Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
File: WLuO46dH7YtXhlfN1HN1hvX9uTE.mft (raw, json)
Hash identifier: Rojujz+SQmY7gBlcpPWHuMFkp5nCCXO1Gjb1MwvDhx8=
Subject key identifier: 11:C6:74:EE:78:97:A5:C0:BE:2E:FA:4C:29:29:7D:04:D2:E0:1D:C7
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 0194BC3BD447142311C9B7C5EC5CC3003EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 5uivWGsI0iTRyzBEkl59YbjDtGQ.roa (hash: tUdKNavwFJW6rcK5YGyzEy/WXlZrQdJmI2Ui9ai5uNU=)
2: BMAYKoufU7pujnEDum3l-Sh7Jm0.roa (hash: JCA/TWQlrOJKd5IE/d0Yfz64No5Tx1ptBD9+mN0UFqs=)
3: WLuO46dH7YtXhlfN1HN1hvX9uTE.crl (hash: OwC1k0JkbWTQSafp+oZmbLubg53JTh35/bXoW4h/QK4=)
4: _r9VXnRhX59SlkMjtvLRFSYFSEc.roa (hash: slFzMEPjDs6Sm1wwpBIppxAF68+f1ihfiQqqaYlV/do=)
5: iP8tkc04d0icUEokihMRUC5rwT4.roa (hash: 5/Iqdr1UvAnjLWd8y1HWmURDX4laReyrD4iFzOipf+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:47:14:23:11:c9:b7:c5:ec:5c:c3:00:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=11c674ee7897a5c0be2efa4c29297d04d2e01dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:93:db:83:51:80:c8:eb:0e:78:ce:6b:5a:
d9:eb:14:7e:4e:fd:81:cd:7a:e1:39:6d:f6:6e:4f:
6f:37:ed:7e:75:37:b4:72:80:8d:e1:5f:6a:f2:b4:
1f:90:41:41:08:6e:72:77:11:86:9c:4c:a8:96:8c:
c3:bd:99:4b:53:c9:02:5c:e4:49:db:32:e3:75:3b:
d0:e6:41:83:7e:0f:53:ea:bc:d6:1a:a9:8c:2c:7c:
73:09:2c:4e:24:a1:11:d2:06:70:a9:fe:9f:9d:a8:
75:30:ec:f2:59:98:e5:9e:35:29:3b:ae:14:fd:12:
91:9a:be:21:c5:de:27:b0:6b:9a:1a:16:8a:14:e8:
88:ce:70:1d:a2:32:d4:67:c9:14:ac:29:22:cd:78:
fc:34:74:87:6f:66:85:46:22:58:99:ae:7b:52:03:
0b:a4:e9:90:21:7a:dd:30:28:95:06:75:a2:20:e3:
f2:a3:24:d5:aa:17:cf:dd:37:ca:27:ba:f1:be:ba:
8d:70:a0:ce:b4:d0:81:7a:b2:b4:7e:04:dd:c6:f2:
be:dd:e6:39:c1:42:f4:69:66:cd:6a:ed:e3:e9:57:
dc:20:73:f2:95:fa:4e:db:87:a4:90:44:b8:12:1f:
81:03:df:9f:07:2d:9b:2c:0e:9c:22:2d:20:73:17:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:74:EE:78:97:A5:C0:BE:2E:FA:4C:29:29:7D:04:D2:E0:1D:C7
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:02:83:56:60:6b:ea:4b:0b:6d:0e:09:f0:d0:2a:ff:8a:
cc:1c:c9:65:c6:58:9e:94:d9:c4:4d:4f:dd:f7:84:7b:f1:77:
dc:74:ae:2e:53:e8:f5:41:a8:a4:9a:4e:59:4f:0b:e7:37:3d:
21:73:d5:38:9f:b4:4b:de:cb:8d:ea:5d:3f:51:34:d6:fe:47:
65:93:98:ce:cc:59:c6:c9:7b:6b:31:93:b9:10:22:0f:7c:4f:
35:3d:50:dd:d9:10:54:b8:8a:77:26:60:6d:fd:56:13:fd:b2:
da:e6:92:22:d5:2b:13:a9:cb:1c:52:14:a3:29:2b:5f:13:aa:
13:67:f9:1c:be:95:d7:5e:38:dd:30:fd:f6:cf:c9:40:f7:e3:
ea:f8:fe:b3:65:ff:9f:49:44:4f:f6:35:35:52:f7:49:bb:b5:
25:2c:5d:8d:e5:d7:f0:55:36:1a:8c:44:a4:a8:6e:ec:cc:3b:
89:d6:9a:de:d7:1d:b8:58:14:26:dd:47:d8:55:98:35:f1:b7:
b9:49:9d:f6:e5:47:0a:32:e0:70:b6:b8:e5:ce:de:0e:c7:25:
8b:6f:fa:1b:26:8c:64:7f:62:6b:57:bd:b8:93:f9:ba:45:68:
4e:b9:a0:80:03:d8:9b:6c:09:e9:13:2e:52:27:9e:f5:69:48:
ad:3a:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:41 2025 by rpki-client