Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
File: uswdmaBsvkDcxx3cLxiHkQ992R8.mft (raw, json)
Hash identifier: 98JkBRwcZpOxs+5WYtcpyzqiId61z1VH2JBd5iQWY4w=
Subject key identifier: 49:47:69:A6:39:55:8E:25:A9:CA:46:35:47:F9:22:12:F4:6D:39:5B
Authority key identifier: BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
Certificate issuer: /CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Certificate serial: 01932FE95A476F6C4DC9AA72C60AD6143BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
Manifest number: 135B
Signing time: Fri 15 Nov 2024 13:00:42 +0000
Manifest this update: Fri 15 Nov 2024 13:00:42 +0000
Manifest next update: Sat 16 Nov 2024 13:00:42 +0000
Files and hashes: 1: 30C_vErPG-Df0EIyeLPKc1R7NVw.roa (hash: hmtpEPv3WVRYe5pWJh/58Bme8XmNddNGoE88EM+S66s=)
2: uswdmaBsvkDcxx3cLxiHkQ992R8.crl (hash: ySDmXbK3OwVaJ0JmTfcsV3TNYANAxyQG6ykN2osukX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:e9:5a:47:6f:6c:4d:c9:aa:72:c6:0a:d6:14:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Validity
Not Before: Nov 15 13:00:42 2024 GMT
Not After : Nov 16 13:00:42 2024 GMT
Subject: CN=494769a639558e25a9ca463547f92212f46d395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:ba:f8:54:bb:6a:0f:4b:c3:61:41:64:e7:
5e:04:e1:a0:77:50:b3:dd:82:28:7e:79:68:9f:2b:
7c:94:5b:69:2b:b6:c8:f6:06:1e:a0:fa:15:4f:8d:
8c:9f:af:fa:3d:50:b7:bd:f8:68:77:e9:39:13:5c:
66:ef:91:e2:5d:72:59:e7:1e:f5:fd:70:83:2e:e8:
23:52:7b:0e:7c:5c:02:13:57:e2:83:a6:6d:e4:b2:
1f:9a:b4:75:07:cd:62:26:9b:75:ce:42:45:1b:b9:
f0:c4:97:20:40:fa:9a:91:c2:66:d0:d5:73:50:b6:
db:2f:48:a1:77:5c:19:bd:31:69:ad:b3:b2:54:0b:
3e:e3:e2:c8:fd:b7:cf:cc:c8:50:ce:c5:54:e7:98:
48:67:78:46:52:03:94:7c:d2:98:4c:e6:ff:a7:8e:
c2:54:c5:f4:ae:00:bc:99:40:9b:1d:03:df:0c:01:
7c:8f:8f:ff:40:08:da:c4:74:ab:db:9e:4b:cc:22:
a0:59:d7:af:c1:4d:6b:25:26:be:59:10:26:58:e6:
8b:ae:f9:59:73:1f:eb:45:75:ff:d8:f7:c8:bb:82:
36:3d:87:c1:22:c2:41:f2:7a:ed:a3:1b:9c:ad:b8:
5f:2b:9d:ba:08:e1:ef:77:15:87:0c:4c:e5:f8:97:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:69:A6:39:55:8E:25:A9:CA:46:35:47:F9:22:12:F4:6D:39:5B
X509v3 Authority Key Identifier:
keyid:BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7e:81:01:18:4f:02:92:9b:13:44:d3:36:2f:71:da:8d:38:
32:43:d9:4d:d6:76:5e:22:e6:36:cd:09:59:93:bf:2a:6b:b3:
c8:52:66:38:df:61:b8:2b:59:b1:0c:a9:e0:6b:75:55:88:2d:
8e:09:08:39:fa:04:b9:f3:55:ed:d6:1a:61:c4:41:07:e3:96:
95:08:b0:d9:28:50:60:b2:4b:1f:65:e7:4b:ed:1b:05:9e:89:
80:76:d1:11:97:f3:cc:34:a7:74:75:81:e8:3e:a5:4e:25:09:
13:87:a6:e5:3f:cf:6a:6e:5e:15:8d:d2:e2:36:3a:2e:bc:ad:
a8:22:0f:9b:b5:13:d8:3d:7e:b1:42:85:f0:ea:a4:ef:b2:83:
62:4f:e2:ac:46:ce:67:d2:0e:de:11:e9:f5:52:43:aa:b0:38:
f4:ad:d6:b3:c7:7d:09:41:be:c2:1b:58:df:eb:8c:d4:bf:51:
1b:1d:8d:76:e2:ad:ac:f9:4e:de:e9:75:2b:8e:80:5f:6d:23:
70:49:75:b6:70:93:df:8c:4d:ef:52:6b:38:1f:75:b8:71:b5:
51:bc:e3:77:ef:d1:83:84:2d:08:45:fc:bb:48:9f:6e:4d:90:
7d:d0:8b:19:4d:f2:1e:7a:c5:99:0d:3b:11:2a:11:ce:d7:bd:
94:62:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:42 2025 by rpki-client