Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File: WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier: vtXG5GfBleCJFE62QCd9WSPuWGleKybcimtCOjuxOIE=
Subject key identifier: 7C:94:14:53:9E:CA:C6:04:E4:E3:7D:CC:85:6A:C8:4B:1F:AC:73:28
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 0194BCA9A7BE1E7D34A6B8E1152818BB1229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number: 0ED4
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: YLsHdPGGchjG4+0Up60M7cT73IpOhryHtXltHp7pF8Q=)
2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:be:1e:7d:34:a6:b8:e1:15:28:18:bb:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=7c9414539ecac604e4e37dcc856ac84b1fac7328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:d3:a0:fb:15:21:25:24:72:42:41:1b:17:
98:bf:2f:5a:c8:d5:5a:78:8c:6b:81:e2:91:57:ef:
f4:db:ac:e0:02:a8:0b:cb:ba:b0:49:8d:30:7e:2c:
57:54:9a:7c:1c:04:92:8b:0b:59:d4:33:70:0d:bb:
92:a7:f5:ef:3c:89:38:ee:bb:8c:b4:0b:54:03:2f:
bb:0a:e2:b4:44:cd:5e:7a:f8:f5:4d:60:57:86:1f:
f0:ef:0b:67:b1:cb:2d:12:26:69:52:d3:14:ad:1d:
c0:1d:f2:a5:55:2b:cd:3c:25:f8:68:21:ae:63:e1:
3a:cd:73:2a:41:2e:59:78:dd:f2:df:29:e2:31:c9:
30:e2:22:43:08:0b:15:06:bd:65:3f:5e:83:1b:21:
dc:4e:0a:f5:bf:25:c0:2d:e7:99:a0:d6:05:b9:c4:
46:fb:bf:42:d5:2d:6e:fc:83:0c:3f:b0:15:23:51:
ea:d1:b6:83:a1:8e:74:62:7e:5b:4d:e2:41:3e:7a:
47:98:f3:a2:cd:cf:84:b4:a4:cc:37:f5:02:c3:66:
f1:df:63:f0:af:4b:91:53:37:42:dc:76:71:65:86:
c8:26:b5:f8:de:78:a9:1b:29:dc:fa:e4:0a:7c:b4:
66:80:11:50:ee:14:bb:6a:33:ab:bc:9c:82:53:c1:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:14:53:9E:CA:C6:04:E4:E3:7D:CC:85:6A:C8:4B:1F:AC:73:28
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:7c:fb:d5:2b:f2:76:25:be:49:18:94:28:66:9f:aa:a8:
fd:50:16:a2:c6:6e:37:18:93:b8:41:d1:aa:a8:3e:d6:ad:f4:
f0:87:21:d7:c9:c6:07:e3:f5:19:74:f8:f2:85:16:b6:9e:44:
f5:83:a2:f8:19:d1:25:cb:fe:f1:ef:e5:62:e1:11:e5:04:32:
ec:c0:95:c9:f0:e0:8f:c4:4c:95:7a:48:d6:ab:36:b2:11:77:
95:9e:81:2f:1e:0f:c3:5e:74:41:2d:bf:05:ae:d3:da:c7:1d:
0a:cb:96:3f:fc:71:e4:4b:9b:bf:77:d8:8c:3e:51:78:80:b8:
ee:0d:98:26:1e:a6:d0:e3:a1:d5:c0:c3:a5:73:64:1a:d5:d2:
20:ed:73:c7:46:12:69:07:6c:5f:8f:7c:f1:70:60:fd:7c:4f:
df:72:eb:ca:73:69:5c:77:9a:b2:d1:e9:71:41:61:a8:69:be:
5f:5b:e6:34:53:c7:06:2c:f7:0a:ee:23:9d:93:6b:08:2f:e9:
7f:3d:36:aa:ac:5e:fc:ad:11:73:bc:d6:81:14:db:88:d5:8b:
f8:84:be:45:ab:9a:e3:86:69:04:e4:22:52:31:6a:4d:49:0e:
4b:d7:d4:a3:8d:1c:30:1d:57:f8:64:54:5a:b7:5e:2b:7e:88:
08:c4:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client