Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft
File: WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft (raw, json)
Hash identifier: 4fR05WoRmWndkxXzFZjvtkqBb41aOlXt7wEo+LJGpXE=
Subject key identifier: F0:E0:6A:7B:93:5D:A0:9B:81:BE:AC:BE:27:CD:5E:75:78:4A:64:4F
Authority key identifier: 5B:16:2F:8B:40:EF:7A:11:04:43:68:AA:DD:A3:AF:BE:49:3C:82:15
Certificate issuer: /CN=5b162f8b40ef7a11044368aadda3afbe493c8215
Certificate serial: 019426084461F2D663752482660F61C02F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxYvi0DvehEEQ2iq3aOvvkk8ghU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft
Manifest number: 0CD2
Signing time: Thu 02 Jan 2025 08:01:03 +0000
Manifest this update: Thu 02 Jan 2025 08:01:03 +0000
Manifest next update: Fri 03 Jan 2025 08:01:03 +0000
Files and hashes: 1: WxYvi0DvehEEQ2iq3aOvvkk8ghU.crl (hash: 3SAouUMoqAyYfqtXMM9v/y27ID9wPgqAXSAfih5t8GE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:08:44:61:f2:d6:63:75:24:82:66:0f:61:c0:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b162f8b40ef7a11044368aadda3afbe493c8215
Validity
Not Before: Jan 2 08:01:03 2025 GMT
Not After : Jan 3 08:01:03 2025 GMT
Subject: CN=f0e06a7b935da09b81beacbe27cd5e75784a644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:31:60:58:ca:76:94:79:55:7d:9c:d9:c1:
3b:5d:64:01:33:ba:0e:f0:4b:8b:5a:19:7c:40:e0:
b9:8a:33:9a:85:b7:98:c8:ec:cd:0c:d1:fe:45:62:
f1:5f:d0:c3:11:fe:f4:ae:f2:2c:b2:f9:a5:61:4d:
36:8a:02:5f:9b:d4:e6:81:73:51:15:4a:82:2d:91:
3f:50:e8:cb:81:01:41:b8:ca:26:c7:03:2b:d8:67:
98:1f:90:82:db:9e:06:6b:5e:f2:90:6b:8c:5a:56:
4f:cc:8a:8a:0b:76:28:58:c8:ba:6a:07:66:07:51:
17:42:a0:c1:9d:04:66:e5:e7:1e:87:3d:90:2b:61:
fa:d8:96:32:09:57:bb:a7:22:4b:3e:fb:33:c0:97:
a1:61:dc:1a:0b:bb:12:a0:d2:78:34:59:9a:fd:64:
ac:4e:0a:0a:d1:da:16:99:e0:1c:73:f1:f4:2f:66:
ce:35:6f:d0:43:62:39:17:fa:5f:76:8e:cb:88:ba:
d3:3f:20:5e:cc:ea:1c:cb:c8:6b:88:7a:b8:03:ef:
24:41:f3:d8:ff:ea:80:5c:7c:b9:5b:75:2c:87:57:
78:9f:61:6e:7c:a8:e0:a1:98:18:b2:6b:6d:91:6c:
7f:74:bb:7d:d8:14:52:e6:b2:ec:7a:a9:de:1d:17:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:6A:7B:93:5D:A0:9B:81:BE:AC:BE:27:CD:5E:75:78:4A:64:4F
X509v3 Authority Key Identifier:
keyid:5B:16:2F:8B:40:EF:7A:11:04:43:68:AA:DD:A3:AF:BE:49:3C:82:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxYvi0DvehEEQ2iq3aOvvkk8ghU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:b1:b1:26:c5:a9:af:f2:44:56:f9:80:d2:0e:e1:63:f6:
70:24:43:a6:a8:fc:21:62:32:db:96:68:55:65:af:61:b3:ec:
e2:d1:08:59:36:9d:75:e3:d4:d3:5b:6f:78:a2:84:bf:26:ff:
84:a3:5f:60:cc:af:c0:f3:89:07:00:92:ab:2c:c2:f9:41:78:
71:f7:5f:dd:18:f6:a7:e6:46:77:5d:22:15:61:58:51:ac:a3:
6a:9c:9f:a9:70:d5:f1:89:18:37:7b:e1:6e:32:2b:5a:4c:69:
c9:4b:61:27:15:e2:1a:79:d7:e5:29:e8:f8:8a:d6:17:53:ee:
f8:82:93:c2:92:5e:4a:e1:33:e9:11:53:4e:d5:8c:f6:b2:8d:
07:0f:63:c5:1a:6d:d3:fd:3b:9a:5f:d0:86:73:01:86:83:2e:
5b:10:5a:5d:02:46:bd:ef:9d:a8:58:75:34:10:70:11:38:33:
2c:01:d1:26:f8:bf:a8:5b:78:54:d3:e9:9f:aa:9c:ab:25:80:
3d:9f:22:19:6b:02:a4:69:82:02:c7:17:47:6d:2b:09:b4:69:
7b:2a:4e:95:99:0b:3b:ec:df:14:0e:73:5a:7f:f7:12:b0:2d:
89:b5:02:35:56:5d:f5:95:8e:d0:c1:93:a2:06:36:84:0f:c8:
79:25:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:44:45 2025 by rpki-client