Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
File: 1WxQdOZvQ85Xij1KLnvMIVy16WA.mft (raw, json)
Hash identifier: 8GgxA1+SXYlOy1uikhOTAeM4pRLqIP2tuP+6cIfqn0s=
Subject key identifier: 87:17:8D:F1:C1:99:44:32:3B:D0:AF:56:FB:24:49:77:15:23:34:E9
Authority key identifier: D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
Certificate issuer: /CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Certificate serial: 0194BC0506B34CF053129B62F27895A77061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 1WxQdOZvQ85Xij1KLnvMIVy16WA.crl (hash: zXUXCGg2ggvf0kvBRDlF99A31vQ0FaKBnE0OIhr2ZrY=)
2: CyWNAfuECP2rY1LiJUk0SECEFDs.roa (hash: +Pj5JZ248Xn9Erx65xMCWTlLTKb0C7POgosn0n4yJ1M=)
3: uUPx_cMqIM_PKJQ7ZhuZzapT-_8.roa (hash: WaVxbJpwd7CxDJ+kHTNGdXrn2kmcA7TEwyZR65DTwhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:b3:4c:f0:53:12:9b:62:f2:78:95:a7:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=87178df1c19944323bd0af56fb244977152334e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:8d:71:bc:cc:ca:21:ca:cc:de:57:a5:0a:
8c:3f:88:52:9e:20:8b:9c:4f:21:7e:d6:ab:29:33:
bc:d3:6f:ef:21:14:20:10:9b:a8:43:7a:3e:4b:af:
e3:28:49:85:89:c1:0e:93:d6:ca:78:18:41:83:30:
99:26:66:03:6f:fa:67:be:58:3e:6d:93:9a:8a:ad:
f4:84:55:08:4f:a4:32:31:93:88:4d:99:2e:3f:cb:
bb:1f:b8:f6:0d:b2:ea:3e:0c:ba:41:e3:43:d7:97:
77:ed:96:18:31:55:39:a2:b7:83:d7:56:e0:a1:da:
75:9b:de:15:6a:ad:37:72:c2:3c:b4:db:7c:bf:57:
30:f7:96:dc:b6:c8:42:eb:69:00:8f:3a:81:59:90:
5e:76:f9:b7:13:fe:50:54:5b:d2:fd:78:db:9b:d2:
bc:28:50:9a:7a:b5:42:7b:72:90:9a:6b:23:29:10:
e3:f3:72:98:ee:b0:4f:61:1f:fa:eb:07:f9:34:71:
2e:24:85:7e:d5:34:32:d7:85:38:bc:4e:f2:06:46:
20:ce:b9:07:96:0a:35:ad:1a:b5:d1:6e:c8:85:62:
24:48:2f:f7:4c:20:78:d4:b1:4c:dc:fd:51:2e:d4:
39:65:c9:d4:ec:13:e0:2a:8f:ce:0e:e5:03:0b:b8:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:8D:F1:C1:99:44:32:3B:D0:AF:56:FB:24:49:77:15:23:34:E9
X509v3 Authority Key Identifier:
keyid:D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:cb:91:fd:37:80:c2:0e:e7:49:0c:cb:23:3e:6e:bb:1a:
ae:02:44:bc:4b:84:d9:ee:12:a1:65:cf:c3:91:9c:c4:e8:4c:
4d:9f:6d:56:4e:46:92:2b:61:5e:f9:92:eb:2e:e0:8f:a9:aa:
d8:1a:f4:d8:3c:4f:43:53:69:db:57:00:e4:7e:b1:ea:ff:1f:
8a:b6:40:03:9b:d0:81:89:40:df:54:56:3b:c3:26:66:b6:a5:
11:18:d6:dc:30:e3:32:22:74:f7:d9:66:87:0e:17:c3:05:17:
81:ce:4d:4c:3b:50:47:e1:8d:68:73:2f:ba:c1:19:49:93:21:
10:c9:50:63:4e:94:46:27:98:50:e4:22:17:c1:ab:18:2e:ba:
6b:da:12:ea:b8:58:2b:0f:f2:57:10:51:c9:78:1f:89:d7:3b:
b8:e9:bb:39:17:2e:96:6b:b6:92:58:13:52:f1:b2:e4:94:79:
09:59:0d:8a:cd:b6:70:72:45:38:67:c4:8d:36:8d:65:52:e6:
e4:72:cf:b4:52:12:bc:f4:b8:cf:f8:83:e1:e6:f2:de:af:3f:
9b:ce:92:69:46:0e:11:42:2e:5d:c3:4a:af:1d:57:ae:c2:66:
01:fc:91:89:7b:65:30:e2:dc:f7:e6:68:92:dd:a1:40:c5:49:
da:21:8b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQazTPBTEpti8niVp3BhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmM1MDc0ZTY2ZjQzY2U1NzhhM2Q0YTJlN2JjYzIxNWNi
NWU5NjAwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg4NzE3OGRmMWMxOTk0NDMyM2JkMGFmNTZmYjI0NDk3NzE1MjMzNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4WNcbzMyiHKzN5XpQqMP4hSniCL
nE8hftarKTO802/vIRQgEJuoQ3o+S6/jKEmFicEOk9bKeBhBgzCZJmYDb/pnvlg+
bZOaiq30hFUIT6QyMZOITZkuP8u7H7j2DbLqPgy6QeND15d37ZYYMVU5oreD11bg
odp1m94Vaq03csI8tNt8v1cw95bctshC62kAjzqBWZBedvm3E/5QVFvS/Xjbm9K8
KFCaerVCe3KQmmsjKRDj83KY7rBPYR/66wf5NHEuJIV+1TQy14U4vE7yBkYgzrkH
lgo1rRq10W7IhWIkSC/3TCB41LFM3P1RLtQ5ZcnU7BPgKo/ODuUDC7iNCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcXjfHBmUQyO9CvVvskSXcVIzTpMB8GA1UdIwQY
MBaAFNVsUHTmb0POV4o9Si57zCFctelgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVd4UWRPWnZRODVYaWoxS0xudk1JVnkxNldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNzUyN2ItZWNjMi00NDk4LTkyMDgt
ZTIyYjhjMGExNzI2LzEvMVd4UWRPWnZRODVYaWoxS0xudk1JVnkxNldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xNzUyN2ItZWNjMi00NDk4LTkyMDgtZTIyYjhjMGExNzI2
LzEvMVd4UWRPWnZRODVYaWoxS0xudk1JVnkxNldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5vLkf03
gMIO50kMyyM+brsargJEvEuE2e4SoWXPw5GcxOhMTZ9tVk5GkithXvmS6y7gj6mq
2Br02DxPQ1Np21cA5H6x6v8firZAA5vQgYlA31RWO8MmZralERjW3DDjMiJ099lm
hw4XwwUXgc5NTDtQR+GNaHMvusEZSZMhEMlQY06URieYUOQiF8GrGC66a9oS6rhY
Kw/yVxBRyXgfidc7uOm7ORculmu2klgTUvGy5JR5CVkNis22cHJFOGfEjTaNZVLm
5HLPtFISvPS4z/iD4eby3q8/m86SaUYOEUIuXcNKrx1XrsJmAfyRiXtlMOLc9+Zo
kt2hQMVJ2iGLXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:31 2025 by rpki-client