Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: Tdr20O7QSnqKLNI5ZtwSnOm1FeJyV6/U7fOYt0mETzk=
Subject key identifier: 56:B6:48:61:1B:88:4A:E5:42:A3:55:81:0D:00:0C:4B:11:F2:79:45
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 0194BC04B96EA52FA263D3D4E0F6B90FFA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 1314
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: xyTDBYuhBdZMkLBZyHuMqfEG5U9zoBqFjveOkc5TI2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:6e:a5:2f:a2:63:d3:d4:e0:f6:b9:0f:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=56b648611b884ae542a355810d000c4b11f27945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:d2:8d:e1:a7:17:e5:98:89:0d:95:d9:c2:
43:84:34:3f:ae:46:ff:91:22:09:3c:2f:f2:42:d2:
1d:94:73:ca:f4:15:a5:3c:47:5c:b8:9f:4c:7c:eb:
b5:83:cf:d8:4c:6c:cb:64:d8:ca:ba:78:00:69:bd:
e3:63:73:4e:5c:5a:f0:23:8a:cd:27:dd:62:bd:4c:
3c:c0:3e:0e:b9:83:42:74:e5:92:e4:77:4c:c2:21:
00:c4:91:90:6a:dd:1e:8f:83:c9:3f:b3:20:b2:ce:
19:0a:2f:f5:83:b2:10:15:a5:b4:cb:2c:99:f9:85:
73:59:0c:7f:9b:d4:d7:73:62:34:ed:70:cb:66:16:
26:83:3b:da:e8:4c:82:b0:67:49:36:ec:e7:1e:8c:
4a:5c:08:69:ef:7d:fe:22:b8:b6:cf:3d:38:e4:17:
c2:48:90:4a:68:68:63:5e:9d:5e:1a:47:8f:e3:e4:
10:2a:94:53:88:8a:5a:7c:1d:6c:d6:ef:0a:07:c1:
92:a3:aa:4a:7a:01:6f:2c:e4:7c:c1:2a:9d:be:c3:
a5:5e:c6:3c:3e:cf:2a:eb:b8:29:cd:d5:40:e4:84:
ec:50:06:94:75:d3:cd:9e:80:49:35:93:12:50:9f:
e3:a1:c5:2a:e5:0b:5a:e3:81:ed:ff:72:0c:8c:07:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:48:61:1B:88:4A:E5:42:A3:55:81:0D:00:0C:4B:11:F2:79:45
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:1c:f2:1c:a5:c1:34:5b:a7:09:50:b4:b7:89:f2:96:31:
3c:91:00:38:98:2e:af:ce:b8:40:d2:18:f5:85:aa:21:58:ea:
b5:0e:25:82:84:33:1a:06:d3:05:e3:f1:7c:48:52:6d:ff:ba:
55:39:09:66:7c:e4:09:ff:34:08:3a:a3:32:15:79:89:c3:3c:
2f:24:18:d8:b8:c6:8d:a2:65:97:9f:ff:4c:9f:43:7d:28:e3:
72:a1:47:5f:74:76:70:0a:a7:64:d9:ca:47:8d:e8:23:29:d5:
b5:92:b4:5d:d5:57:c8:3d:7c:34:0a:4e:1e:5a:e8:c8:1c:9c:
cc:35:5e:49:6b:29:46:58:dc:9f:b3:ca:b8:4a:c0:b2:0f:ac:
11:b2:1a:33:73:98:90:60:ac:90:28:5b:51:b9:1e:e7:4b:b8:
45:56:1f:ef:b8:f0:3b:99:8d:aa:66:88:6a:99:9a:70:f4:94:
67:6d:2a:fa:02:01:af:2c:31:98:58:18:d7:1e:b4:6e:a4:f5:
22:c0:eb:d2:07:a9:8d:3d:11:a4:34:34:4a:a8:dd:11:46:b6:
9e:88:ae:74:7b:6f:8f:b7:08:33:36:d8:21:be:70:cd:58:2c:
97:ca:92:4e:44:c2:5f:3f:95:a0:b6:d9:65:a5:3e:fd:d3:a8:
54:2c:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:28 2025 by rpki-client