Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
File: WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft (raw, json)
Hash identifier: a2D2zRykT5Ubo6F+5c1/aVrDGuQzYUM0QP5vpeRtTMw=
Subject key identifier: 48:4F:E9:E9:E7:49:F5:AC:E8:DE:0E:BC:72:EF:CF:22:B8:39:8E:2C
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Certificate issuer: /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial: 01961F93613BACF2F438C459419D84C9F3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
Manifest number: 057D
Signing time: Thu 10 Apr 2025 12:01:14 +0000
Manifest this update: Thu 10 Apr 2025 12:01:14 +0000
Manifest next update: Fri 11 Apr 2025 12:01:14 +0000
Files and hashes: 1: M1JMBMjlsJbVljDt2PzSy5MjCBw.roa (hash: sQKzTWvI6Di9zG+70fZhGo8ykxUqEGqnJHybbUE2olY=)
2: WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl (hash: 8cTJeyHdvoaQVOWVmrcvV+o3V8QWJ9GCUMFJNd7d75A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:93:61:3b:ac:f2:f4:38:c4:59:41:9d:84:c9:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
Validity
Not Before: Apr 10 12:01:14 2025 GMT
Not After : Apr 11 12:01:14 2025 GMT
Subject: CN=484fe9e9e749f5ace8de0ebc72efcf22b8398e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:bb:dd:64:da:b6:ef:d9:bc:03:79:cf:3c:
0e:99:9a:f1:21:59:36:8f:dc:fb:3a:05:53:40:7a:
d1:e7:bb:ff:9f:0c:29:b1:96:2b:f9:b7:b7:98:b2:
6d:28:f9:97:78:92:a4:6d:e6:08:e0:c6:80:04:b3:
a7:3f:64:88:90:da:4e:1f:9b:13:0e:63:d9:65:28:
93:09:f1:97:fe:03:0d:b8:dd:28:87:33:ba:26:06:
de:cc:15:48:96:43:59:62:d3:e9:29:4d:c8:da:d8:
44:1d:b6:b1:4d:4b:29:2b:b6:d4:c5:c7:69:80:f5:
e7:e2:23:a0:f0:1e:c4:08:fe:57:07:e1:fe:06:b8:
48:6e:c6:0d:bb:83:3c:02:4c:4b:bf:59:c3:eb:bb:
ff:92:49:d2:44:ca:6d:36:6a:f2:cf:c8:96:e6:57:
cf:37:c7:5f:85:c5:a6:f8:8d:2e:88:c8:95:48:44:
d2:69:6b:31:19:b3:31:4c:0d:0a:6f:0d:dd:89:10:
03:15:30:44:68:f2:11:d7:af:29:5d:ec:26:f5:ab:
11:89:37:2b:71:8b:e4:a8:23:63:30:88:dd:ab:fe:
96:fe:fa:21:47:d6:1e:95:9a:04:c2:50:08:61:7a:
1f:c9:8e:3f:59:59:fa:8e:86:ca:a1:25:fd:a2:39:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:E9:E9:E7:49:F5:AC:E8:DE:0E:BC:72:EF:CF:22:B8:39:8E:2C
X509v3 Authority Key Identifier:
keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:6c:e3:1f:f5:1c:fb:99:9c:c5:b8:fe:30:b3:62:d8:41:
83:81:1e:6b:19:6f:49:72:1b:1c:3d:27:9d:d2:45:13:95:47:
b9:c6:ed:32:a6:f6:44:5e:29:40:50:3b:f2:da:b2:ba:0d:d8:
4c:10:7c:9b:fa:f8:7c:6d:71:5e:08:3b:1d:2e:80:3a:79:79:
78:ed:65:93:f5:f7:7b:d2:14:da:c6:91:32:b9:bb:4c:58:f0:
0b:dd:fa:42:bb:b3:a4:a2:ab:7c:be:b5:45:38:34:dd:9f:af:
a0:32:49:5c:84:31:6a:0b:8b:63:6f:39:99:20:c1:ef:3f:28:
9d:b5:49:40:0d:05:11:8a:2e:c2:ea:52:09:55:fd:e1:66:8f:
39:10:a1:42:df:a2:7d:49:4f:af:06:56:d7:e6:b9:54:73:be:
35:07:65:3b:e6:36:cb:b4:16:27:cc:af:f0:ce:b6:12:c5:20:
b3:e0:96:82:1e:9f:4e:50:d5:5e:74:54:59:7f:0d:3b:da:63:
68:d3:9d:e5:50:d4:2b:d4:53:46:b2:11:8c:ef:c6:f6:1e:0f:
f8:4f:41:1a:5f:49:2d:94:3e:2e:d7:16:83:77:b2:ec:3d:cb:
4d:af:4c:17:03:a5:ed:be:8a:27:95:ff:af:e0:f0:48:1f:56:
7a:0d:a0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:13 2025 by rpki-client