Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
File: WX_cXffB0EeLTfoykI2f-VgYrHg.mft (raw, json)
Hash identifier: 4yz/TmWi3sXk8Lcvfe0eF62hpJD/+lTNO/NEVgBwCB0=
Subject key identifier: 4B:73:CE:B6:4C:8E:C9:7D:80:0C:9F:42:3C:83:D5:59:0E:FD:8D:47
Authority key identifier: 59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
Certificate issuer: /CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
Certificate serial: 019424875651D1DC9B4ED5AE13BB1DC77E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
Manifest number: 0714
Signing time: Thu 02 Jan 2025 01:00:36 +0000
Manifest this update: Thu 02 Jan 2025 01:00:36 +0000
Manifest next update: Fri 03 Jan 2025 01:00:36 +0000
Files and hashes: 1: WX_cXffB0EeLTfoykI2f-VgYrHg.crl (hash: EKV9qvvO8PGlgSYq6ANabY8sgWzT/2FTnd7506GRrGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:87:56:51:d1:dc:9b:4e:d5:ae:13:bb:1d:c7:7e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
Validity
Not Before: Jan 2 01:00:36 2025 GMT
Not After : Jan 3 01:00:36 2025 GMT
Subject: CN=4b73ceb64c8ec97d800c9f423c83d5590efd8d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:78:f8:78:f5:53:6a:bc:25:1d:ff:aa:38:
58:84:47:3f:09:e9:db:77:82:6f:74:cf:fb:18:1f:
b9:b7:cc:c1:20:e3:9b:92:56:65:b3:5e:e5:d5:25:
ce:b6:23:ff:11:f8:35:8d:1d:d2:71:36:b2:9e:28:
e7:cf:06:76:6b:9d:37:c0:fc:06:ee:3e:31:19:7a:
1b:06:3a:32:b7:b5:98:cf:c7:a2:93:ec:99:38:ad:
99:89:4d:10:15:e4:47:f2:2b:69:86:3a:53:cf:3b:
e9:27:90:cf:26:18:29:30:12:28:7a:34:69:fb:5b:
6b:5d:50:5a:ab:fb:22:5e:2b:80:f1:2b:93:9d:67:
fc:86:4b:b2:26:e5:7b:05:c3:19:79:0b:8d:f0:b0:
05:f1:70:8a:64:92:61:a1:80:e6:b6:83:96:5a:69:
45:61:be:c2:76:09:20:56:7b:cd:69:06:4e:24:3b:
f5:86:20:5b:da:c1:cc:82:28:63:60:3b:18:ba:7c:
ce:85:c1:07:4f:0b:5b:92:77:ee:91:dd:e1:ca:e1:
ec:99:0d:34:8d:82:91:c4:08:a5:fa:a7:73:2c:45:
84:da:77:cd:9b:73:f9:60:6d:cb:a3:4a:e1:7d:1c:
fa:65:11:d7:73:70:1b:3c:79:a8:bc:21:74:df:a8:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:CE:B6:4C:8E:C9:7D:80:0C:9F:42:3C:83:D5:59:0E:FD:8D:47
X509v3 Authority Key Identifier:
keyid:59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:95:07:6c:4f:19:e3:0c:f6:6c:b2:2e:e7:f5:6a:4a:6a:64:
2d:fc:e7:70:57:36:0e:4a:35:16:9c:dc:0b:62:f0:31:cc:9d:
fb:2b:96:bc:1b:dc:58:55:11:32:ad:17:49:c9:54:0e:64:4f:
41:ba:dd:6b:66:d9:1a:57:9a:c3:c5:d8:7e:74:79:21:a0:67:
fa:f1:56:0d:d6:2f:4f:4d:6e:74:6a:0b:39:f8:03:5c:2b:0b:
49:19:6f:26:0a:4c:12:10:48:c6:da:3c:cb:e9:fc:bb:f5:a8:
5a:4f:5e:4e:f0:a8:4a:20:9a:0c:98:72:0f:dd:9d:98:e1:f7:
4d:d1:d8:ae:3f:cd:1b:73:b1:52:6d:fc:15:6f:df:49:ba:65:
d7:86:93:45:76:49:75:84:0c:b5:74:c4:84:af:01:6f:bb:0d:
73:7d:a5:40:bb:7e:71:2f:12:50:72:10:93:6e:f7:be:8b:81:
22:28:ca:cf:86:f9:03:cc:fd:1d:ff:6b:9b:1b:2a:06:cb:37:
d0:e6:20:17:77:7b:5c:b5:ba:29:b8:1c:20:6a:fd:42:0c:d3:
a5:57:6b:cf:69:93:74:ce:bb:95:9e:d4:dc:d2:53:57:e1:62:
f1:c6:94:e8:85:ab:e2:d7:24:e4:ea:ac:c1:6c:5c:a7:37:e7:
0e:25:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:20:47 2025 by rpki-client