:d0:f3:07:b8:1f:c9:2a:74:6c:30:32:db:47:45:58:05:
ba:1a:38:77:2c:35:35:cd:c3:a6:31:dc:6b:24:69:b6:27:8b:
b9:31:1e:ec:32:e4:1b:26:b1:60:04:0a:b7:b6:42:b0:a9:48:
b3:bc:f4:cb:2b:95:dc:00:c7:0b:93:d1:f9:66:28:19:69:cc:
c9:4d:f0:20:b2:d9:ae:0f:3f:cc:e7:49:5a:00:e2:62:66:4f:
47:90:e6:1b:e4:32:19:34:22:95:28:05:36:9a:32:83:25:93:
fd:a1:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:43 2025 by rpki-client