Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/WrQ0lAUphYXx78tlhTdhjyXUM14.mft
File: WrQ0lAUphYXx78tlhTdhjyXUM14.mft (raw, json)
Hash identifier: OpeTTqDlnobxySCS+EheLyzFkWBzKib04+rw0OX+yiU=
Subject key identifier: A8:4A:1A:6B:F8:5F:AA:4E:25:3F:57:3C:DC:67:E8:B9:B5:53:33:0F
Authority key identifier: 5A:B4:34:94:05:29:85:85:F1:EF:CB:65:85:37:61:8F:25:D4:33:5E
Certificate issuer: /CN=5ab4349405298585f1efcb658537618f25d4335e
Certificate serial: 018A637F79134FA6A552BD08A4B0C39F31D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrQ0lAUphYXx78tlhTdhjyXUM14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/WrQ0lAUphYXx78tlhTdhjyXUM14.mft
Manifest number: 0864
Signing time: Tue 05 Sep 2023 04:00:12 +0000
Manifest this update: Tue 05 Sep 2023 04:00:12 +0000
Manifest next update: Wed 06 Sep 2023 04:00:12 +0000
Files and hashes: 1: WrQ0lAUphYXx78tlhTdhjyXUM14.crl (hash: AWmZTD7btSdk8NQziLSUK4y5gjLrM3D/ZnprdTZhubM=)
2: sznTMrSqvpV9CMMsBjzdhxU0Zus.roa (hash: PpVNxDe9Yjgt2znUaR+DNp8W26M4mh4X62LqP2QVCGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:7f:79:13:4f:a6:a5:52:bd:08:a4:b0:c3:9f:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab4349405298585f1efcb658537618f25d4335e
Validity
Not Before: Sep 5 04:00:12 2023 GMT
Not After : Sep 6 04:00:12 2023 GMT
Subject: CN=a84a1a6bf85faa4e253f573cdc67e8b9b553330f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:d5:0a:9b:15:f2:f8:80:65:eb:59:50:96:
9d:19:b5:ad:57:e7:55:45:4c:9a:d9:ca:55:50:98:
68:9c:d4:d3:bf:dc:7d:07:3f:4d:09:97:bb:8e:5d:
82:ab:d6:56:d0:22:74:d0:c4:84:27:24:2f:24:8b:
87:66:47:9b:be:3d:e5:52:b5:47:57:94:df:6f:46:
36:bd:97:84:61:7b:02:7b:4d:cf:14:c5:71:b7:d0:
2c:ad:97:5f:49:73:2c:71:54:a5:9c:4f:38:38:46:
42:9a:97:d1:64:18:49:6c:c4:0d:fd:a6:c3:9a:f3:
39:9e:75:63:64:18:59:61:c9:4c:13:12:0e:45:42:
1b:4d:60:97:65:26:db:cd:55:e4:6b:96:c7:56:65:
00:37:a2:6b:97:95:8d:92:c8:9f:16:ba:01:b7:01:
57:48:13:bd:03:7f:47:c3:f2:12:c0:52:13:80:05:
d7:17:85:22:53:01:65:fa:74:da:dd:28:d5:4b:60:
58:a6:69:3e:fd:35:7f:dd:1e:de:77:1b:b7:a1:a3:
86:93:ec:4d:2e:28:d8:31:57:e4:8e:20:af:d3:51:
2b:1f:eb:9d:19:7e:a8:28:d8:39:5c:f3:2d:ec:c6:
a7:75:9b:16:b2:d1:38:8f:ec:e6:c1:b1:c6:fe:30:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:1A:6B:F8:5F:AA:4E:25:3F:57:3C:DC:67:E8:B9:B5:53:33:0F
X509v3 Authority Key Identifier:
keyid:5A:B4:34:94:05:29:85:85:F1:EF:CB:65:85:37:61:8F:25:D4:33:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrQ0lAUphYXx78tlhTdhjyXUM14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/WrQ0lAUphYXx78tlhTdhjyXUM14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/WrQ0lAUphYXx78tlhTdhjyXUM14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:38:64:fd:28:24:c6:82:1f:d7:dc:9c:52:03:d9:35:b0:89:
4f:fd:84:e0:bc:86:dc:c4:c1:3e:72:7e:98:be:d1:f1:b8:c2:
21:c9:a6:dd:5f:51:22:9a:d4:91:95:c4:c2:ad:1c:82:26:5c:
8f:15:03:d3:82:17:7e:66:fa:e3:e4:14:c5:ab:29:a8:d8:ac:
0f:27:c1:9b:5d:77:bc:79:d5:dd:f6:60:da:bb:ce:5e:09:d9:
04:68:98:f4:3b:1d:9e:2d:aa:d4:29:c5:6f:c5:e8:62:de:48:
92:e2:c7:58:af:d1:1e:df:25:b9:a3:23:49:9a:82:ca:07:0d:
f6:9e:e8:b6:6c:7f:a4:e0:4c:71:4d:dd:f4:ba:a1:e4:59:4f:
89:b1:20:67:c6:ea:41:d9:06:1b:0d:18:66:ec:f9:3c:97:de:
75:cf:5b:8b:5c:24:92:39:23:d8:73:de:45:c7:59:62:d7:47:
29:b1:c5:6a:54:3e:ca:5a:66:bb:b4:cc:a2:5f:18:f4:ed:28:
63:de:f2:53:d8:05:6c:0e:94:21:a4:1b:73:12:8b:c6:66:d5:
0b:b5:b6:c2:75:29:21:34:13:57:5b:6a:e0:3e:ff:21:ba:2b:
91:af:d0:c5:a1:25:0e:4d:39:0d:c2:a0:43:5b:b5:da:1b:5c:
71:c7:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:40 2025 by rpki-client