Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: frFIRXmoN4ymyaScvukkYQl1UX8EUAOcUptDUE098R4=
Subject key identifier: 18:26:56:5F:AC:47:2E:F0:2F:8E:5C:15:15:21:16:AE:7C:E5:52:48
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0194BD4E8DA7296EE8EBC42D985C5CC40950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 0FA7
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: Wtyiq0dX0WTCjYzuypPtEJal2sDHbj5fQ7/hr3oK6GE=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:a7:29:6e:e8:eb:c4:2d:98:5c:5c:c4:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=1826565fac472ef02f8e5c15152116ae7ce55248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:f0:d2:0f:a3:01:77:6c:fb:fd:bd:d2:3c:
3d:18:f9:36:0f:87:3b:8d:42:cf:fe:3c:34:a7:5a:
3d:64:ac:dd:da:d5:0d:b0:53:f0:b8:05:80:19:1e:
01:99:bc:86:c0:8f:6c:ed:ef:8c:13:5a:8d:f0:6a:
e5:17:03:36:66:e4:1b:0b:85:66:88:30:e1:e4:6a:
e3:e1:39:10:64:3a:84:01:75:ba:20:af:51:2c:14:
b9:43:bd:d4:b7:5d:3c:f2:1d:c9:dd:17:0b:33:d3:
53:84:85:77:ff:f0:79:93:a1:46:89:e7:8f:5c:18:
10:98:81:f2:bd:93:29:9c:79:df:84:64:29:90:4a:
48:d2:41:45:9d:65:13:9a:89:14:bb:b6:a0:5c:86:
bb:cc:5f:7e:c6:02:33:22:15:de:0c:6e:d0:1f:a0:
01:d5:07:20:3c:b9:8a:74:ea:14:6d:7d:df:33:e3:
f0:74:7e:e4:ce:58:95:46:9a:e5:cd:e7:9a:43:e4:
24:76:6f:78:78:99:1f:d3:03:6e:46:99:3d:8b:16:
ae:a2:5d:57:ed:be:db:6e:07:0e:b2:84:f3:0b:27:
40:3a:ff:eb:4f:02:0f:69:63:a8:95:22:16:2b:a8:
38:35:3b:48:3e:35:87:a8:38:42:b0:b7:0f:aa:1b:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:56:5F:AC:47:2E:F0:2F:8E:5C:15:15:21:16:AE:7C:E5:52:48
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:d2:14:85:bd:07:4d:89:a3:1a:b0:81:16:ba:ff:d0:7e:
7b:27:e1:a0:dc:1e:8d:d4:c9:b3:1c:7c:6a:c6:14:09:de:27:
8b:66:bd:0f:b4:5c:03:33:33:c4:2a:fb:17:fb:d6:aa:cf:76:
1f:22:fe:c4:4e:8c:ed:4b:4b:63:61:ce:b0:fb:07:6d:94:4b:
57:24:c7:39:fd:dc:d3:e7:b0:d0:b2:eb:da:55:0c:06:a2:bc:
4a:ab:77:e9:bf:f3:02:a4:67:87:8e:b5:9d:89:17:b6:b8:40:
f0:57:d1:ec:62:47:97:a2:d4:f7:40:64:9f:9e:b7:ea:5e:bb:
cf:04:3a:9a:cc:d5:6f:73:11:39:4f:b8:c8:ec:00:1d:12:9d:
92:a4:24:9a:d5:fd:f8:a4:3c:20:6f:3a:77:cf:2d:15:93:c0:
a2:fe:c2:97:d2:8e:ea:b2:54:c7:00:40:88:75:d9:02:ab:d1:
6e:4a:1b:08:74:d4:1e:8e:11:fd:70:9e:fe:a2:1b:71:d7:70:
de:16:f0:a1:ce:08:fc:a0:ba:9b:ca:26:28:9d:20:b2:ec:ed:
1a:00:0c:e4:ac:1b:9b:7d:09:ba:0f:47:f7:a1:a6:4e:6d:88:
31:bb:ae:94:56:41:22:45:72:48:70:99:43:c0:2c:16:39:9a:
36:16:e5:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9To2nKW7o68QtmFxcxAlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
EygxODI2NTY1ZmFjNDcyZWYwMmY4ZTVjMTUxNTIxMTZhZTdjZTU1MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtTw0g+jAXds+/290jw9GPk2D4c7
jULP/jw0p1o9ZKzd2tUNsFPwuAWAGR4BmbyGwI9s7e+ME1qN8GrlFwM2ZuQbC4Vm
iDDh5Grj4TkQZDqEAXW6IK9RLBS5Q73Ut1088h3J3RcLM9NThIV3//B5k6FGieeP
XBgQmIHyvZMpnHnfhGQpkEpI0kFFnWUTmokUu7agXIa7zF9+xgIzIhXeDG7QH6AB
1QcgPLmKdOoUbX3fM+PwdH7kzliVRprlzeeaQ+Qkdm94eJkf0wNuRpk9ixauol1X
7b7bbgcOsoTzCydAOv/rTwIPaWOolSIWK6g4NTtIPjWHqDhCsLcPqhtOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgmVl+sRy7wL45cFRUhFq585VJIMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc/SFIW9
B02JoxqwgRa6/9B+eyfhoNwejdTJsxx8asYUCd4ni2a9D7RcAzMzxCr7F/vWqs92
HyL+xE6M7UtLY2HOsPsHbZRLVyTHOf3c0+ew0LLr2lUMBqK8Sqt36b/zAqRnh461
nYkXtrhA8FfR7GJHl6LU90Bkn5636l67zwQ6mszVb3MROU+4yOwAHRKdkqQkmtX9
+KQ8IG86d88tFZPAov7Cl9KO6rJUxwBAiHXZAqvRbkobCHTUHo4R/XCe/qIbcddw
3hbwoc4I/KC6m8omKJ0gsuztGgAM5Kwbm30Jug9H96GmTm2IMbuulFZBIkVySHCZ
Q8AsFjmaNhbl8g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:05 2025 by rpki-client