Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: Fu11T8XIj8AoaMgXU7FbvCCMrZl0pGalOtFBED2IpRA=
Subject key identifier: 8B:0F:3F:F5:80:6D:43:06:33:9A:F7:FE:8E:9C:11:22:AB:CD:42:48
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 0195E1591832C847872490BB748C19A9FB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 10:01:07 +0000
Manifest this update: Sat 29 Mar 2025 10:01:07 +0000
Manifest next update: Sun 30 Mar 2025 10:01:07 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: Ld4fS8nFtyfmj3WmoI696oQzyLS18sN6KQD+2rWKolw=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:18:32:c8:47:87:24:90:bb:74:8c:19:a9:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Mar 29 10:01:07 2025 GMT
Not After : Mar 30 10:01:07 2025 GMT
Subject: CN=8b0f3ff5806d4306339af7fe8e9c1122abcd4248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:17:e6:6d:3c:c9:8f:8e:f2:42:a9:99:5f:
a0:bb:cd:4f:60:4b:44:41:44:1d:bd:a8:77:95:44:
22:e4:91:18:e9:94:b6:ef:34:3d:b3:a0:38:d6:bf:
93:f4:29:f8:34:f5:f5:75:fd:96:61:cd:b8:8f:8a:
86:dc:7e:34:66:4c:6d:4a:81:38:ba:3c:b6:bb:1f:
32:13:bd:4a:f0:41:eb:28:da:0b:94:b3:0a:3a:96:
01:28:22:d3:f4:43:a0:a6:d2:f7:d8:0f:31:9a:c7:
55:10:92:00:e1:7f:3f:8f:a3:05:ee:4d:e1:e1:89:
13:ac:1b:be:94:8b:1c:8d:14:db:33:79:07:61:3f:
7b:1a:de:75:d2:4f:71:ac:64:d6:41:7a:62:2e:fd:
d8:94:ce:75:67:cc:ab:ab:ba:66:15:26:e0:91:4d:
9a:a6:67:6a:81:ad:1e:4c:4d:4c:14:c5:23:9f:0f:
f9:9b:7e:da:22:01:19:c3:3e:ad:3b:a2:0f:1c:df:
14:b9:27:c5:ea:cc:02:35:f6:d4:2d:31:6d:d8:53:
a7:45:92:3e:14:b5:b8:c4:6c:3c:17:ea:65:ba:87:
79:30:0a:99:d3:e4:d5:cd:13:11:87:da:45:e2:4c:
c4:9b:24:ec:d2:d5:4c:bd:7a:d5:1d:ed:10:1c:99:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:3F:F5:80:6D:43:06:33:9A:F7:FE:8E:9C:11:22:AB:CD:42:48
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:75:bb:97:52:f7:56:92:d3:ea:c5:d4:3f:dd:34:4a:49:
18:55:91:b9:b0:be:81:6e:3e:d7:fd:2f:76:c0:06:af:d4:92:
b8:75:b9:4e:b6:cf:79:4f:19:90:14:b5:b7:c8:ed:d9:7f:1d:
d6:26:3b:1a:a9:05:c6:fe:4e:55:e0:71:54:1a:5d:cc:b8:9d:
f4:e0:1a:6d:45:26:30:de:30:20:e7:e8:70:23:9a:4e:2e:65:
13:06:e1:83:fe:3b:56:df:d6:d5:62:3b:85:fb:e2:b5:6b:f6:
5e:1a:2b:99:c5:01:89:fb:6f:ca:43:e1:64:0b:18:5d:ad:fd:
dc:4d:85:e6:7e:6a:ee:7e:a5:39:23:66:b5:cb:97:f5:e2:f0:
49:bd:56:ac:3d:a2:46:69:44:59:6f:f2:01:ca:9f:00:7e:13:
ad:d9:aa:2f:bc:c8:2d:6a:8b:2d:f3:c0:4a:5e:6a:8b:86:69:
36:82:18:12:76:61:4f:0c:60:78:ea:24:9d:bc:2a:13:02:3e:
70:fa:02:35:43:68:b2:ee:19:9c:be:eb:1e:9a:88:bc:4a:c5:
75:ca:82:4f:07:05:f1:f8:ac:dd:36:91:25:91:43:79:9d:10:
20:79:82:20:07:95:a7:69:49:db:15:94:b8:0b:c7:ad:3f:68:
5c:55:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:48 2025 by rpki-client