Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier: iTTfrsEu/ajUUcT3GzvN9FIqgdO7m9RLjv/qViNBTfU=
Subject key identifier: 4A:6E:D9:14:25:51:12:D2:E6:89:2E:2D:65:BF:09:82:75:A4:8E:E3
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 0194BCE07095CFED4D85A2CD2E5D0772016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number: 10D5
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: JAZPvo1AeIBYlpn/6lHprT3U/hPGtDh86o3ycMHpRME=)
2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:95:cf:ed:4d:85:a2:cd:2e:5d:07:72:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=4a6ed914255112d2e6892e2d65bf098275a48ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:88:e6:08:85:09:4e:6b:06:54:a7:5c:8f:
fd:cf:ed:34:ee:5e:b9:e2:d7:67:79:83:4c:fb:4c:
bc:40:09:91:70:45:43:76:b4:da:50:69:20:fd:7f:
e2:6c:7e:a5:30:8e:24:94:cd:4e:23:37:04:a3:90:
2c:d8:bc:2b:4b:31:f0:f2:0c:97:70:93:e1:a8:3e:
08:4a:6c:08:42:7f:1a:b7:d6:fc:ad:74:69:c8:dc:
88:bd:29:8a:a7:e6:e9:3d:56:ef:04:bb:bc:d4:f2:
54:58:87:da:5c:09:5b:99:a2:5d:10:c6:98:b0:f4:
a5:02:9a:01:f9:1f:99:c5:2c:5c:fe:52:c9:ad:8e:
b2:d0:cb:38:05:a7:25:5f:21:6d:78:9f:66:de:ae:
bf:11:46:ea:27:71:7b:5c:17:ea:4a:cd:1a:29:b4:
ab:f8:56:a7:4b:51:b6:86:d0:a9:3c:b3:2c:42:53:
10:49:c2:02:9b:9b:c7:f5:10:a8:79:51:da:9e:d6:
2f:72:68:05:de:36:4e:71:bc:01:e4:0f:db:d1:36:
79:f9:76:f0:e3:8c:23:b0:75:d7:f3:ee:38:7d:15:
d5:ad:9f:3e:74:81:39:00:64:b6:13:2e:a4:02:a7:
23:1a:46:ed:8d:dc:8f:0b:fe:75:7f:0d:8a:66:4b:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:D9:14:25:51:12:D2:E6:89:2E:2D:65:BF:09:82:75:A4:8E:E3
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:82:16:e9:27:95:e8:09:19:00:89:c9:ee:17:eb:51:07:
d5:9c:64:9f:5d:93:ef:b7:90:d1:a3:1f:5e:68:ff:7b:c6:7b:
f9:31:29:5c:ca:82:b7:07:09:cb:12:d0:da:05:1c:28:58:dc:
68:7f:7d:06:aa:1a:31:95:58:68:fb:88:2b:e8:39:84:8b:bd:
36:49:76:50:69:18:21:df:cd:7f:1a:7a:d0:43:5b:7e:9d:de:
10:74:82:78:af:b9:44:70:4c:4a:df:bd:9e:4e:0d:e1:fd:70:
cf:3b:06:e0:47:f1:6b:8d:bb:3e:c0:07:e0:46:30:31:1d:9b:
7f:ac:89:51:1a:59:f7:9d:64:3b:29:6b:94:59:4d:30:89:a5:
5f:32:31:1c:06:a9:6b:2b:be:b0:71:33:cd:c3:16:6a:b7:e8:
54:75:85:52:68:47:03:df:2e:94:a6:c4:de:ed:60:22:1d:7e:
d9:86:f7:cd:5d:cd:3c:db:32:8f:41:68:6b:87:d2:80:45:8a:
9c:be:fe:89:a4:99:c8:44:e9:ac:89:d1:48:1b:fd:3b:08:12:
0b:8d:d2:63:11:4e:c7:1d:4f:fa:d4:9b:15:a8:f5:ef:3c:8d:
9e:d6:44:e4:cf:ec:54:d3:0a:91:4b:52:d8:8e:57:ad:a7:d6:
80:91:f9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HCVz+1NhaLNLl0HcgFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk
YzMyMmMwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
Eyg0YTZlZDkxNDI1NTExMmQyZTY4OTJlMmQ2NWJmMDk4Mjc1YTQ4ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vGI5giFCU5rBlSnXI/9z+007l65
4tdneYNM+0y8QAmRcEVDdrTaUGkg/X/ibH6lMI4klM1OIzcEo5As2LwrSzHw8gyX
cJPhqD4ISmwIQn8at9b8rXRpyNyIvSmKp+bpPVbvBLu81PJUWIfaXAlbmaJdEMaY
sPSlApoB+R+ZxSxc/lLJrY6y0Ms4BaclXyFteJ9m3q6/EUbqJ3F7XBfqSs0aKbSr
+FanS1G2htCpPLMsQlMQScICm5vH9RCoeVHantYvcmgF3jZOcbwB5A/b0TZ5+Xbw
44wjsHXX8+44fRXVrZ8+dIE5AGS2Ey6kAqcjGkbtjdyPC/51fw2KZkuJdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpu2RQlURLS5okuLWW/CYJ1pI7jMB8GA1UdIwQY
MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt
ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1
LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXWCFukn
legJGQCJye4X61EH1Zxkn12T77eQ0aMfXmj/e8Z7+TEpXMqCtwcJyxLQ2gUcKFjc
aH99BqoaMZVYaPuIK+g5hIu9Nkl2UGkYId/Nfxp60ENbfp3eEHSCeK+5RHBMSt+9
nk4N4f1wzzsG4Efxa427PsAH4EYwMR2bf6yJURpZ951kOylrlFlNMImlXzIxHAap
ayu+sHEzzcMWarfoVHWFUmhHA98ulKbE3u1gIh1+2Yb3zV3NPNsyj0Foa4fSgEWK
nL7+iaSZyETprInRSBv9OwgSC43SYxFOxx1P+tSbFaj17zyNntZE5M/sVNMKkUtS
2I5XrafWgJH5vw==
-----END CERTIFICATE-----
Generated at Thu May 1 14:53:56 2025 by rpki-client