Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: +XlGdI6KCZSZoeEh8Yy7yxLP0OnnVz+TDmqNBQlG4DE=
Subject key identifier: D1:71:A4:D5:5E:61:69:F4:0A:0B:72:90:77:6D:F8:79:33:0C:A2:52
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 0194BC729A4E92B6D12E8DAB56BEED36F4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: k+i6hU+HUhrBBeAsUdMzKPiBYZFa7smJoVgijPY+0cM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:4e:92:b6:d1:2e:8d:ab:56:be:ed:36:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=d171a4d55e6169f40a0b7290776df879330ca252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:ea:69:9c:4f:6b:ce:88:01:7b:70:85:ef:
21:b0:a1:3a:06:e0:b7:96:7c:f3:56:86:45:be:a4:
cd:62:7d:00:60:62:24:e4:9d:10:ea:b7:20:34:1d:
15:61:33:e0:a6:41:ca:84:18:5f:b6:d0:0b:29:a1:
1c:82:51:59:7a:e2:2b:4a:81:5b:ac:6c:5b:99:45:
82:c4:9e:6e:37:26:14:fb:45:f8:48:06:73:3a:2e:
ae:9b:6f:9a:3f:61:d1:b7:4e:98:f5:0a:94:98:d6:
50:d5:42:0a:c8:40:3b:53:fa:a5:81:12:3f:d7:0d:
92:32:bd:a3:d1:e2:fa:27:2d:d6:8e:5c:85:fa:e8:
f9:75:30:4e:d5:ef:8b:e2:e6:aa:a7:d1:84:59:94:
d5:33:47:2f:91:e3:dc:bc:85:02:28:3e:89:fd:4d:
22:e1:89:d3:23:b8:c0:1b:d5:7e:ce:73:7a:53:38:
bf:b3:f6:0d:5e:17:da:6e:47:64:8f:02:bc:5f:b1:
17:aa:38:c7:b4:41:1a:59:cb:3e:82:2c:26:9c:8f:
e3:d7:89:f4:e8:93:f7:1b:e0:53:8b:5c:8e:4d:32:
84:b1:1d:1b:df:71:03:d2:fe:10:9f:ab:b1:0b:c2:
38:ee:5b:99:77:16:7e:4a:5a:07:f2:23:9b:1d:80:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:A4:D5:5E:61:69:F4:0A:0B:72:90:77:6D:F8:79:33:0C:A2:52
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4a:c7:b4:ef:0f:3e:7e:8d:4e:20:2c:5f:a3:97:98:51:94:
1a:f9:36:a3:e5:72:ea:be:ee:e7:82:74:7f:dd:59:bb:fc:5d:
9f:72:01:e2:fd:94:38:c6:f8:3c:8a:95:a7:03:c1:e5:46:6b:
e4:d2:b1:e7:02:c9:d4:20:ff:2f:43:61:9e:fc:71:e3:a3:ce:
56:17:bf:44:fd:01:0f:30:e9:73:0a:e9:b4:c0:f4:99:c3:3d:
12:0b:5d:a6:3e:ec:d7:ff:ad:18:93:56:5d:a6:9e:29:c9:17:
81:3e:de:e7:99:95:3e:cc:d5:33:3b:d5:bf:ba:3c:dc:5e:37:
92:eb:ef:75:c5:40:b5:2a:c1:d4:db:0a:6c:af:94:b8:e0:cb:
e8:16:3a:20:9f:eb:ed:5c:54:7e:58:08:f2:95:4c:5d:92:34:
c0:88:2d:89:56:1c:69:ed:3b:65:1c:60:54:d0:06:4f:ca:bc:
b8:b1:7e:bc:73:c9:fd:53:6e:7e:af:a4:86:45:72:cb:79:74:
88:5b:f3:d8:ec:79:70:95:df:d2:08:c6:8c:fc:46:7a:78:18:
ae:4e:25:eb:80:0c:f9:c1:bb:59:89:79:06:83:e2:17:c6:e2:
e4:ab:a6:2d:09:27:df:cb:3c:48:2c:91:d0:fc:5c:53:e6:b4:
dc:1b:49:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cppOkrbRLo2rVr7tNvT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3
ZTk4ZmQwHhcNMjUwMTMxMTMwMDE0WhcNMjUwMjAxMTMwMDE0WjAzMTEwLwYDVQQD
EyhkMTcxYTRkNTVlNjE2OWY0MGEwYjcyOTA3NzZkZjg3OTMzMGNhMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtevqaZxPa86IAXtwhe8hsKE6BuC3
lnzzVoZFvqTNYn0AYGIk5J0Q6rcgNB0VYTPgpkHKhBhfttALKaEcglFZeuIrSoFb
rGxbmUWCxJ5uNyYU+0X4SAZzOi6um2+aP2HRt06Y9QqUmNZQ1UIKyEA7U/qlgRI/
1w2SMr2j0eL6Jy3WjlyF+uj5dTBO1e+L4uaqp9GEWZTVM0cvkePcvIUCKD6J/U0i
4YnTI7jAG9V+znN6Uzi/s/YNXhfabkdkjwK8X7EXqjjHtEEaWcs+giwmnI/j14n0
6JP3G+BTi1yOTTKEsR0b33ED0v4Qn6uxC8I47luZdxZ+SloH8iObHYB8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFxpNVeYWn0CgtykHdt+HkzDKJSMB8GA1UdIwQY
MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt
Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi
LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0rHtO8P
Pn6NTiAsX6OXmFGUGvk2o+Vy6r7u54J0f91Zu/xdn3IB4v2UOMb4PIqVpwPB5UZr
5NKx5wLJ1CD/L0Nhnvxx46POVhe/RP0BDzDpcwrptMD0mcM9Egtdpj7s1/+tGJNW
XaaeKckXgT7e55mVPszVMzvVv7o83F43kuvvdcVAtSrB1NsKbK+UuODL6BY6IJ/r
7VxUflgI8pVMXZI0wIgtiVYcae07ZRxgVNAGT8q8uLF+vHPJ/VNufq+khkVyy3l0
iFvz2Ox5cJXf0gjGjPxGengYrk4l64AM+cG7WYl5BoPiF8bi5KumLQkn38s8SCyR
0PxcU+a03BtJ3Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:55 2025 by rpki-client