Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: GGRJ6OoxIZ6t+FJNbwUmSmWk7//NjkIfslyNUPP3A3Q=
Subject key identifier: 61:9F:F6:A7:0F:C0:B6:53:2E:75:F2:1E:D8:CF:8A:A9:9D:34:4E:14
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 0194BBCE8206FBAD23872A841A96AED59F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: ZLi7deX0wkapPlRuIXIOTUAIHjucBPLCGunmJSf1iPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:06:fb:ad:23:87:2a:84:1a:96:ae:d5:9f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=619ff6a70fc0b6532e75f21ed8cf8aa99d344e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:46:4b:e2:94:b4:56:73:4c:bf:59:cc:85:
9a:b1:6f:e5:34:37:68:db:c4:ac:db:a1:48:e3:aa:
22:d8:4b:11:c2:8a:35:56:26:93:3e:ce:d9:0c:df:
9a:c7:b7:c5:26:4f:1a:ba:79:80:b5:db:d1:8e:18:
3c:af:57:e1:34:7a:93:fd:9b:e2:91:3e:66:3c:fb:
9c:e2:80:ee:37:14:8c:88:ce:19:13:f9:59:6b:9f:
f2:72:02:6e:2f:8d:63:1f:1b:20:7f:d2:0a:79:c3:
40:30:94:d5:47:26:44:40:de:c0:24:0a:e1:d7:45:
09:8c:cb:cc:85:03:d4:fd:8c:00:5b:f2:f0:f7:42:
8f:27:dc:1b:de:bb:ba:9a:69:b5:b3:62:30:07:c4:
1e:62:2e:f3:11:02:b1:4c:71:42:11:f8:98:f9:e5:
b1:e0:6c:a6:c4:b0:3e:fc:f9:22:93:90:52:2f:d9:
2c:a8:60:fa:2c:f5:0e:28:25:1e:98:f5:4c:12:0b:
93:20:13:32:f5:eb:71:37:1c:f4:49:21:35:2d:67:
92:9c:2e:f5:41:37:09:88:67:6e:56:8a:dd:5f:4d:
48:fd:e3:df:e3:91:7a:f0:b1:15:da:90:6b:6c:2e:
93:2f:7e:d6:c8:00:ff:80:a8:b3:94:68:62:02:e9:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:F6:A7:0F:C0:B6:53:2E:75:F2:1E:D8:CF:8A:A9:9D:34:4E:14
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:c2:94:75:a8:ed:55:07:a2:2a:49:d2:0a:db:9f:cd:20:
29:4b:7b:65:8f:0f:98:25:a9:73:8f:cf:f1:dc:c7:a2:e0:30:
c6:96:43:5e:68:4c:97:81:59:f7:c0:eb:a7:f7:78:22:bd:47:
8e:01:47:f5:ed:16:2c:51:f5:6f:ea:5f:26:fe:b8:55:8b:cc:
d6:5b:bc:48:40:89:be:01:e3:f3:8c:31:2c:47:c3:8a:bd:0c:
bc:1c:36:70:14:2e:68:24:51:fe:85:12:6a:1e:ca:38:90:68:
ac:35:ef:78:a0:bd:9d:92:19:3d:a0:52:af:c7:ad:67:4b:48:
0e:82:0b:f1:b1:a1:04:dc:aa:73:f7:7b:78:af:54:cd:7c:d5:
60:17:bb:1e:72:25:70:b9:90:ca:4f:1f:72:e9:56:bf:4f:94:
38:ad:b2:7e:52:ca:48:83:c1:ec:78:1c:46:4d:97:71:0b:fc:
e0:f2:c4:2b:f6:55:94:65:24:ed:51:d1:a7:5a:37:85:31:a5:
03:ec:69:fc:41:05:a3:3e:6a:fd:ec:4a:b5:ba:e7:b1:ab:38:
f9:82:64:79:47:61:74:8a:ba:c1:31:12:a3:4c:44:a5:d8:35:
39:92:9d:a5:62:3a:af:f3:aa:2d:97:ad:fa:ae:86:e3:01:f9:
99:03:ae:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoIG+60jhyqEGpau1Z8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi
MTBmOGMwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
Eyg2MTlmZjZhNzBmYzBiNjUzMmU3NWYyMWVkOGNmOGFhOTlkMzQ0ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnVGS+KUtFZzTL9ZzIWasW/lNDdo
28Ss26FI46oi2EsRwoo1ViaTPs7ZDN+ax7fFJk8aunmAtdvRjhg8r1fhNHqT/Zvi
kT5mPPuc4oDuNxSMiM4ZE/lZa5/ycgJuL41jHxsgf9IKecNAMJTVRyZEQN7AJArh
10UJjMvMhQPU/YwAW/Lw90KPJ9wb3ru6mmm1s2IwB8QeYi7zEQKxTHFCEfiY+eWx
4GymxLA+/Pkik5BSL9ksqGD6LPUOKCUemPVMEguTIBMy9etxNxz0SSE1LWeSnC71
QTcJiGduVordX01I/ePf45F68LEV2pBrbC6TL37WyAD/gKizlGhiAunQqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGf9qcPwLZTLnXyHtjPiqmdNE4UMB8GA1UdIwQY
MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt
MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx
LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARATClHWo
7VUHoipJ0grbn80gKUt7ZY8PmCWpc4/P8dzHouAwxpZDXmhMl4FZ98Drp/d4Ir1H
jgFH9e0WLFH1b+pfJv64VYvM1lu8SECJvgHj84wxLEfDir0MvBw2cBQuaCRR/oUS
ah7KOJBorDXveKC9nZIZPaBSr8etZ0tIDoIL8bGhBNyqc/d7eK9UzXzVYBe7HnIl
cLmQyk8fculWv0+UOK2yflLKSIPB7HgcRk2XcQv84PLEK/ZVlGUk7VHRp1o3hTGl
A+xp/EEFoz5q/exKtbrnsas4+YJkeUdhdIq6wTESo0xEpdg1OZKdpWI6r/OqLZet
+q6G4wH5mQOurw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:52 2025 by rpki-client