Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
File: WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json)
Hash identifier: nOOKrz6ivN7OylaqGo2crsBdPyrcXhhyNUx97hv2ORQ=
Subject key identifier: CC:B0:97:95:FD:8F:8A:09:60:92:8A:4A:1E:47:7A:D4:D8:C0:24:31
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial: 0194BD17C39B0837D9BE9A7904FD2991272F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
Manifest number: 0B49
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: FJPH5tHNLf4jiEE+mjPeMC0nXLFdakWZNRamhIEHgcU=)
2: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (hash: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:9b:08:37:d9:be:9a:79:04:fd:29:91:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=ccb09795fd8f8a0960928a4a1e477ad4d8c02431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:c7:1d:28:7a:38:a7:1a:1d:9c:01:3c:ea:
8d:c2:7e:ec:20:c1:15:a6:02:1a:d8:61:37:ea:d7:
39:a9:b5:95:2e:64:a8:81:c7:76:55:9a:c9:1c:bb:
07:f4:c4:67:fa:ef:14:d3:d9:54:34:e0:1a:f0:ce:
da:72:3e:7a:20:75:ca:73:2b:02:9b:cf:d5:26:67:
58:95:9a:21:20:e8:25:4b:81:4b:d3:6f:71:97:f5:
7b:73:da:c6:48:df:61:3c:86:eb:67:f2:0f:20:77:
c2:d4:35:a3:67:33:56:e1:27:0b:c6:b3:e7:21:7a:
4b:e8:45:30:26:4d:db:5e:76:d3:2c:5b:fe:19:d2:
be:08:af:ae:6e:fe:cf:47:07:a1:48:9a:55:30:09:
82:9a:98:fb:37:23:6b:64:27:df:c6:66:f3:57:b9:
65:eb:e9:e0:ad:b5:19:1d:ca:47:3f:6b:22:1d:97:
f3:d1:29:a2:72:be:89:fc:33:b9:f2:1a:02:da:35:
f0:20:5e:80:48:5f:c5:30:c8:b8:45:36:33:18:49:
94:61:0c:fc:5c:02:40:34:3d:2c:25:cb:e4:aa:00:
3f:6e:41:58:f2:bf:61:12:55:51:ad:d4:08:2b:3f:
05:95:30:e9:89:63:5b:76:41:e5:7d:6a:6c:3f:0b:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:97:95:FD:8F:8A:09:60:92:8A:4A:1E:47:7A:D4:D8:C0:24:31
X509v3 Authority Key Identifier:
keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:48:ab:76:85:12:cd:4c:8a:64:53:d2:f5:e1:68:ea:41:0c:
6c:88:33:4b:03:26:c4:c1:31:d0:fb:af:0c:35:30:a0:fe:96:
12:80:24:73:58:7d:38:ac:49:02:23:c6:cd:04:0b:8b:ac:b3:
31:8e:78:b8:a3:ad:d0:a4:f0:57:dc:ef:43:7e:5d:61:02:84:
6c:f2:0a:d7:ac:c9:38:f5:01:c8:7c:60:7a:1b:bc:5d:f0:85:
92:1e:81:25:83:d4:8b:87:40:ea:62:7c:d9:ff:90:c7:ad:bf:
23:a2:86:57:23:c7:a1:74:4e:a0:f6:18:41:9b:b5:c0:b3:ff:
2e:c0:de:74:06:3b:7f:5c:bd:4a:85:c0:c2:4c:d6:52:ed:f5:
29:fc:df:d5:23:5c:e9:06:a3:61:1f:21:43:62:ec:24:82:f3:
e8:f9:bd:6d:13:45:dd:b8:e4:c4:cb:93:62:fb:a2:68:ab:e1:
4d:a1:95:ce:32:13:0a:8e:47:7d:5e:e1:2f:69:90:67:bb:e6:
90:6d:4d:f9:ae:51:8e:f4:52:81:ae:d0:b9:8d:ba:9b:73:62:
26:63:74:a0:e3:2e:6d:90:1b:6b:04:de:c8:36:47:6f:54:15:
60:f9:0f:8b:6d:f7:9d:cc:01:39:63:9f:bf:2c:7a:e5:f7:b8:
7a:7e:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:12 2025 by rpki-client