Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
File: Wki138AUKmjDC9qsVQYD6eRdEIo.mft (raw, json)
Hash identifier: CZTBhfB+ApgY8e7zmcr+VyLyUKPZiOrsv/sdGVWLhH8=
Subject key identifier: 62:96:02:18:30:AF:59:DF:AB:23:50:6D:1A:D0:13:8E:48:03:F9:09
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Certificate issuer: /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial: 01970B9C96325266A902DAAFB6205A1873BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
Manifest number: 0CCD
Signing time: Mon 26 May 2025 08:01:40 +0000
Manifest this update: Mon 26 May 2025 08:01:40 +0000
Manifest next update: Tue 27 May 2025 08:01:40 +0000
Files and hashes: 1: Wki138AUKmjDC9qsVQYD6eRdEIo.crl (hash: bQ7IVIoxM/PIMSIjSNPwoEu+dWmAXD4MqubXipFjP1M=)
2: qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa (hash: IfGwXhsO4LUshRhgsyNsDeEfXeX5DUDuXfY5jcbXNqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:9c:96:32:52:66:a9:02:da:af:b6:20:5a:18:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Validity
Not Before: May 26 08:01:40 2025 GMT
Not After : May 27 08:01:40 2025 GMT
Subject: CN=6296021830af59dfab23506d1ad0138e4803f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:d8:98:05:d0:6e:44:bf:93:60:82:70:78:
76:c8:74:c8:48:b0:c1:eb:f3:f4:b4:9c:78:04:af:
ad:56:2a:ab:34:e5:98:29:5a:a4:79:8a:f5:85:44:
6a:aa:d6:9b:2e:a6:c2:0c:5e:67:c0:b9:89:f9:fa:
b3:22:28:d2:3c:61:e1:b8:ec:59:3d:30:87:1f:c2:
0d:5f:0b:ae:c1:40:c4:ed:1b:63:17:24:f1:d9:ca:
3b:fe:78:75:25:8c:be:b3:8f:91:e8:bc:ee:bc:99:
dc:36:04:0e:68:7a:02:db:fa:e5:5c:80:61:ba:e3:
bc:5e:35:18:4d:40:09:3a:36:83:0f:cf:0c:9b:fc:
06:d5:63:84:2d:c7:c9:8c:dd:80:47:7e:f8:76:91:
73:d2:47:98:18:f2:66:84:6d:82:84:22:d3:38:7f:
be:f6:66:48:c3:ce:c2:d6:84:55:c0:1f:e3:ed:ca:
04:ec:27:63:bc:ab:51:fc:ad:87:5c:53:52:f5:87:
16:60:f8:15:83:7f:a8:1d:a7:ac:fb:07:44:2a:99:
99:1a:cf:80:f2:28:42:5b:c4:e1:d5:71:49:4a:44:
60:08:09:15:4f:95:54:22:8e:ba:6e:dd:ba:28:e7:
02:42:8e:90:c4:3e:16:e3:c1:0e:a4:6f:93:fb:88:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:02:18:30:AF:59:DF:AB:23:50:6D:1A:D0:13:8E:48:03:F9:09
X509v3 Authority Key Identifier:
keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1a:c6:f7:be:d3:4c:78:71:eb:8e:38:f3:0d:b2:ba:7a:1d:
9d:91:6c:62:24:58:21:12:38:3e:ce:ba:1d:65:af:4e:38:ee:
83:72:c9:00:08:48:44:21:b9:00:c8:95:78:6a:e9:89:12:9f:
71:bc:8b:85:76:36:88:b5:a2:99:2c:e8:8a:bb:18:69:0b:d4:
42:80:a7:9e:1f:7c:84:b5:13:b7:d2:f9:98:23:76:63:27:3a:
c4:73:78:ae:0a:a0:55:31:f6:d7:60:b7:91:cd:e2:d5:f6:ab:
67:d5:a7:19:10:c4:cf:b9:4a:fe:bc:eb:bc:01:55:dd:24:ed:
28:a6:47:3f:8c:45:e7:a3:94:b3:09:08:ad:2e:57:7e:7e:52:
05:06:b6:c7:20:b5:59:4a:33:73:0e:24:a9:57:f1:df:68:66:
e2:32:77:bb:66:e9:e6:73:06:2e:39:5d:ac:c9:8b:10:b7:d1:
87:b3:44:57:3f:8b:f1:49:1d:b2:c4:71:d9:5e:bc:d9:22:4a:
fb:17:f9:7b:32:f1:a5:20:07:47:3a:bc:13:91:0e:09:11:0e:
76:ae:c7:cd:75:4a:16:fb:cc:4b:22:c3:32:59:a0:65:f0:b2:
f3:cf:8d:7a:a1:bd:c6:bd:68:3b:32:4c:73:d3:83:b8:27:e2:
8d:68:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:05 2025 by rpki-client