Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier: tX6sPeR6bCR4yTCj9o0t5aWIwWWT10V8e7lcroB4Csw=
Subject key identifier: F6:33:14:9C:74:69:CD:9C:F0:CE:24:C9:75:51:D9:DD:2A:62:8B:11
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial: 0194BBCEB6635C3A3F80A4B72A7940A05212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number: 0C70
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: L21YnT5amyV7jxcfWiA9rpuRJhRREEag58nTYlPzysU=)
2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:63:5c:3a:3f:80:a4:b7:2a:79:40:a0:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594b79990f616a8344c860148fc922910e154dad
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=f633149c7469cd9cf0ce24c97551d9dd2a628b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:a7:46:7c:e6:cf:e6:cc:e4:9e:36:52:89:
49:c4:a0:b5:ac:8d:44:ba:d2:59:d8:e0:16:48:7f:
72:4b:d7:90:a2:f0:76:9c:d3:53:b2:8f:f6:51:91:
08:f9:f8:1a:b1:fa:b1:d3:c6:97:62:f5:96:75:39:
34:83:77:6f:91:6e:8d:db:93:81:02:0a:24:35:b5:
c7:3b:55:22:19:72:ac:fd:a5:0a:db:8b:40:16:03:
b5:ac:07:8f:7a:8e:a1:30:0d:b5:a2:c0:b2:eb:6b:
02:12:85:a1:df:0f:3e:57:95:eb:03:28:8e:60:91:
a1:e4:51:d2:ed:d8:0f:9a:f7:d9:5f:4e:7b:18:26:
87:24:00:55:a9:b6:c2:03:3c:1b:bc:be:09:8e:9b:
ef:49:12:f7:64:b8:e2:01:26:3d:d8:ff:59:8a:0e:
c4:5e:fd:6e:60:01:90:5f:d8:8d:3e:6c:27:9b:ff:
fc:4d:fe:d4:d0:e3:0e:e3:9d:4b:7d:c2:0b:63:cb:
33:8d:72:53:54:7c:08:39:d5:c4:56:99:1b:cf:e0:
83:28:10:16:99:33:a9:e2:3e:2e:0c:e9:9f:40:47:
7f:d5:fb:00:2a:bd:83:7b:b3:e9:71:d7:a7:e1:b3:
28:9f:c5:ab:b2:0a:19:88:a1:43:0b:7a:10:fd:3d:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:14:9C:74:69:CD:9C:F0:CE:24:C9:75:51:D9:DD:2A:62:8B:11
X509v3 Authority Key Identifier:
keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c7:c6:4c:c0:93:f3:44:5a:0c:ea:4a:40:f5:80:23:65:84:
65:e2:9f:c1:43:9a:51:fc:fe:26:24:06:71:5e:1c:65:84:5e:
e4:17:62:ac:57:27:3e:30:91:cb:e8:88:3c:b8:eb:86:77:2f:
9d:f1:dd:c3:a5:62:ce:5d:e9:1a:ec:ce:c3:49:58:4e:81:29:
b2:91:44:09:e1:0d:5c:42:50:ce:02:f6:4a:dd:5c:76:39:ba:
3f:34:c9:29:db:a7:39:92:fc:73:1e:b8:68:a4:f4:1d:f2:61:
68:0b:1a:4d:f9:88:3c:a4:02:b8:a6:8e:8e:a9:3c:3a:bd:04:
c6:a9:72:a3:d9:be:c8:ab:9e:19:51:32:41:e3:67:b6:fb:eb:
1f:1e:9d:22:a8:a8:91:0e:20:1c:55:1f:a8:96:6b:90:08:d1:
e1:c8:69:59:b5:a1:8b:ed:fd:d9:86:d9:8d:2b:0d:94:8f:f3:
ca:1d:bd:20:ce:8e:61:db:bc:67:b9:9c:83:04:ec:bb:c3:55:
16:d9:9d:50:a4:00:82:3a:1b:21:95:73:ec:69:39:46:45:43:
46:b6:0a:c6:b3:4d:f5:4a:16:28:13:7b:6c:e3:c4:8d:15:6e:
c7:d6:95:71:33:5e:ea:3d:e5:2c:62:0a:97:59:58:f8:a5:40:
98:13:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:57 2025 by rpki-client