Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File: WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier: kU9cANNVnL2q326+AffQ6ILDBsLf9lYSUvEOhudFjRc=
Subject key identifier: 1F:44:BC:13:99:DC:F1:55:9C:A3:66:92:95:5F:00:D1:43:0F:58:4A
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 0194BC3BD2C35E4032DC3E187AE9EFFEAA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: /oBSLsR9+xUrcBq4cBE9JuiUj0B7Ksdu+QOEd2zzmPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d2:c3:5e:40:32:dc:3e:18:7a:e9:ef:fe:aa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=1f44bc1399dcf1559ca36692955f00d1430f584a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:5c:86:a7:40:bc:fd:a7:3d:0a:46:b5:e6:
7a:1d:04:0c:8c:df:09:79:a8:d5:02:04:ba:f5:2b:
69:76:d6:3f:ef:5d:d3:d8:e2:34:34:4a:5e:22:9e:
dc:30:e2:3d:60:40:c6:54:06:d9:bd:26:44:a6:4c:
2e:e2:9b:3d:c2:e7:b5:d6:85:b3:f7:62:9d:9f:7d:
7d:51:63:76:31:d6:5c:8e:d3:50:91:81:9c:51:8d:
11:e8:51:d9:1d:4c:52:93:16:cb:8a:57:f3:b2:c2:
e1:51:9d:89:87:7b:8b:15:9f:fa:54:55:ff:a2:42:
df:fb:a3:63:34:d1:be:09:67:16:f5:ed:b2:51:d2:
f1:eb:5b:41:79:6a:47:77:81:d6:17:87:84:27:45:
e2:ea:66:68:f6:22:8e:38:91:9a:05:43:83:4b:9a:
0d:fe:61:f3:ee:73:98:c0:a7:36:21:96:e5:40:aa:
1c:d2:85:2d:ee:7b:8e:e9:d5:a2:0a:d9:c2:e3:5e:
5a:78:fb:05:9b:51:89:f9:fa:37:e4:86:9a:40:01:
3d:c0:95:3d:cd:a2:50:7b:0f:0b:59:b1:0c:10:8d:
26:ac:4a:ae:54:57:4f:9b:09:85:6d:ac:7d:ee:e0:
7d:4b:d6:55:c1:73:5a:c3:3a:58:8d:23:b3:10:21:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:BC:13:99:DC:F1:55:9C:A3:66:92:95:5F:00:D1:43:0F:58:4A
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:29:07:25:ba:b9:08:03:41:36:eb:e7:c1:70:8d:dc:70:ff:
09:ec:07:e0:fc:2b:99:46:7f:50:b0:7b:e5:53:d9:9e:fd:82:
c7:66:47:f2:1f:1d:09:e6:89:81:d4:26:24:f9:20:f0:a9:46:
87:36:3a:97:f1:0a:e4:3d:77:77:ec:59:73:6d:be:0a:42:92:
50:97:ea:d3:9a:51:e8:cc:2a:8e:df:04:cb:58:a8:b8:91:be:
a0:ff:8f:26:86:22:a0:8a:3a:9d:16:f3:1e:8e:f6:ff:70:88:
03:c4:cf:2b:db:e1:1b:fe:e8:9b:a3:78:18:1a:c2:54:7c:ac:
12:92:3a:77:37:69:e9:65:37:af:cd:a0:1c:77:17:a4:b6:e6:
20:bb:d4:1a:4d:68:48:55:78:e3:d9:3c:89:55:b1:df:c3:fd:
a5:5d:4b:e6:fe:16:3b:45:2c:28:82:3f:c0:4b:86:f4:11:1b:
b2:2c:ba:3d:69:a0:b4:ab:03:6a:25:47:72:91:f1:fb:d4:eb:
c5:8f:57:cb:ca:74:3c:35:e1:58:89:cf:f6:2c:cd:d6:a2:83:
53:2f:65:1b:72:76:48:50:28:4d:38:b4:71:6f:99:db:ba:0f:
ff:6a:ae:72:ed:49:2a:ae:23:ae:9d:0f:11:76:a3:98:30:76:
c6:f6:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:42 2025 by rpki-client