
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft
File: WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft (raw, json)
Hash identifier: 9/WdwTL/K5FTvby0x9TKs1xZGxhvvawcMSsZMymuyaM=
Subject key identifier: BE:1C:E0:AD:C3:76:61:DF:7E:E8:78:32:71:FA:B2:2D:0F:FF:68:71
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 018BEBBF0AB8E50163CD808B995EC24ED0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft
Manifest number: 086E
Signing time: Mon 20 Nov 2023 08:00:47 +0000
Manifest this update: Mon 20 Nov 2023 08:00:47 +0000
Manifest next update: Tue 21 Nov 2023 08:00:47 +0000
Files and hashes: 1: WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl (hash: nX7FTr6devfciDLk33tbYxcQZLMBs2xqFZlkTsZJS40=)
2: g4Njw_kebDM7AQgSgkKRrr1otRU.roa (hash: feFGeK52R7bk1T5UBmdnEenKGBNDrM/5vQK9TDuutiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:bf:0a:b8:e5:01:63:cd:80:8b:99:5e:c2:4e:d0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Nov 20 08:00:47 2023 GMT
Not After : Nov 21 08:00:47 2023 GMT
Subject: CN=be1ce0adc37661df7ee8783271fab22d0fff6871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:b4:76:45:70:71:42:10:ce:8f:61:fa:c3:
22:20:4d:74:8b:77:52:fe:e3:b8:b5:74:be:9c:31:
2d:1d:68:7f:dd:08:4b:af:e1:99:61:db:a9:56:fb:
ba:03:1e:2f:de:aa:12:61:37:0d:79:13:b1:58:9f:
17:a7:f8:bd:09:d9:e4:a7:e2:3e:ab:71:a1:36:c5:
c3:7f:fc:94:36:a4:0c:5f:fb:b3:50:b2:a4:39:d4:
01:0d:4d:82:86:9a:33:70:88:8e:20:eb:fa:78:cb:
0f:7c:b5:b3:8b:22:a5:2e:9a:d5:74:db:3d:c4:15:
6b:16:eb:64:0b:41:be:06:c0:38:cc:a2:5b:b5:73:
17:5a:a4:09:f1:ca:67:ed:77:84:f5:d7:7c:12:27:
6b:72:1c:bf:43:43:77:f5:87:ed:87:11:ab:5c:3e:
02:b8:b0:5c:f0:dd:64:6b:57:98:b0:7a:14:dd:04:
53:48:12:bc:5d:0d:f2:8a:f0:4e:4b:be:42:e6:53:
ee:bc:8d:28:28:ff:99:90:f3:5d:00:e0:a7:11:da:
b2:81:b1:55:81:16:6a:31:4f:cd:fe:34:6f:e8:b3:
e0:f5:ba:60:07:16:c4:55:d7:f1:e6:d9:a5:af:a1:
11:b8:f8:4b:0c:4a:d9:59:37:59:8d:a7:36:ef:3a:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:E0:AD:C3:76:61:DF:7E:E8:78:32:71:FA:B2:2D:0F:FF:68:71
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:df:01:36:08:6f:0b:56:0f:3d:5b:8b:d6:df:10:fa:1a:
de:a0:43:2c:58:0b:31:f9:1d:c2:c6:20:01:b0:3e:06:d7:ce:
43:22:9a:d9:d0:b1:8e:f8:0a:01:d6:3f:26:c5:1e:50:80:21:
4a:ae:a7:23:17:4e:98:42:6b:e5:da:a6:71:31:6a:e9:2a:37:
02:de:ef:93:fb:c7:44:db:f0:7b:12:30:34:4a:f2:1e:6a:dd:
23:65:96:e2:81:df:85:7c:ac:38:40:a3:0d:4d:23:18:dd:a9:
a3:51:f2:c7:46:1b:52:08:fa:ae:bc:e8:1d:99:9e:f3:9b:2d:
d5:92:47:3c:1a:ac:ce:e3:f3:88:9c:11:2c:d0:d3:e6:96:8b:
28:94:24:62:66:95:6e:94:65:08:fa:36:69:8d:34:3e:dc:8b:
cb:e5:21:1a:28:08:46:db:3c:20:6a:9a:bc:3d:3c:b4:97:c8:
c2:cc:1a:06:5d:f3:3d:8e:f8:db:75:68:c4:b9:f3:7c:38:54:
ec:9c:86:e2:48:a2:cf:c4:6c:df:30:57:53:98:15:87:1e:ff:
6e:78:64:80:4d:8d:9c:6c:22:53:6f:e0:08:91:6c:d2:7a:ab:
20:b0:bc:c3:8b:9f:04:63:8e:c1:27:dd:4a:b5:50:2b:a4:9d:
b5:ae:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:20 2025 by rpki-client