Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
File: WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft (raw, json)
Hash identifier: Sg2G5aSdAgf/NY2BQkZOEcL7fiivWxa0XtT3dWV3KvA=
Subject key identifier: 87:6A:EE:72:20:CB:5F:15:8B:33:81:78:67:D3:FD:F6:C3:42:D1:AE
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Certificate issuer: /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial: 0195DFD8C988FB715522F3164159D0848842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
Manifest number: 055C
Signing time: Sat 29 Mar 2025 03:01:21 +0000
Manifest this update: Sat 29 Mar 2025 03:01:21 +0000
Manifest next update: Sun 30 Mar 2025 03:01:21 +0000
Files and hashes: 1: M1JMBMjlsJbVljDt2PzSy5MjCBw.roa (hash: sQKzTWvI6Di9zG+70fZhGo8ykxUqEGqnJHybbUE2olY=)
2: WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl (hash: TURzIU4KtLdrPL7CdBf8reDKGBiNQZBRY5lfuu8RBz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:c9:88:fb:71:55:22:f3:16:41:59:d0:84:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
Validity
Not Before: Mar 29 03:01:21 2025 GMT
Not After : Mar 30 03:01:21 2025 GMT
Subject: CN=876aee7220cb5f158b33817867d3fdf6c342d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:3a:a3:b3:89:11:6d:55:4c:cf:e5:2d:06:
0b:a3:36:4f:92:20:d7:5d:51:53:77:f4:99:77:c5:
bf:60:c3:5b:81:fe:fe:1c:4e:77:8e:de:71:e6:23:
3b:d1:fc:16:b0:87:eb:59:3c:69:5f:0c:ec:7b:50:
08:0e:e7:8f:02:86:20:00:9c:8a:ff:59:09:a9:19:
cc:ec:5b:0e:47:63:7b:7b:43:0d:a1:c2:23:8e:62:
f4:3c:3b:b5:54:09:9d:04:5f:54:00:63:d0:69:85:
e1:3f:56:d2:93:0b:1c:8e:ca:e4:1b:95:7d:a1:00:
42:e4:7a:5a:9b:49:c8:91:ce:c5:72:81:dc:22:37:
38:a4:dd:ca:bf:93:e9:d0:6e:7b:ef:87:25:e5:c9:
38:19:49:52:b1:63:00:5d:98:e1:c5:94:92:95:a9:
88:94:ca:72:77:54:72:04:ea:89:95:56:f5:02:c8:
70:20:c7:ca:07:ba:dc:93:cc:3a:ea:27:f4:37:c6:
7a:2a:ce:74:4f:03:be:bc:2b:50:82:34:54:c6:b4:
7a:c6:01:3d:5f:41:c3:ab:04:c3:06:58:f1:fb:2d:
24:ac:34:3b:bf:2f:a4:15:fd:f9:8d:1d:a8:f3:08:
ba:79:93:c4:c0:da:e5:bd:63:36:f2:e9:74:fe:90:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6A:EE:72:20:CB:5F:15:8B:33:81:78:67:D3:FD:F6:C3:42:D1:AE
X509v3 Authority Key Identifier:
keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b8:33:8a:46:7c:5b:87:a8:c3:fd:a3:f3:aa:51:c5:3e:a9:
f9:26:a5:69:77:ba:a1:70:d5:ce:de:d7:ac:c3:80:1d:12:7c:
6e:80:da:be:d1:60:fa:1b:8b:cb:98:58:8a:46:78:86:0e:56:
42:de:7b:8e:43:b9:b1:ba:55:05:5d:e9:f1:a1:39:5e:49:df:
10:39:8f:36:f2:9e:bc:16:60:df:a6:5b:38:aa:47:27:c4:c7:
78:12:2f:85:58:54:23:fd:32:0c:42:bc:72:b0:db:4d:f9:27:
a2:a0:33:9e:49:bd:d7:93:f8:53:a3:41:44:00:5c:d8:13:17:
72:df:57:03:1b:02:c4:86:20:b8:61:d3:47:b4:c4:ec:d8:b9:
a1:02:67:40:66:11:dd:4b:19:a6:6e:74:d5:e6:2d:fe:13:d3:
bf:09:5c:30:1a:8f:a1:19:50:f9:4b:70:81:1f:1b:fe:5f:93:
1b:41:55:54:05:ce:ed:82:d5:e0:2f:45:87:50:b6:72:0e:42:
17:97:e3:c3:4c:00:b4:8b:17:bd:36:2b:c9:b8:f5:5a:44:2d:
36:92:d1:4d:4f:78:58:f8:d9:5e:10:20:0c:aa:66:cd:5b:27:
d6:1e:5a:af:a2:a4:80:a8:0c:7f:b1:95:ad:9e:ac:77:5b:d4:
df:d0:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:55:29 2025 by rpki-client