Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.mft
File: WL2xvXVydRnkAL_oinUSPWGE3hQ.mft (raw, json)
Hash identifier: wQuZneiSf9rToOpMlSvSSrXpJCkUYVlCHzYk3OboLkw=
Subject key identifier: C3:AA:0E:78:95:C3:02:E5:F0:9F:0D:12:2F:FE:D0:53:DF:21:38:6E
Authority key identifier: 58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
Certificate issuer: /CN=58bdb1bd75727519e400bfe88a75123d6184de14
Certificate serial: 018CC871AA5928AE4ECE4CECA7690B26A21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.mft
Manifest number: 100B
Signing time: Tue 02 Jan 2024 04:32:21 +0000
Manifest this update: Tue 02 Jan 2024 04:32:21 +0000
Manifest next update: Wed 03 Jan 2024 04:32:21 +0000
Files and hashes: 1: 61KP3TuLFKBOF65uE4APG3cIPWc.roa (hash: 7txI4mrwHXi5PxOy5SiGdzYsl7cpxNuVeRH6xYsi3Xo=)
2: UEs4OQXASir_gPEWJgNYPtwD2q0.roa (hash: FQWs97DWu3NATgRPfsr8PLT9l0lqhkQaj7nn7wSPCFM=)
3: WL2xvXVydRnkAL_oinUSPWGE3hQ.crl (hash: /mcmEPuiVY/NI7rxL+eYguvilK5SeTc87rjfvMPg7nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:aa:59:28:ae:4e:ce:4c:ec:a7:69:0b:26:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bdb1bd75727519e400bfe88a75123d6184de14
Validity
Not Before: Jan 2 04:32:21 2024 GMT
Not After : Jan 3 04:32:21 2024 GMT
Subject: CN=c3aa0e7895c302e5f09f0d122ffed053df21386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:a4:ce:8e:7b:1b:9d:0f:d0:36:eb:48:0d:
7e:a0:86:4b:66:e1:d5:7b:81:65:ae:c7:b1:8c:bf:
84:e4:df:ef:1d:f3:bd:6d:99:82:0b:b1:e4:6a:41:
4f:dc:25:fb:f8:43:2e:7c:0e:c4:ee:b2:e0:1d:61:
69:72:90:f0:bd:22:7a:2b:e9:0e:fd:5b:51:44:1e:
db:b0:01:6b:ea:3e:5b:c1:67:2f:cb:14:00:50:e3:
25:4b:e2:39:7c:e4:c4:6e:4b:87:b7:6d:f5:be:e8:
e4:06:47:01:f6:b1:80:09:00:28:3d:44:9f:3e:65:
77:3e:b7:23:a5:51:f2:d3:d7:e7:2c:b8:71:c0:e5:
bd:c9:1c:ab:01:7b:51:ff:db:5c:6a:b4:cf:1f:3b:
5e:64:65:2b:e5:1b:2f:4a:27:d8:79:20:57:a7:09:
98:19:3c:44:ee:f6:04:9f:5d:cb:44:69:84:43:06:
fa:12:fd:d7:2d:ce:52:b0:37:d8:9c:c7:2f:7d:b4:
47:f5:b5:5e:c8:3c:e2:4d:1a:aa:d2:35:ce:f3:75:
d9:ca:9c:28:cd:cc:47:bd:63:57:71:ea:83:6e:ae:
70:43:09:c3:0e:48:d6:43:19:d2:16:8d:54:b4:a9:
3e:99:67:17:4f:f6:79:33:d5:69:c2:27:17:0c:4e:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:0E:78:95:C3:02:E5:F0:9F:0D:12:2F:FE:D0:53:DF:21:38:6E
X509v3 Authority Key Identifier:
keyid:58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:9e:38:b7:5c:89:0e:b6:6a:45:6a:6d:16:30:aa:8a:58:
da:30:b9:8f:8d:f3:86:d8:4f:aa:44:e0:ab:10:b5:59:7d:f7:
de:ce:f9:73:e9:6b:c2:a4:7a:5b:62:0f:87:a9:e1:c4:88:23:
9b:49:d9:e0:f7:82:18:70:f1:01:9d:ff:a4:26:f4:4c:b5:29:
62:cb:c4:fd:aa:6e:a5:66:37:fa:db:7d:ac:8b:bc:84:d1:78:
a9:d1:fb:28:38:73:73:ca:98:cd:9d:6e:e4:67:d1:62:0e:cd:
3f:f3:08:22:6e:f8:70:ea:34:8e:b4:a0:dd:84:2c:3a:07:48:
bc:a8:dc:5c:8e:c9:10:38:5b:40:7f:6d:70:4e:56:8b:55:4c:
64:dc:90:55:5b:80:c6:99:60:e4:de:b6:9d:ce:15:71:50:6f:
07:fc:05:fc:20:2f:d7:dd:88:f2:15:7a:86:ce:a6:b0:ef:83:
fe:e9:c4:df:ca:05:86:eb:dc:0a:da:a3:a0:fd:5a:91:f0:df:
ba:32:3e:47:74:51:9f:d4:02:06:dd:4e:ae:9f:2e:d3:23:bd:
f9:bd:f0:e6:f4:04:75:e2:3f:bb:24:4e:f0:d9:2e:85:fb:1d:
43:49:63:8e:3d:a3:ae:c4:7b:dd:84:e5:9b:a2:16:1b:18:6a:
ea:72:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org