Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9ca9bc-e41c-4931-9d9d-ead096812626/1/WmfaTFrL0NmgYvkXxXbfNKzUM0M.mft
File: WmfaTFrL0NmgYvkXxXbfNKzUM0M.mft (raw, json)
Hash identifier: DD+MesA1ut1kC4sS6iCc6uAkCzYmPb/v0Yp9xIGw1D8=
Subject key identifier: 5B:71:5E:3F:3B:03:84:8D:52:DC:90:0A:84:91:72:0B:32:E8:ED:8A
Authority key identifier: 5A:67:DA:4C:5A:CB:D0:D9:A0:62:F9:17:C5:76:DF:34:AC:D4:33:43
Certificate issuer: /CN=5a67da4c5acbd0d9a062f917c576df34acd43343
Certificate serial: 018D1AF15A6E887344626BF7359A6113B3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmfaTFrL0NmgYvkXxXbfNKzUM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9ca9bc-e41c-4931-9d9d-ead096812626/1/WmfaTFrL0NmgYvkXxXbfNKzUM0M.mft
Manifest number: 1036
Signing time: Thu 18 Jan 2024 05:00:41 +0000
Manifest this update: Thu 18 Jan 2024 05:00:41 +0000
Manifest next update: Fri 19 Jan 2024 05:00:41 +0000
Files and hashes: 1: ObJPv8GIizkz8ZAc47_pIKvri6s.roa (hash: Fv2JPn0osGIcKfdWtwpBtTQnLP7E4KJOG62/XGk8gkg=)
2: WmfaTFrL0NmgYvkXxXbfNKzUM0M.crl (hash: gL/16f6O2kFmb7JVlXF/GQAVqmcyCjjWc8KWI2JGLJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:f1:5a:6e:88:73:44:62:6b:f7:35:9a:61:13:b3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a67da4c5acbd0d9a062f917c576df34acd43343
Validity
Not Before: Jan 18 05:00:41 2024 GMT
Not After : Jan 19 05:00:41 2024 GMT
Subject: CN=5b715e3f3b03848d52dc900a8491720b32e8ed8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:11:ba:8b:f8:0a:32:19:c1:17:9e:16:42:
e7:ea:ec:e1:f5:81:d8:d1:29:52:fb:4a:40:24:ba:
78:d1:dd:81:06:bd:f2:be:1e:3d:94:94:fa:fc:6f:
0f:b1:38:51:66:0f:4e:4b:7b:12:a3:dd:58:02:56:
a4:71:7c:cd:c3:c1:cc:e1:c1:9f:67:d8:46:88:a9:
8b:87:05:d5:fb:97:e0:cc:9d:ab:86:a9:a9:d5:34:
23:93:5c:7e:a2:51:1e:8d:d9:8d:96:7c:6e:b9:54:
02:6c:f8:e5:ea:66:67:45:b3:44:de:17:c1:64:cc:
2b:80:69:41:22:61:bb:b9:89:49:b0:d1:d2:2e:1e:
e7:59:e8:43:fa:8d:3e:2b:71:40:61:1a:77:d4:4b:
17:34:7a:e8:09:b0:4c:4e:74:c5:b3:17:91:96:59:
05:a8:03:60:08:d1:ad:a4:5c:54:02:46:52:b7:bf:
52:76:b3:fb:03:36:d6:f0:7f:28:c9:26:e4:93:a9:
9b:d3:ec:e8:33:60:dc:40:c2:86:e1:f0:50:b9:01:
4d:22:99:c2:2d:d1:bc:3a:93:ea:44:1c:8c:18:8c:
37:8a:26:6e:04:c0:5a:93:c7:3a:9c:f4:36:7f:93:
5c:0e:ae:d7:5f:18:c5:d4:d3:0b:f2:90:82:42:c7:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:5E:3F:3B:03:84:8D:52:DC:90:0A:84:91:72:0B:32:E8:ED:8A
X509v3 Authority Key Identifier:
keyid:5A:67:DA:4C:5A:CB:D0:D9:A0:62:F9:17:C5:76:DF:34:AC:D4:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmfaTFrL0NmgYvkXxXbfNKzUM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ca9bc-e41c-4931-9d9d-ead096812626/1/WmfaTFrL0NmgYvkXxXbfNKzUM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ca9bc-e41c-4931-9d9d-ead096812626/1/WmfaTFrL0NmgYvkXxXbfNKzUM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:69:40:12:fd:93:06:58:45:c0:ff:27:5c:65:f4:a2:64:7b:
39:75:5c:52:25:5e:c4:db:50:39:38:58:6d:e0:e7:77:2a:62:
49:bc:a6:0f:52:e5:ef:64:79:a5:ac:ef:74:41:5b:4b:24:47:
4c:94:f7:7f:90:0e:eb:5e:63:7f:a9:ca:a9:68:3a:15:c0:c7:
48:e7:0c:87:75:e2:16:72:3e:33:a9:4d:b6:cb:ef:08:41:f3:
b3:9d:a1:54:7d:07:ab:09:98:25:37:1e:81:69:14:bf:78:83:
97:12:cc:63:96:4a:9d:3b:f4:02:9f:ed:ea:66:c7:1d:e6:6f:
95:27:54:b9:60:1f:ae:12:91:34:5a:50:51:9e:b8:d3:de:f4:
3a:5d:ac:58:26:c5:bb:43:4c:93:91:d7:08:c4:56:7e:4c:cd:
f0:41:d5:a5:e8:e2:d9:e4:1a:07:6e:d0:d7:48:86:b2:7f:b6:
70:88:ce:43:8f:0a:6b:d5:63:2d:2b:7f:7e:14:f4:70:f2:36:
fb:ee:4f:2b:bb:17:d1:c4:60:d8:9e:74:3a:32:52:8e:66:97:
ba:9b:a7:b6:ec:0d:ad:10:88:e4:79:ef:98:8d:d3:bb:95:43:
31:f8:42:42:18:c6:5b:97:db:cd:16:9b:d5:9c:8a:b9:02:46:
d9:e5:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:59:31 2025 by rpki-client