Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: EzJ4J/X+Qt/ucRXH+8RzDFvT9ndrvhG0HgmJ89gMc5I=
Subject key identifier: 2A:7D:B2:2F:B3:40:AD:D3:93:15:80:6E:7C:64:A2:3A:22:D3:D5:FB
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 0194BD1781BEE9B3FEF8CA681D7DD9CC9322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0665
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 7WjfHWsPKI4DzBy2KQmr0NOOTIaG9kDx2YMvupS1plA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:be:e9:b3:fe:f8:ca:68:1d:7d:d9:cc:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=2a7db22fb340add39315806e7c64a23a22d3d5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:62:18:20:fa:46:1f:35:d7:d0:b2:e0:4d:
41:cc:9f:2d:f9:aa:f2:06:2c:2d:cf:7d:da:ad:51:
5a:44:b7:99:dd:d1:58:62:a3:c0:64:77:1f:87:59:
d2:c9:55:6b:ad:0d:64:5e:ad:d3:3d:70:f8:7c:cb:
8f:c2:b5:8b:ac:4d:40:bd:07:aa:6d:d1:4b:e9:a8:
41:0b:93:94:f0:91:5a:63:36:90:9b:cc:32:3b:48:
16:e6:52:14:ab:c0:3a:f4:bf:1f:81:be:d4:4f:62:
99:cf:72:2e:0f:61:42:e5:50:ff:98:d7:91:a5:c9:
ad:79:8a:42:c6:c7:dc:f8:56:d5:e2:88:1b:c9:cb:
25:5d:b4:d5:fa:62:0f:2f:95:fb:85:f7:fa:c7:61:
bf:30:2a:45:f3:5c:26:39:90:c7:2e:3c:97:18:31:
b0:36:20:d7:32:28:df:86:9d:3a:25:d5:ba:55:0d:
72:06:22:46:3e:0d:7b:29:38:89:1c:e9:a7:56:80:
48:60:9d:96:6d:38:c0:e7:b2:31:d4:f4:27:a3:b9:
10:f1:fb:73:ec:2d:eb:0b:7b:4f:3a:42:0f:11:cc:
d5:80:e1:40:82:e6:26:84:e4:9f:f5:f5:4b:9f:69:
c2:f1:58:ed:1a:cb:6e:1a:7e:3d:c9:b4:1c:f5:c8:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:B2:2F:B3:40:AD:D3:93:15:80:6E:7C:64:A2:3A:22:D3:D5:FB
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3c:20:63:82:11:cd:ba:0e:20:7d:fc:7e:a0:b9:f2:57:26:
63:53:8c:f9:9f:87:cd:a3:f3:12:ec:a0:ab:27:ee:88:4e:5e:
bd:81:95:43:f6:6b:b6:91:51:ab:9e:47:b1:37:c6:4e:e5:19:
17:f0:dd:00:10:2d:4c:d7:13:b4:94:dd:c9:43:57:ca:0c:08:
07:86:d7:c2:e1:ec:70:79:de:68:3c:3f:ec:8a:b1:6d:23:8d:
0a:bb:5e:b3:14:5f:28:a8:77:22:24:9c:af:6a:a1:06:78:c7:
c4:e3:45:3f:4d:e9:5b:bc:89:ef:6a:30:78:51:de:9c:dc:c7:
44:1f:29:ac:d1:13:72:5f:ca:4f:5f:b7:f7:93:d1:80:eb:60:
a0:e2:3d:67:e5:94:63:3e:1d:77:f9:9e:3e:3b:df:b2:01:c7:
5b:6c:a2:6c:2c:4b:c1:f1:83:ff:74:b6:1c:0e:c7:7e:b1:f6:
5d:e2:e1:68:7b:1a:28:a8:ba:5a:76:70:c4:cf:77:1a:78:7a:
4c:23:7f:21:17:c5:d6:db:b8:dc:fc:3d:2b:85:88:29:bb:ce:
17:0b:2f:21:09:d1:85:32:64:5e:5a:a1:6e:a6:f3:e0:aa:ad:
a2:3d:be:52:50:87:a3:dc:4a:31:aa:97:f1:ac:26:b5:f9:52:
bd:e7:43:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4G+6bP++MpoHX3ZzJMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1
YjlhODcwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EygyYTdkYjIyZmIzNDBhZGQzOTMxNTgwNmU3YzY0YTIzYTIyZDNkNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihNiGCD6Rh8119Cy4E1BzJ8t+ary
Biwtz33arVFaRLeZ3dFYYqPAZHcfh1nSyVVrrQ1kXq3TPXD4fMuPwrWLrE1AvQeq
bdFL6ahBC5OU8JFaYzaQm8wyO0gW5lIUq8A69L8fgb7UT2KZz3IuD2FC5VD/mNeR
pcmteYpCxsfc+FbV4ogbycslXbTV+mIPL5X7hff6x2G/MCpF81wmOZDHLjyXGDGw
NiDXMijfhp06JdW6VQ1yBiJGPg17KTiJHOmnVoBIYJ2WbTjA57Ix1PQno7kQ8ftz
7C3rC3tPOkIPEczVgOFAguYmhOSf9fVLn2nC8VjtGstuGn49ybQc9cgjLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp9si+zQK3TkxWAbnxkojoi09X7MB8GA1UdIwQY
MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt
MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3
LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODwgY4IR
zboOIH38fqC58lcmY1OM+Z+HzaPzEuygqyfuiE5evYGVQ/ZrtpFRq55HsTfGTuUZ
F/DdABAtTNcTtJTdyUNXygwIB4bXwuHscHneaDw/7IqxbSONCrtesxRfKKh3IiSc
r2qhBnjHxONFP03pW7yJ72oweFHenNzHRB8prNETcl/KT1+395PRgOtgoOI9Z+WU
Yz4dd/mePjvfsgHHW2yibCxLwfGD/3S2HA7HfrH2XeLhaHsaKKi6WnZwxM93Gnh6
TCN/IRfF1tu43Pw9K4WIKbvOFwsvIQnRhTJkXlqhbqbz4Kqtoj2+UlCHo9xKMaqX
8awmtflSvedDxw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:31 2025 by rpki-client