Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier: CQeVrreoMFzZArg2il4RECmlgO5NYcEoIJQ8kmyvbQo=
Subject key identifier: A7:0B:4F:49:44:83:91:6A:9E:9E:4A:04:E4:E7:A5:3B:33:5B:EE:52
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 0195E1593B4E3ACB2F35191F02D93898C2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number: 1454
Signing time: Sat 29 Mar 2025 10:01:16 +0000
Manifest this update: Sat 29 Mar 2025 10:01:16 +0000
Manifest next update: Sun 30 Mar 2025 10:01:16 +0000
Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: aXSCah1ZX+GC1rNPhKNdMA/gNS2uOOC5YJpnvp6vbAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:3b:4e:3a:cb:2f:35:19:1f:02:d9:38:98:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Mar 29 10:01:16 2025 GMT
Not After : Mar 30 10:01:16 2025 GMT
Subject: CN=a70b4f494483916a9e9e4a04e4e7a53b335bee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:6d:34:ea:07:a8:44:84:0f:43:4c:49:3d:
21:88:f9:4f:0e:31:70:42:b2:4d:7f:3d:ba:bc:3e:
d1:27:c3:8d:58:f6:2e:98:cf:54:8a:c5:87:2c:3b:
52:0d:0b:4a:da:59:eb:73:ce:22:49:56:09:c3:6f:
ee:72:f6:15:26:37:0b:d5:de:88:36:64:b7:c3:e7:
c8:4d:69:0a:1b:3b:0a:a8:7b:ad:3d:15:37:d9:43:
5e:d6:24:94:da:82:c6:23:02:f7:b7:2f:2e:fc:1e:
a4:a1:e5:37:8b:da:a3:7a:c1:89:bc:56:d9:53:56:
24:88:61:1f:46:0f:14:2f:66:7f:8c:3c:73:6d:f7:
e5:ce:ad:08:69:08:65:a6:f8:e0:9f:a3:f5:84:31:
d6:9a:61:b8:86:46:26:f0:2b:e9:28:89:b6:d2:11:
50:d7:01:75:02:40:3c:fe:10:5c:7c:42:9e:67:18:
d0:86:6e:7e:19:65:3b:92:6d:db:4b:a4:e2:3b:64:
32:26:f3:60:d3:04:e5:0c:df:af:0d:63:f8:9f:da:
4f:f5:75:8d:c9:b1:c5:4e:af:8f:fd:07:19:89:a6:
bc:cc:72:0f:63:45:73:39:93:8e:34:0c:4a:f3:f3:
0d:cc:2f:9a:84:58:4a:e3:a0:d4:68:fa:61:c2:21:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0B:4F:49:44:83:91:6A:9E:9E:4A:04:E4:E7:A5:3B:33:5B:EE:52
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:48:c1:49:b9:29:a2:4f:c1:54:57:46:d5:92:0b:94:4d:
ba:20:98:29:fd:1d:ed:15:dd:ad:ef:f9:1d:85:11:30:42:c6:
a6:46:c1:96:cf:8e:28:28:3b:8f:04:d3:81:d6:bc:65:f8:0b:
e5:2b:4a:07:56:28:e6:37:6d:55:75:2e:05:b6:7f:ba:69:d7:
8a:1e:75:9c:da:2d:41:5f:c8:2d:e1:d6:80:6b:85:7a:18:10:
77:80:e4:fa:08:c7:15:21:36:69:a7:da:fd:d9:67:b2:71:7d:
22:af:cf:fe:4e:82:c5:e4:4d:e1:b8:73:16:41:09:1b:1d:f5:
59:b0:28:9b:e9:ae:d1:4d:dd:04:d1:e5:89:27:ae:5b:7d:df:
96:5c:c4:3d:84:f8:67:9c:08:98:3b:82:c2:06:12:30:59:e3:
46:a3:aa:df:ae:85:7b:95:be:e8:5e:79:c9:12:86:15:fe:5e:
fc:11:5a:4b:f3:be:56:8f:29:92:21:ee:80:0f:62:0d:c7:27:
bf:2b:0e:60:d8:44:1f:ef:c1:ef:8d:b3:4f:d4:03:f5:b1:a9:
fa:99:9f:7e:09:54:0c:f4:f6:00:3b:89:44:d5:43:9f:44:c2:
b4:96:79:12:dd:75:d5:02:60:f7:84:91:87:d2:19:42:05:5f:
89:fd:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:19 2025 by rpki-client