Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File: WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier: Hcyytmc9LsxDiFhvdbN2qomR0uFDIaXlzd5FI3+xPwQ=
Subject key identifier: BB:EE:BD:67:05:15:B1:30:B7:7F:37:84:6C:82:47:16:41:E2:09:26
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 0195E19064A30F693C4EBAADE46660081010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number: 0720
Signing time: Sat 29 Mar 2025 11:01:31 +0000
Manifest this update: Sat 29 Mar 2025 11:01:31 +0000
Manifest next update: Sun 30 Mar 2025 11:01:31 +0000
Files and hashes: 1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: 9G63uI/mN9YrAjJfMVg2s+fdu7GObAaZdi62mAAviFg=)
2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:64:a3:0f:69:3c:4e:ba:ad:e4:66:60:08:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Mar 29 11:01:31 2025 GMT
Not After : Mar 30 11:01:31 2025 GMT
Subject: CN=bbeebd670515b130b77f37846c82471641e20926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:95:7a:0b:64:45:b7:13:be:c6:6e:61:60:
a0:bb:b1:b5:c5:49:13:ba:cd:c3:f1:85:76:29:0f:
2e:bc:08:9e:5e:aa:d3:8a:52:3c:91:51:54:b1:bf:
19:48:dd:b6:69:01:14:e0:af:ab:fb:c5:16:8a:c1:
79:93:48:d9:ae:2a:09:27:a6:40:6b:0d:d6:51:4d:
fa:55:16:2f:89:a8:48:e2:7b:5b:55:98:87:d4:0a:
b7:ee:b7:74:86:00:c2:53:5a:e7:0f:b5:c2:cb:a5:
28:80:b0:04:bc:0c:73:f9:8c:51:fc:2e:08:31:a9:
f5:a1:b1:61:17:3f:42:67:24:51:7a:ca:ca:99:af:
00:5b:f9:c5:8a:84:be:22:8a:f4:6e:a0:92:23:a0:
36:f2:75:91:7c:29:0a:0b:0c:d2:f2:6a:70:d8:1e:
cc:b8:6b:bc:91:23:60:e1:64:74:79:1a:e1:14:1c:
6d:bf:30:b3:92:b7:ae:8d:39:d3:91:46:b5:d3:d7:
31:3c:11:fc:e1:a7:c8:6d:9e:aa:d2:c2:46:b0:b0:
ed:0a:f3:2c:58:e2:11:b3:5b:e5:fe:a9:91:de:ec:
01:27:8f:f3:45:0b:7f:4b:ec:8c:79:a8:54:6d:4c:
5d:ea:0e:a2:7a:de:5a:30:14:bf:34:6e:14:d7:d5:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:BD:67:05:15:B1:30:B7:7F:37:84:6C:82:47:16:41:E2:09:26
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:df:40:1f:75:c3:fb:67:68:55:59:8b:dd:71:12:1e:81:
f7:3d:08:6d:a7:64:83:49:31:10:29:77:c9:16:e3:a2:8e:9a:
11:15:b7:46:aa:fb:5d:af:cf:17:1d:56:54:8e:e0:20:c7:53:
81:1a:63:3d:aa:46:a9:c5:37:39:6d:8a:7b:9e:cf:84:10:db:
17:08:cb:df:3d:41:99:23:db:79:0e:92:c4:aa:c8:c9:22:8e:
41:26:88:17:7e:c6:91:08:c5:69:fd:ad:ce:e3:22:b2:71:bd:
e8:18:f6:60:e2:7d:b4:94:43:6b:70:66:db:36:71:fe:90:03:
0e:be:cc:2a:2f:54:45:c1:8a:b3:49:83:55:6c:9b:2a:d4:30:
2e:ea:f4:9f:36:97:da:9a:b6:8f:75:00:96:d1:3b:56:9b:9c:
2d:ee:91:d5:4c:0a:d9:c8:9f:7b:f3:65:fe:33:9a:42:ad:6d:
d2:f7:24:cd:dc:d1:68:d0:f5:4e:5c:f7:d4:2b:6e:f7:15:a6:
68:f0:42:d0:20:42:14:9b:82:05:f3:59:5b:40:c3:b8:e0:d4:
d4:92:9d:93:f3:c4:4a:a1:fd:b5:f6:21:05:9c:c9:72:65:ff:
aa:48:19:a1:06:4c:e9:6d:a6:a2:ae:43:40:08:d1:56:c3:7e:
c4:30:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:21 2025 by rpki-client