Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
File: uswdmaBsvkDcxx3cLxiHkQ992R8.mft (raw, json)
Hash identifier: YWurfLXpNCyydYxmr5WbeiFoXj0L9SpcWAOB9ZRIsJ4=
Subject key identifier: 83:9A:DF:48:BE:BE:17:76:68:C4:49:53:F8:4B:4E:45:A3:10:75:C3
Authority key identifier: BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
Certificate issuer: /CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Certificate serial: 01932DFB59EB2F025BEA704F7DE70FCBBE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 04:01:07 +0000
Manifest this update: Fri 15 Nov 2024 04:01:07 +0000
Manifest next update: Sat 16 Nov 2024 04:01:07 +0000
Files and hashes: 1: 30C_vErPG-Df0EIyeLPKc1R7NVw.roa (hash: hmtpEPv3WVRYe5pWJh/58Bme8XmNddNGoE88EM+S66s=)
2: uswdmaBsvkDcxx3cLxiHkQ992R8.crl (hash: DIvGL4Xr5e7ddv53clvEJtBbJ9huZp67cr48ELXBCNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2d:fb:59:eb:2f:02:5b:ea:70:4f:7d:e7:0f:cb:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Validity
Not Before: Nov 15 04:01:07 2024 GMT
Not After : Nov 16 04:01:07 2024 GMT
Subject: CN=839adf48bebe177668c44953f84b4e45a31075c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:a8:49:1d:73:e2:ad:25:4b:53:a6:80:dd:
6a:e3:a0:45:bd:be:5d:7c:7a:1f:67:81:46:e7:b2:
df:1b:4f:e7:e2:4d:df:1b:86:1a:87:ef:91:b7:de:
a7:50:a8:e5:76:57:f1:64:a3:41:70:a1:5d:8b:7f:
65:92:88:eb:80:b6:b4:7c:a8:c3:0c:8a:17:4d:3c:
65:c4:12:08:02:5b:60:f2:42:b9:9d:59:9b:6b:a7:
38:a5:ee:dc:6d:f8:81:d9:d5:4e:e0:5b:43:de:6d:
4c:da:d9:6a:b1:27:5f:79:0a:1f:96:19:ed:2c:72:
81:02:9f:dc:82:60:10:2c:f9:66:7a:53:91:34:3f:
69:eb:e3:53:da:8c:98:e5:cf:4e:37:59:9d:d3:99:
23:ff:df:69:32:d1:be:e5:2d:4d:0c:fa:35:67:4f:
36:cc:f1:6b:73:bc:c8:08:e5:b0:e6:65:60:dc:9a:
d5:cc:a4:c2:40:fe:dd:69:0f:8e:72:7f:1f:ae:67:
96:8a:87:d6:b7:d2:30:2c:1c:a1:84:f6:48:a0:a5:
6e:8a:9f:2b:72:c5:aa:d6:64:e5:7c:0f:fc:11:90:
0e:f6:a1:a7:5a:3f:cb:19:8a:72:0e:34:01:cf:e4:
34:e3:59:32:4c:b5:46:fc:09:30:c8:00:2f:26:19:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:DF:48:BE:BE:17:76:68:C4:49:53:F8:4B:4E:45:A3:10:75:C3
X509v3 Authority Key Identifier:
keyid:BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7f:b6:f1:1e:89:b9:c5:bf:03:27:c2:b1:2a:41:ee:85:db:
07:ce:ba:03:ea:9a:20:41:00:8e:af:0a:27:14:d3:21:7d:d1:
7a:c7:4d:93:89:9a:a0:c4:79:73:33:c8:48:07:40:3c:61:d0:
67:0b:db:82:9d:64:1e:3c:b0:c5:ea:36:d9:d4:a3:e1:09:68:
1d:65:83:b3:bc:5a:5d:65:24:50:e8:14:dd:36:ed:58:aa:05:
15:a3:e1:64:34:f0:5f:33:e6:c3:ec:f1:06:14:94:08:3d:25:
61:82:f7:6a:ec:e0:09:bc:41:97:28:cd:8d:10:ae:f6:97:03:
ed:0b:9c:e5:a3:0d:68:6f:7e:d6:68:56:54:d1:b0:46:cb:eb:
01:87:5c:c9:00:a0:8e:97:43:99:20:aa:db:3c:cc:4e:a3:0b:
55:7b:19:54:8d:7b:a6:3b:c9:de:e3:43:1b:f4:d7:ea:6e:6e:
2d:45:28:81:0d:c4:a9:af:84:26:30:73:8a:bc:5f:70:d9:38:
a1:69:ae:b6:0c:2b:16:c1:b1:c8:00:7c:4a:41:e6:85:65:59:
d7:35:d2:cc:c9:fe:0e:e8:c1:3e:90:d1:94:64:19:3b:3e:a2:
99:62:3a:71:f9:69:f2:17:7e:7e:6a:d7:ed:b4:00:af:7d:89:
32:35:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:08 2025 by rpki-client