Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: tDcWKL0iCxwVc18W4zVKOpZsWsj4nyVUnbIZq5GKFnI=
Subject key identifier: C7:25:F7:10:B8:67:B6:41:25:E4:BB:55:4A:F7:EE:34:4A:64:0B:52
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 0194BCA9D587FE6C9B014076AF63E6A881B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 13D9
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: LXSqOu14RaetonpHEf5CfodvAFPkfp5drqFsyjJE59Q=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:87:fe:6c:9b:01:40:76:af:63:e6:a8:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=c725f710b867b64125e4bb554af7ee344a640b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:21:7b:b9:04:4f:21:10:f7:bf:35:ad:54:
d7:4f:ec:98:11:b4:05:2f:81:ec:fd:88:44:87:e0:
1d:d2:ec:da:72:7f:ad:2e:a2:dc:a8:ab:5a:27:36:
5c:eb:d6:12:c4:12:b2:60:fb:e8:39:cf:fc:17:a0:
ae:a7:fb:60:36:3f:fe:82:2c:bd:1f:b6:a0:b9:da:
6e:7b:94:02:ad:ab:e2:a0:7d:68:e1:81:71:f8:81:
40:f7:f6:ae:2c:11:02:ec:72:0e:8d:15:1d:5f:b2:
81:6d:53:c6:8b:b1:74:42:ed:0f:39:aa:e7:b1:39:
11:4c:35:33:96:8f:dc:30:c5:00:75:99:f0:3f:66:
80:49:55:6a:6f:cb:e0:b5:5d:fd:7d:6b:4a:7c:a8:
b6:be:71:18:e6:3e:3c:9e:5c:da:b3:80:88:1a:5a:
c7:5f:c3:17:74:ef:f1:ff:cf:1c:c2:46:30:e4:49:
f7:54:86:8a:db:bc:cf:02:d3:03:d3:77:e1:c0:2f:
6a:94:e1:9e:1b:8f:93:7b:84:9b:f6:27:b0:a4:f4:
1e:bd:0a:77:59:3a:83:c3:27:cc:97:fb:f3:ed:7b:
8d:d4:a8:18:35:2d:7d:39:04:3b:9a:a1:51:95:f1:
37:6a:d2:b0:72:71:5c:78:fc:61:db:7d:fc:25:9d:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:F7:10:B8:67:B6:41:25:E4:BB:55:4A:F7:EE:34:4A:64:0B:52
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:97:a5:48:cb:f0:ea:89:9a:9c:60:5c:3d:34:ff:fc:75:f0:
68:2c:f5:5e:1c:b8:3d:a8:37:5f:18:2d:1f:65:9e:98:fc:5c:
d6:a7:c3:cc:69:97:e5:0f:fe:23:23:5f:ce:ae:9d:ec:20:54:
d7:fc:0c:3f:a3:06:45:10:19:57:24:23:8b:6e:37:2c:10:f4:
12:c2:97:32:df:fb:4b:72:4a:90:20:43:c0:4e:f1:e0:a3:66:
2e:7c:0f:67:32:9a:a0:7a:1c:61:10:69:8e:2a:66:bd:37:68:
aa:25:e0:c6:3b:ea:4a:83:a2:46:4a:5b:34:b0:83:d9:57:5e:
16:33:bf:0b:33:b5:9c:21:4b:1c:56:0a:fb:ac:6d:ec:14:00:
66:9b:3c:df:08:a7:e2:8e:bf:24:7e:af:17:96:e5:05:d3:a9:
c2:46:dd:2b:75:ec:46:9d:fa:37:ed:19:1f:84:ae:35:6b:e6:
ed:a2:47:8a:5f:f9:9c:b2:c9:93:0c:5b:cc:72:6f:98:68:4e:
ed:d0:75:2e:c2:0f:44:34:70:10:b8:0f:67:cd:ea:a8:36:e9:
53:07:85:8e:4f:01:52:eb:b2:41:86:75:5a:b1:61:21:6f:8b:
cb:7d:9b:9a:38:35:09:47:dc:3b:c8:6b:9a:c8:1a:a1:02:a7:
ae:55:41:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdWH/mybAUB2r2PmqIGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3
MmQzZGQwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
EyhjNzI1ZjcxMGI4NjdiNjQxMjVlNGJiNTU0YWY3ZWUzNDRhNjQwYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNQhe7kETyEQ9781rVTXT+yYEbQF
L4Hs/YhEh+Ad0uzacn+tLqLcqKtaJzZc69YSxBKyYPvoOc/8F6Cup/tgNj/+giy9
H7agudpue5QCravioH1o4YFx+IFA9/auLBEC7HIOjRUdX7KBbVPGi7F0Qu0POarn
sTkRTDUzlo/cMMUAdZnwP2aASVVqb8vgtV39fWtKfKi2vnEY5j48nlzas4CIGlrH
X8MXdO/x/88cwkYw5En3VIaK27zPAtMD03fhwC9qlOGeG4+Te4Sb9iewpPQevQp3
WTqDwyfMl/vz7XuN1KgYNS19OQQ7mqFRlfE3atKwcnFcePxh2338JZ1TOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcl9xC4Z7ZBJeS7VUr37jRKZAtSMB8GA1UdIwQY
MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt
OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1
LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5elSMvw
6omanGBcPTT//HXwaCz1Xhy4Pag3XxgtH2WemPxc1qfDzGmX5Q/+IyNfzq6d7CBU
1/wMP6MGRRAZVyQji243LBD0EsKXMt/7S3JKkCBDwE7x4KNmLnwPZzKaoHocYRBp
jipmvTdoqiXgxjvqSoOiRkpbNLCD2VdeFjO/CzO1nCFLHFYK+6xt7BQAZps83win
4o6/JH6vF5blBdOpwkbdK3XsRp36N+0ZH4SuNWvm7aJHil/5nLLJkwxbzHJvmGhO
7dB1LsIPRDRwELgPZ83qqDbpUweFjk8BUuuyQYZ1WrFhIW+Ly32bmjg1CUfcO8hr
msgaoQKnrlVByg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:49 2025 by rpki-client