Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
File: wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft (raw, json)
Hash identifier: e0RRhYE39g/+UbpJO+AMJZ6p8OiT0oFVPODco1Lu9+E=
Subject key identifier: 79:B8:08:69:7D:A6:6B:8F:A4:9C:82:E8:94:E3:BD:E1:2F:67:A7:FD
Authority key identifier: C2:1E:53:BA:AD:11:B4:3C:5A:02:3E:19:A6:F0:F1:B6:D9:7E:63:6B
Certificate issuer: /CN=c21e53baad11b43c5a023e19a6f0f1b6d97e636b
Certificate serial: 0195895F4F3DF6DA672B29CD24997675FF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
Manifest number: 1358
Signing time: Wed 12 Mar 2025 08:01:19 +0000
Manifest this update: Wed 12 Mar 2025 08:01:19 +0000
Manifest next update: Thu 13 Mar 2025 08:01:19 +0000
Files and hashes: 1: wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.crl (hash: fX/8vm83iLXgzpja+xkd7AIrqG50JxYBon9wP4vFi4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:5f:4f:3d:f6:da:67:2b:29:cd:24:99:76:75:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e53baad11b43c5a023e19a6f0f1b6d97e636b
Validity
Not Before: Mar 12 08:01:19 2025 GMT
Not After : Mar 13 08:01:19 2025 GMT
Subject: CN=79b808697da66b8fa49c82e894e3bde12f67a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:fc:eb:24:b9:94:86:50:41:7d:2d:62:70:
46:c2:2d:bf:4d:31:1e:94:f0:81:07:94:cf:3c:66:
d4:18:7b:36:3c:94:a6:9c:54:e7:e8:10:05:93:60:
b6:b5:52:33:ba:59:2d:d1:55:c0:fc:6e:6c:da:2f:
c1:c2:20:d1:78:ed:78:47:96:44:3a:59:23:fd:cb:
0b:c0:ce:19:fd:2c:63:19:1c:5d:9c:7b:58:7c:19:
a4:91:68:41:0c:3c:ce:67:34:99:33:f0:a7:94:e6:
b8:17:37:22:69:96:3e:df:5a:b2:da:fe:d4:57:3f:
d3:66:94:4d:5c:97:ca:67:35:23:84:80:ec:f7:55:
5c:bc:39:2d:84:6b:c1:16:49:1f:18:51:28:59:09:
17:1c:35:2c:fb:00:7c:a3:9e:a4:2d:25:d2:d6:11:
27:e4:5c:7c:9a:b4:2b:ca:23:5f:57:f6:0d:86:00:
5a:8f:eb:f8:c0:39:d8:81:f8:d8:3f:f8:85:70:e0:
98:2d:e8:9f:92:30:16:20:89:5c:c4:af:fa:d8:e1:
77:41:a4:5b:5e:bd:f6:ba:d7:3e:ec:b7:a0:87:3b:
e5:15:fa:8e:fc:ef:5f:7f:fc:27:cd:bc:84:2e:e9:
cd:b2:46:7d:e0:10:9c:ab:9a:b4:26:da:63:0b:94:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:08:69:7D:A6:6B:8F:A4:9C:82:E8:94:E3:BD:E1:2F:67:A7:FD
X509v3 Authority Key Identifier:
keyid:C2:1E:53:BA:AD:11:B4:3C:5A:02:3E:19:A6:F0:F1:B6:D9:7E:63:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:a0:e9:76:a1:69:95:3a:ad:3a:ad:c3:81:e3:48:5b:47:
2d:09:1c:72:9a:f2:e6:8e:0c:7b:b1:cd:25:4d:33:b0:c2:a7:
64:08:ef:ab:07:35:3a:1e:8a:a8:67:8a:c2:72:be:1a:dc:09:
9c:69:b2:5b:10:df:4f:67:fc:a9:32:97:7d:0a:d3:66:53:c0:
1c:f9:14:e5:53:00:c7:20:a0:83:50:fb:7b:33:bf:9f:75:62:
58:bf:1d:ea:b7:22:e9:d8:4b:5c:62:9b:74:6c:f7:cf:12:c6:
a9:ca:4f:61:46:0b:5d:13:ab:5d:69:aa:f5:c6:d4:ee:9a:77:
d7:7c:66:9c:53:6f:ce:57:25:17:2d:b6:98:67:2b:83:6f:3e:
ac:79:12:80:99:f6:b2:7a:24:5a:07:25:56:33:1c:c3:ee:2c:
ea:a8:f2:4f:38:f1:14:9f:e7:b3:29:03:92:1d:ce:c6:21:3f:
8a:83:ad:e8:81:09:2e:57:f0:92:fd:7f:64:ae:d0:85:58:88:
7e:bc:18:8d:14:df:90:49:a7:33:2f:f2:b2:95:8a:aa:49:b8:
5d:17:56:14:9e:55:b8:34:35:cd:fc:79:4a:85:47:59:9f:ea:
79:a6:6f:2f:17:ed:a2:98:4e:dd:db:2a:10:db:14:11:cc:a3:
58:b3:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:42 2025 by rpki-client