Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: RgfMdcKENdd5Za9/D1w/avNlzgPFG0bKlfrI9Kv9ufs=
Subject key identifier: 99:CD:D0:7E:2A:E8:96:90:AB:D1:45:50:1B:D8:A1:9E:6E:70:96:1B
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0194BD85397D4D0D0290BD9D797A25C7CB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0AB2
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: jrnEL7HCK1pmyGVpzMZ70fr2oN8aryhKAtnhN5MOZ+8=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:39:7d:4d:0d:02:90:bd:9d:79:7a:25:c7:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=99cdd07e2ae89690abd145501bd8a19e6e70961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:52:37:ec:01:89:fb:7c:10:0e:bb:a1:b3:
2b:63:b3:17:ff:b0:ba:78:18:ac:e8:0f:0a:27:50:
1a:c5:2b:93:70:9b:a5:f7:0d:7e:7b:3a:85:94:7e:
f4:11:7e:e9:20:33:31:9d:4d:28:03:28:b6:82:ce:
eb:87:e4:8b:76:12:f9:a2:b0:6b:b5:1e:72:b8:43:
e7:56:b3:85:0e:b9:cf:f7:e3:4e:2c:ba:21:65:cf:
f7:bf:3a:7c:10:3c:00:85:bd:6f:e4:7c:3e:0d:96:
02:62:7c:69:84:3c:1c:81:a2:04:96:2f:91:7e:cd:
9a:5d:c5:07:83:b3:86:12:10:0c:00:d8:8c:aa:57:
ee:55:da:f9:07:e1:12:10:31:51:f6:98:21:19:70:
63:e8:33:21:6f:37:d5:c0:6e:89:85:a5:28:d0:0d:
22:8c:ee:f1:44:67:17:13:97:49:ea:09:37:10:ab:
2a:48:43:83:6f:8d:1f:e7:eb:48:4b:fa:a1:eb:20:
47:c5:2b:9e:3e:79:36:9c:bd:ff:d9:25:87:1f:ad:
a6:08:2f:e9:11:7a:db:6b:ad:17:a4:cd:28:3c:15:
a0:26:23:d5:ae:58:d5:81:e9:f1:4e:a8:f5:ce:89:
c5:6c:99:ce:c8:b7:f9:a3:e8:41:55:78:a4:71:e4:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:D0:7E:2A:E8:96:90:AB:D1:45:50:1B:D8:A1:9E:6E:70:96:1B
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:ab:db:6d:bf:31:ad:7c:c5:2e:1d:7e:8c:2c:17:41:d3:
80:9d:a8:4d:d7:3e:50:a4:80:35:cc:19:40:ce:1e:15:4d:41:
76:32:00:9a:fd:29:2a:a0:11:6b:d7:ee:e3:22:2f:32:71:25:
66:f4:f6:16:66:f3:04:81:fd:83:92:d6:82:20:ac:7c:49:9f:
45:25:dc:3a:2b:4f:57:35:56:a5:71:4f:38:dc:91:aa:ed:c1:
9c:38:62:5f:0f:c9:db:05:cd:96:5a:ea:78:34:81:5b:27:55:
49:fa:05:03:30:4d:d9:31:cc:69:77:ac:54:7c:87:f7:4e:67:
bd:5d:b9:08:f2:3a:53:03:c1:ec:54:5c:7e:83:f1:b7:75:b1:
66:92:38:aa:8b:5f:b2:95:38:fb:69:d4:c6:90:e7:05:38:65:
f0:9a:e9:a7:7a:0c:22:de:fe:98:6a:de:c9:9e:c3:1c:86:fa:
54:15:d1:da:46:22:fe:13:e2:49:0d:55:43:14:f6:fa:6c:86:
48:a7:8a:23:65:03:bb:66:ca:ad:58:56:d6:b7:72:11:53:cf:
18:cc:13:2f:13:8f:93:5a:e8:82:36:44:39:7e:58:24:67:eb:
50:44:39:6c:83:17:fb:41:83:07:25:25:df:a9:6f:b6:e9:51:
6e:fd:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:45 2025 by rpki-client