Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier: Q/P4dTDZ/DcZ2scX0tX1lwyM4WMMgkT0/BZ8Ye1fnW4=
Subject key identifier: AA:71:DE:A9:32:E9:76:B6:14:95:16:8E:1D:F7:37:99:93:F2:89:07
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial: 0194BD85792742EF74FF353A60EADADC8D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number: D8
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: Sr7CANnPzb2DOGW5GMC83HNWRhV+pkq21x6WU6lQAPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:27:42:ef:74:ff:35:3a:60:ea:da:dc:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=aa71dea932e976b61495168e1df7379993f28907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:56:bc:6f:16:3a:9a:9c:cb:b1:be:f6:9c:
f5:ee:fb:a6:65:5f:91:41:4b:17:35:41:e2:27:1e:
42:61:50:1f:3f:5e:5d:b1:c3:90:25:da:6a:83:5d:
91:61:79:ad:d8:64:95:ac:ab:33:c5:97:57:13:72:
dd:62:68:5e:b3:49:94:fe:5b:dd:8e:c9:20:ae:34:
db:e1:ef:8d:42:a8:11:ab:1a:7e:33:3f:57:85:ef:
cd:81:ff:da:27:d1:03:8f:55:71:28:07:64:a9:95:
77:92:6e:cd:90:0a:1d:dc:72:75:14:ed:51:ee:dd:
e8:2b:5e:fc:2f:73:6d:32:c6:5f:d0:3f:d3:7e:11:
49:24:c7:92:c3:e3:27:09:26:c3:b6:71:11:15:f1:
41:5c:33:34:c6:c9:ec:2e:52:31:58:1e:e5:1b:36:
14:2b:72:7c:50:14:52:d6:5a:ca:6d:b1:64:47:f0:
c2:54:f5:7e:17:c5:08:56:ff:2f:bc:55:55:83:9e:
47:9d:ed:4b:b1:68:bc:7c:81:d6:c7:ff:b2:55:31:
d1:7f:96:63:40:9e:a7:be:a2:96:89:95:2c:f1:1d:
b4:b0:2f:66:ca:55:56:1f:29:e8:b5:61:53:16:08:
c7:0d:7f:25:d5:86:c9:92:31:b5:7f:f0:40:a3:0e:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:DE:A9:32:E9:76:B6:14:95:16:8E:1D:F7:37:99:93:F2:89:07
X509v3 Authority Key Identifier:
keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:3c:fd:ab:ef:bc:af:d8:b8:34:ce:4f:2a:cd:d7:84:b6:
99:e4:03:7a:74:72:ee:21:d2:ad:27:1c:f8:c4:12:df:34:f2:
5b:ac:e9:b2:6b:81:54:81:cb:26:c3:95:4f:84:91:b9:0f:0b:
e1:be:8e:a1:97:e4:4b:07:19:05:d5:27:a7:c0:eb:5e:35:81:
24:23:03:01:f4:51:e7:e9:19:ea:96:7c:b4:e3:57:c2:7d:35:
72:56:97:1b:44:77:eb:7a:f2:51:1b:e6:44:1f:15:be:96:16:
c6:a5:28:14:1d:02:9d:03:b1:22:56:b7:3f:5f:09:7d:50:ae:
11:cd:38:6c:65:62:50:68:63:c7:5c:c1:ab:17:06:a2:3a:26:
6c:64:a1:b8:f1:75:6d:14:fd:8e:7c:4d:67:a2:1f:7a:58:9b:
7a:90:0d:45:a0:b4:89:d0:b4:cd:42:d2:1c:42:33:1b:c0:5d:
47:a4:97:56:a7:1f:92:e3:b0:78:da:6e:c8:86:fb:4e:c2:93:
ae:26:b3:8a:1c:1b:35:0e:d8:85:41:06:47:15:c1:7d:71:68:
1f:95:5b:49:5d:8b:73:72:af:f5:45:62:3c:0c:40:0a:21:2b:
33:45:5b:21:46:38:92:b4:cb:e3:87:ae:b8:ef:04:5d:b0:dc:
02:04:3e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXknQu90/zU6YOra3I1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDFhNDA2ZmRmZmVlMjU5Mzg0OTZiZTVhYzlhNTNlMWJi
OWM2NTkwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
EyhhYTcxZGVhOTMyZTk3NmI2MTQ5NTE2OGUxZGY3Mzc5OTkzZjI4OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VpWvG8WOpqcy7G+9pz17vumZV+R
QUsXNUHiJx5CYVAfP15dscOQJdpqg12RYXmt2GSVrKszxZdXE3LdYmhes0mU/lvd
jskgrjTb4e+NQqgRqxp+Mz9Xhe/Ngf/aJ9EDj1VxKAdkqZV3km7NkAod3HJ1FO1R
7t3oK178L3NtMsZf0D/TfhFJJMeSw+MnCSbDtnERFfFBXDM0xsnsLlIxWB7lGzYU
K3J8UBRS1lrKbbFkR/DCVPV+F8UIVv8vvFVVg55Hne1LsWi8fIHWx/+yVTHRf5Zj
QJ6nvqKWiZUs8R20sC9mylVWHynotWFTFgjHDX8l1YbJkjG1f/BAow7bbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpx3qky6Xa2FJUWjh33N5mT8okHMB8GA1UdIwQY
MBaAFFlBpAb9/+4lk4SWvlrJpT4bucZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUt
OWI0ZmZkMDhlMDQ4LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUtOWI0ZmZkMDhlMDQ4
LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNk8/avv
vK/YuDTOTyrN14S2meQDenRy7iHSrScc+MQS3zTyW6zpsmuBVIHLJsOVT4SRuQ8L
4b6OoZfkSwcZBdUnp8DrXjWBJCMDAfRR5+kZ6pZ8tONXwn01claXG0R363ryURvm
RB8VvpYWxqUoFB0CnQOxIla3P18JfVCuEc04bGViUGhjx1zBqxcGojombGShuPF1
bRT9jnxNZ6IfelibepANRaC0idC0zULSHEIzG8BdR6SXVqcfkuOweNpuyIb7TsKT
riazihwbNQ7YhUEGRxXBfXFoH5VbSV2Lc3Kv9UViPAxACiErM0VbIUY4krTL44eu
uO8EXbDcAgQ+0w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:03 2025 by rpki-client