Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
File: WQrh--tOt2hwRl3ryP0GXBb4vtE.mft (raw, json)
Hash identifier: it+GnNYNaeXNUDCTlBx9w3GCDvzyubWqhpD9H9leiJQ=
Subject key identifier: E6:76:A6:D2:45:AD:DF:7E:17:22:98:AB:8A:0C:8F:22:14:75:0F:8B
Authority key identifier: 59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
Certificate issuer: /CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Certificate serial: 0195CBE3FBDD952C616B70EF7D763B60C340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
Manifest number: 0288
Signing time: Tue 25 Mar 2025 06:01:10 +0000
Manifest this update: Tue 25 Mar 2025 06:01:10 +0000
Manifest next update: Wed 26 Mar 2025 06:01:10 +0000
Files and hashes: 1: WQrh--tOt2hwRl3ryP0GXBb4vtE.crl (hash: kLLALLc+jeak+qJOMrOXJ9sYlcZRcmrZ5JCT6ABy1ws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:e3:fb:dd:95:2c:61:6b:70:ef:7d:76:3b:60:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Validity
Not Before: Mar 25 06:01:10 2025 GMT
Not After : Mar 26 06:01:10 2025 GMT
Subject: CN=e676a6d245addf7e172298ab8a0c8f2214750f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:25:10:43:62:ee:61:2b:98:93:e4:6d:a4:
03:74:ae:00:f9:6f:e3:fb:6d:2c:48:e5:08:30:3c:
75:8f:fa:5a:25:b2:de:9b:25:13:e3:b6:01:93:4b:
9c:ca:29:d8:42:d7:9e:87:da:12:29:75:99:54:9a:
97:74:6a:ed:51:11:93:2f:02:fe:20:39:31:ec:38:
fc:7f:db:50:ce:eb:f8:61:64:6e:63:57:c4:15:43:
22:4d:b8:10:07:4b:f5:d1:25:66:4e:e7:1a:89:31:
18:27:c4:bb:94:46:17:4c:65:fd:fe:c8:16:ff:03:
56:6f:12:78:0f:71:2b:e4:42:da:24:4a:fb:8d:6c:
91:c7:44:19:e6:47:70:3e:57:22:b3:87:df:89:a5:
8f:45:96:81:96:94:f7:a2:f6:09:0f:41:21:bf:3e:
54:53:8a:20:e2:3b:a5:82:01:dd:fc:e0:fb:e0:31:
0b:de:b1:8d:7d:30:ce:02:64:46:5a:92:a3:5c:02:
6f:83:91:49:be:3f:44:b2:a2:6a:6e:51:c0:e5:9e:
fb:0a:70:0c:5e:68:4e:c3:16:cd:75:0c:f3:7d:66:
f8:00:6a:c9:87:99:e0:fe:66:9b:37:6f:30:06:68:
ab:bd:88:39:26:d0:91:5d:78:17:85:44:60:68:54:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:A6:D2:45:AD:DF:7E:17:22:98:AB:8A:0C:8F:22:14:75:0F:8B
X509v3 Authority Key Identifier:
keyid:59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:87:ec:55:2d:d9:bf:51:09:ae:77:2b:88:a3:83:b8:5c:
20:e6:7c:f8:f6:b8:73:3d:bc:60:96:6b:e3:f0:83:91:20:85:
de:e1:e6:0a:55:2b:80:a6:87:51:0f:ca:c7:d7:d3:fe:24:62:
2a:fb:58:02:67:16:2e:e3:61:8d:b3:1d:d2:a4:2b:a8:a7:44:
0d:66:f8:d2:82:20:6b:34:cb:d7:a2:1a:93:b8:3a:2f:f3:31:
9b:d6:ae:92:06:a4:eb:ea:01:ca:ba:a7:ea:25:06:5c:0f:6a:
58:13:01:52:d6:91:3c:b1:4b:70:49:09:3c:bd:73:6a:98:73:
a0:8c:cf:e5:9e:b7:17:2f:02:c0:2e:d4:d2:01:ce:aa:1d:c4:
e6:9b:e2:48:da:04:74:ac:5b:99:66:82:db:a9:5d:0e:0a:93:
f7:9f:54:c3:cc:b7:f7:6e:98:e8:e1:6d:6b:75:9b:44:d0:78:
b2:a1:69:29:b3:bc:dc:96:93:5c:01:56:22:95:e1:d0:90:08:
4f:f0:c8:64:e5:bc:da:70:d4:51:c0:50:19:e8:0a:bf:1a:83:
44:69:ee:92:9f:32:1a:5b:ed:1c:af:3a:e3:1f:8d:0a:3e:0d:
16:22:5d:4c:06:6a:28:a8:eb:74:cd:97:9c:39:ac:1f:6f:69:
81:6d:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:32 2025 by rpki-client