Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: r9v7Bu9qL77LX/dZ75Cf3oYY3Q0JhZscDRDjUv9o9Fk=
Subject key identifier: 09:3D:45:AE:63:33:7F:48:81:28:D6:83:CE:E9:0F:4A:49:1B:C0:FC
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 0194BBCE263A990990376A0A086C63412AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 11A4
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: 1blcIPi0EuLbJG+viSAb4m9djxl9FCPFK0sY7Eg52eo=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:3a:99:09:90:37:6a:0a:08:6c:63:41:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=093d45ae63337f488128d683cee90f4a491bc0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:23:10:77:99:b3:b0:75:ba:05:f9:f4:50:
24:5a:a4:4d:14:d8:ff:bd:46:83:52:39:ec:ac:86:
cd:70:9f:04:d5:82:93:97:d5:c4:9f:98:e9:37:3e:
24:e1:f3:a2:68:c2:ba:e1:45:c5:44:39:55:1c:b4:
68:cd:ea:f3:77:2d:5e:7c:88:1e:57:99:fd:07:dc:
29:84:82:d3:47:a2:9c:45:5f:f9:8d:24:a4:e6:bc:
f2:59:05:eb:68:8e:ee:cb:54:fe:fd:a1:05:99:66:
0d:8d:70:9b:82:a9:fb:27:30:87:70:7b:04:bc:80:
d4:5c:54:8d:79:6b:99:f9:ab:18:48:fd:90:78:bc:
4d:80:18:41:82:3e:65:30:c3:1a:c4:29:8a:c5:c5:
97:08:72:e6:9b:f0:f3:ed:12:cf:7d:fb:1f:06:cc:
ea:5a:48:d7:55:18:0f:70:28:a5:fd:aa:4a:33:36:
0c:18:99:f0:ed:00:5d:6e:16:7f:94:c8:86:a0:54:
bb:0f:2a:b9:a0:e0:27:a5:4f:01:91:f9:fc:11:53:
7a:f3:5a:aa:59:4f:55:8a:e6:14:14:47:33:60:a6:
2e:c6:bd:a0:8f:ed:57:b9:19:19:54:76:11:cf:91:
94:9a:72:1d:1d:cd:34:12:41:ae:56:14:3f:4d:53:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:45:AE:63:33:7F:48:81:28:D6:83:CE:E9:0F:4A:49:1B:C0:FC
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f7:7a:a8:3c:eb:90:4c:95:11:73:9a:b7:a2:b8:fe:dd:19:
94:23:a0:e2:b3:d1:25:2f:a7:f8:9c:3a:56:8f:87:64:e3:22:
1d:32:d3:a4:f9:04:66:09:c3:89:66:49:60:59:48:94:0a:f2:
45:c1:71:8c:24:72:43:01:c8:b6:f9:98:8d:fb:a9:e5:9f:c8:
24:e2:7e:95:2c:ff:13:7c:bf:e6:d7:30:0e:4f:f9:bc:1d:e2:
8a:50:ff:ce:00:f0:29:33:e1:e0:d7:39:8a:96:7f:47:74:5d:
57:dd:6c:03:34:9d:06:ef:3e:16:a1:c3:dd:2e:1e:3e:82:45:
27:3c:15:8d:0e:2a:11:b9:30:8a:25:18:8f:97:55:16:d7:48:
00:28:b4:6a:ef:f9:43:02:c6:96:80:86:bc:03:10:c5:02:31:
c1:f2:9b:e9:a1:a6:2b:e7:06:25:56:ab:08:07:7a:c4:91:c4:
3b:d0:a5:f1:15:14:86:fa:61:eb:f5:54:08:74:92:5a:76:0c:
f6:9c:52:6b:a1:ef:25:4d:62:c5:a8:32:07:a1:65:15:d3:6a:
22:17:1c:a2:e9:5e:dd:8f:73:7d:aa:38:ba:08:0f:f5:65:a3:
91:b1:ec:7c:87:72:3d:f0:d1:80:17:3b:b6:07:4a:c3:65:bc:
50:92:5d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziY6mQmQN2oKCGxjQSrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTBjMTU1Mzc2MmFjOWFmNTdkZjliNThkOWRjNTBhZjQw
OWM1NjYwHhcNMjUwMTMxMTAwMDM3WhcNMjUwMjAxMTAwMDM3WjAzMTEwLwYDVQQD
EygwOTNkNDVhZTYzMzM3ZjQ4ODEyOGQ2ODNjZWU5MGY0YTQ5MWJjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWsjEHeZs7B1ugX59FAkWqRNFNj/
vUaDUjnsrIbNcJ8E1YKTl9XEn5jpNz4k4fOiaMK64UXFRDlVHLRozerzdy1efIge
V5n9B9wphILTR6KcRV/5jSSk5rzyWQXraI7uy1T+/aEFmWYNjXCbgqn7JzCHcHsE
vIDUXFSNeWuZ+asYSP2QeLxNgBhBgj5lMMMaxCmKxcWXCHLmm/Dz7RLPffsfBszq
WkjXVRgPcCil/apKMzYMGJnw7QBdbhZ/lMiGoFS7Dyq5oOAnpU8Bkfn8EVN681qq
WU9ViuYUFEczYKYuxr2gj+1XuRkZVHYRz5GUmnIdHc00EkGuVhQ/TVOahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk9Ra5jM39IgSjWg87pD0pJG8D8MB8GA1UdIwQY
MBaAFFmQwVU3Yqya9X35tY2dxQr0CcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUt
YmVmMTAzNGVkYmU1LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUtYmVmMTAzNGVkYmU1
LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/d6qDzr
kEyVEXOat6K4/t0ZlCOg4rPRJS+n+Jw6Vo+HZOMiHTLTpPkEZgnDiWZJYFlIlAry
RcFxjCRyQwHItvmYjfup5Z/IJOJ+lSz/E3y/5tcwDk/5vB3iilD/zgDwKTPh4Nc5
ipZ/R3RdV91sAzSdBu8+FqHD3S4ePoJFJzwVjQ4qEbkwiiUYj5dVFtdIACi0au/5
QwLGloCGvAMQxQIxwfKb6aGmK+cGJVarCAd6xJHEO9Cl8RUUhvph6/VUCHSSWnYM
9pxSa6HvJU1ixagyB6FlFdNqIhccoule3Y9zfao4uggP9WWjkbHsfIdyPfDRgBc7
tgdKw2W8UJJdXw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:47 2025 by rpki-client