Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier: +bP3WCdAObgraINls2yQuCF+Ax/JYYobuE84krjNAFM=
Subject key identifier: 13:BE:2C:E0:F7:99:55:A2:04:CE:27:9B:A3:86:2C:30:13:E9:56:82
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 0194BCA9DA4D7824697529CED0B784647BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: GhFOfS4e98NhqzJsda+8hBFz8I8HNrcw75iOVOuPo0U=)
2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:4d:78:24:69:75:29:ce:d0:b7:84:64:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=13be2ce0f79955a204ce279ba3862c3013e95682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:a1:a1:11:ef:03:54:24:52:fc:01:b2:a4:
74:6c:97:9a:4e:93:48:11:72:a3:54:44:50:fb:e3:
ab:91:83:0b:8e:5d:c3:3b:6a:ae:59:51:cf:d1:85:
02:5e:85:e1:a4:99:1e:72:bd:8d:8f:33:ce:0d:1f:
65:90:1a:6f:65:1f:bb:f7:4a:6f:22:15:0f:63:a7:
5a:b3:01:3b:f1:6d:0c:54:db:a1:e6:af:9d:8b:b2:
35:e3:48:1e:30:91:bc:bd:05:d7:e0:11:e6:41:22:
57:05:6c:70:68:af:d2:79:72:87:ba:73:a7:06:6b:
6d:3a:43:1d:ee:66:25:7c:83:b6:2e:cb:d5:9f:52:
e6:4f:da:ed:23:bd:34:83:f4:91:2a:2c:99:28:db:
55:70:fd:93:5a:10:59:ed:a2:2f:05:b9:d3:5c:9e:
9a:cf:54:a4:c5:96:34:5b:64:98:85:a0:5f:75:33:
5e:55:a9:38:ef:b1:f4:6f:14:63:37:1d:ac:68:28:
e9:19:b5:56:55:96:6c:d1:dd:90:0e:c6:a7:5d:35:
bb:82:d7:d8:ff:b1:db:47:0e:2c:1f:b1:74:ca:c6:
1a:ed:cb:69:53:b5:cf:11:17:21:1f:9a:1a:07:4b:
8d:e5:29:36:13:21:c4:d0:61:b1:40:15:81:c6:09:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:2C:E0:F7:99:55:A2:04:CE:27:9B:A3:86:2C:30:13:E9:56:82
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2a:d9:2b:cd:76:93:9f:8f:d2:a3:e2:5b:49:23:3e:35:69:
3c:40:ac:99:c9:1a:3e:be:17:bf:63:b0:e9:c0:f8:ae:97:e0:
c0:9d:61:91:e4:1d:78:68:38:aa:ad:2f:94:c6:bb:4b:97:08:
e4:42:91:9b:b1:a8:7c:a3:e2:c8:24:cd:d5:39:45:a4:9c:45:
a2:d0:8c:4e:e4:ce:68:02:93:18:70:ef:27:53:60:f7:70:29:
7b:02:6e:8c:31:e7:e4:b1:b3:0e:c5:6e:6f:69:2d:74:85:fd:
35:0e:37:ad:4a:72:ac:2e:4d:79:ca:b0:d2:35:f2:64:af:c7:
10:31:5a:90:4b:16:a8:17:dc:1d:d3:2c:8c:f7:8e:7d:51:e8:
4f:b6:91:4f:39:88:92:ff:57:07:63:13:cd:d1:59:7a:0a:e9:
63:9e:2c:c6:0f:49:ec:23:ab:e3:61:bf:d9:31:0d:88:94:35:
a9:04:8c:7a:a2:c2:f4:5f:75:8b:e3:7f:63:90:d9:db:74:e9:
0d:c2:ad:9f:ed:a8:21:e3:fd:04:5e:fe:bd:67:89:c4:1f:45:
c3:32:ea:02:6d:ba:53:7d:8c:35:0a:69:b8:08:0d:fc:69:6e:
94:4f:7f:a4:9b:35:bd:ea:f4:14:47:6e:2e:d2:44:4d:d2:72:
3b:d9:8d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdpNeCRpdSnO0LeEZHvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGJjMDIxYjY1N2E1OTRlZTU4ZDlkMzZkOGQ5MTgzMWQw
ODUxNzQwHhcNMjUwMTMxMTQwMDM1WhcNMjUwMjAxMTQwMDM1WjAzMTEwLwYDVQQD
EygxM2JlMmNlMGY3OTk1NWEyMDRjZTI3OWJhMzg2MmMzMDEzZTk1NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ShoRHvA1QkUvwBsqR0bJeaTpNI
EXKjVERQ++OrkYMLjl3DO2quWVHP0YUCXoXhpJkecr2NjzPODR9lkBpvZR+790pv
IhUPY6daswE78W0MVNuh5q+di7I140geMJG8vQXX4BHmQSJXBWxwaK/SeXKHunOn
BmttOkMd7mYlfIO2LsvVn1LmT9rtI700g/SRKiyZKNtVcP2TWhBZ7aIvBbnTXJ6a
z1SkxZY0W2SYhaBfdTNeVak477H0bxRjNx2saCjpGbVWVZZs0d2QDsanXTW7gtfY
/7HbRw4sH7F0ysYa7ctpU7XPERchH5oaB0uN5Sk2EyHE0GGxQBWBxgkpHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO+LOD3mVWiBM4nm6OGLDAT6VaCMB8GA1UdIwQY
MBaAFEcLwCG2V6WU7ljZ022NkYMdCFF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQt
M2JlY2RkZmNjYWU2LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQtM2JlY2RkZmNjYWU2
LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSrZK812
k5+P0qPiW0kjPjVpPECsmckaPr4Xv2Ow6cD4rpfgwJ1hkeQdeGg4qq0vlMa7S5cI
5EKRm7GofKPiyCTN1TlFpJxFotCMTuTOaAKTGHDvJ1Ng93ApewJujDHn5LGzDsVu
b2ktdIX9NQ43rUpyrC5Necqw0jXyZK/HEDFakEsWqBfcHdMsjPeOfVHoT7aRTzmI
kv9XB2MTzdFZegrpY54sxg9J7COr42G/2TENiJQ1qQSMeqLC9F91i+N/Y5DZ23Tp
DcKtn+2oIeP9BF7+vWeJxB9FwzLqAm26U32MNQppuAgN/GlulE9/pJs1ver0FEdu
LtJETdJyO9mNuw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:45 2025 by rpki-client