Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: Gwo6HD/od+9gXkqwYSj47OCug1DqhyOwwagwCZkNPcI=
Subject key identifier: A5:E9:EA:B8:B7:F8:55:10:D9:DB:C9:64:E6:43:5D:78:27:92:37:15
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 0194BCAA04C39473569C1C570481A451C19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0637
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: KCWaCnY3aEHIgK58R3H4FHaqUx4.roa (hash: w8mfp+HqNmBu2EhMLrBbv1ohJamr7CfX45+BqPKjkdk=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: r7noU7CgFBXTW92/qnq+YMM0KNnDYPCu29WiMWz/Dkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:c3:94:73:56:9c:1c:57:04:81:a4:51:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=a5e9eab8b7f85510d9dbc964e6435d7827923715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:68:3a:d8:34:39:b2:f9:34:fa:f5:4d:b9:
90:f8:f6:de:74:0c:3c:8e:38:ae:97:42:e2:15:b8:
8f:ba:cb:46:83:45:59:8c:83:05:3a:e5:75:97:cc:
40:11:66:8f:24:24:ef:36:b7:fb:1c:05:18:61:b2:
fd:29:7d:0c:ef:08:47:c1:cb:f8:b0:2e:db:c1:01:
37:2a:67:34:19:f0:ff:dc:f9:f2:48:bc:55:28:43:
b8:e1:a9:7f:bb:aa:e2:e3:a1:a4:5e:5c:50:d3:f8:
48:ca:e6:bf:8e:13:66:6f:ea:65:fb:75:4e:0b:28:
12:05:31:9a:d5:81:ba:4f:6a:1b:1c:7f:04:81:a8:
0a:51:26:da:ff:92:f4:7a:1a:2b:74:a4:dd:d4:61:
54:57:0e:e4:f2:fb:ef:70:9b:91:64:d8:eb:2b:74:
a5:04:49:5a:a9:3b:61:97:d9:b0:5a:c9:4f:7e:8f:
c0:f9:33:e5:b6:ac:fa:1c:34:67:a1:c5:2c:96:28:
52:3c:cc:69:f0:5b:d1:66:82:8c:13:23:d7:47:8a:
6b:56:ec:83:0d:50:90:90:12:9f:2b:7c:6a:73:d6:
d4:af:bd:f0:80:b7:7a:1a:65:4b:9a:67:10:de:0f:
86:5b:93:b5:d3:d2:57:33:ea:71:ba:2c:8e:a8:59:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:EA:B8:B7:F8:55:10:D9:DB:C9:64:E6:43:5D:78:27:92:37:15
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:07:7d:7f:f7:95:45:da:e9:bf:30:96:f3:de:d9:48:b0:
64:a1:ec:47:ef:f6:0a:7e:5e:2a:c9:c0:6d:44:80:a0:56:f9:
7f:da:af:a1:30:62:ac:1c:7f:a7:8d:8e:c0:58:57:6d:63:f0:
5e:63:c2:33:3a:2e:82:3b:fb:fe:6c:2b:43:b9:c9:46:72:9c:
69:b6:5a:41:be:12:06:7b:e3:15:d8:88:46:82:81:b0:2a:8a:
03:5b:93:dc:17:25:5c:c7:59:bb:ea:c6:e4:6b:e1:a0:cb:ac:
b9:8e:2c:0f:e6:07:5c:6e:a9:3f:dc:04:1e:d7:e4:17:92:16:
b4:81:91:b7:26:52:52:bd:80:4d:1b:95:69:e1:43:06:2e:d0:
af:23:ba:b1:d7:8f:01:ae:ed:86:ae:8e:59:1f:2c:dc:11:e1:
56:82:79:c6:c5:2a:a7:60:5e:e6:6c:bf:0e:82:ba:2f:2b:82:
f1:ae:07:4f:0d:1e:50:2e:53:b4:dd:58:30:a0:75:13:35:98:
5c:05:33:7f:98:91:ac:7f:e5:7c:e5:d6:03:4e:1e:8e:87:52:
cc:0d:02:07:bc:66:63:b7:59:ab:fb:be:cf:40:1c:fb:03:6e:
b3:77:d6:35:2f:53:a0:6d:ae:47:57:4d:f6:9d:11:08:13:33:
6a:30:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:04 2025 by rpki-client