Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: pXYxqfd/X+MZsCIoEVygql7EVDdjMALpQ9Qb0FbCG/U=
Subject key identifier: C1:D6:0D:80:B7:74:CD:03:3F:DF:C1:41:15:CC:56:96:85:4F:40:A5
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 0194BC049E374A695702976639B90AE68D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 125B
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: I9FGru5UkxCFzBXClR1YzfHgGXPRLaTV/+tVmSFW+ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:37:4a:69:57:02:97:66:39:b9:0a:e6:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=c1d60d80b774cd033fdfc14115cc5696854f40a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:59:55:33:d1:fc:ce:cf:aa:aa:76:bc:af:
0c:f8:8d:e9:53:5a:07:6d:e2:95:46:ac:c9:f7:ca:
4e:df:8e:41:26:cd:de:02:69:bd:9f:4a:f6:b8:17:
ec:df:18:88:35:96:f2:27:bb:f5:ae:b7:46:31:55:
0a:58:f4:20:4a:d0:de:e4:b3:46:1f:17:d0:84:d6:
ad:31:78:2a:1b:fa:f7:99:ea:a6:70:78:ad:14:a9:
fe:63:35:b5:71:df:d6:67:b8:06:56:c2:8c:ec:3a:
31:f8:2c:0a:6d:6c:e2:b5:50:16:4d:54:c8:24:93:
19:0e:70:d1:68:90:20:08:d2:af:85:fe:9d:6d:ec:
91:4e:9a:d1:a7:84:50:d0:7a:15:59:cc:54:fe:17:
79:74:89:3f:c3:4b:17:83:af:3a:cd:54:82:1c:7a:
8c:17:53:41:a1:ae:70:88:52:dc:72:b0:6a:24:74:
50:1b:9d:71:37:aa:68:fc:cc:5e:65:b8:f7:47:18:
42:94:73:ff:a6:6e:ba:15:99:c2:cd:89:e0:63:86:
a5:a9:28:52:a5:57:b1:29:b4:d7:f3:de:3f:44:9e:
96:22:1e:db:98:e5:4d:42:3e:55:12:de:ef:38:02:
5e:99:b8:db:a3:ea:fa:5d:65:79:03:02:a8:68:e1:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:0D:80:B7:74:CD:03:3F:DF:C1:41:15:CC:56:96:85:4F:40:A5
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:ac:3d:79:68:37:df:38:5f:68:c2:21:8b:77:49:2e:b7:
9a:bc:61:8c:df:f2:55:ea:6d:1f:42:99:69:bc:d9:ba:5f:33:
ae:8b:f2:57:7c:29:b2:f1:8a:e6:dc:b3:92:5b:ad:75:6c:78:
34:5d:1e:b2:ca:31:8a:b2:90:23:e9:1c:13:8b:4c:15:42:a2:
32:1e:aa:6c:20:2b:b7:48:e1:1f:4e:b2:4e:61:e4:45:0a:e7:
da:77:d8:b9:c2:d2:49:28:8d:ba:4e:fc:30:a9:7f:21:12:49:
7e:30:b2:18:13:52:c4:4a:d2:41:96:de:b6:d5:37:73:76:fd:
ee:70:44:fc:c7:33:c1:dc:e3:a6:27:d0:7d:b6:16:71:f5:a7:
c8:47:94:56:26:48:a7:56:5c:bd:e9:fe:d8:1f:fb:67:97:7d:
31:fe:06:0d:8d:40:e8:a0:ad:8d:27:f1:b8:a9:d7:e0:4a:86:
bf:cf:46:51:ec:4d:1c:eb:a4:56:a7:2a:2f:6d:87:7a:00:e4:
8a:69:28:c6:05:cd:a4:84:67:48:6c:cb:73:fc:8f:22:c0:82:
9a:ab:e2:1d:93:42:de:60:fe:8e:b9:d7:07:72:f9:d1:4d:03:
ea:20:90:58:80:dc:c7:77:01:33:df:32:2f:b7:52:3b:4b:77:
98:7a:50:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ43SmlXApdmObkK5o2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl
NGJhYWEwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
EyhjMWQ2MGQ4MGI3NzRjZDAzM2ZkZmMxNDExNWNjNTY5Njg1NGY0MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTlZVTPR/M7Pqqp2vK8M+I3pU1oH
beKVRqzJ98pO345BJs3eAmm9n0r2uBfs3xiINZbyJ7v1rrdGMVUKWPQgStDe5LNG
HxfQhNatMXgqG/r3meqmcHitFKn+YzW1cd/WZ7gGVsKM7Dox+CwKbWzitVAWTVTI
JJMZDnDRaJAgCNKvhf6dbeyRTprRp4RQ0HoVWcxU/hd5dIk/w0sXg686zVSCHHqM
F1NBoa5wiFLccrBqJHRQG51xN6po/MxeZbj3RxhClHP/pm66FZnCzYngY4alqShS
pVexKbTX894/RJ6WIh7bmOVNQj5VEt7vOAJembjbo+r6XWV5AwKoaOEiXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHWDYC3dM0DP9/BQRXMVpaFT0ClMB8GA1UdIwQY
MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt
ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk
LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwSsPXlo
N984X2jCIYt3SS63mrxhjN/yVeptH0KZabzZul8zrovyV3wpsvGK5tyzklutdWx4
NF0essoxirKQI+kcE4tMFUKiMh6qbCArt0jhH06yTmHkRQrn2nfYucLSSSiNuk78
MKl/IRJJfjCyGBNSxErSQZbettU3c3b97nBE/MczwdzjpifQfbYWcfWnyEeUViZI
p1Zcven+2B/7Z5d9Mf4GDY1A6KCtjSfxuKnX4EqGv89GUexNHOukVqcqL22HegDk
imkoxgXNpIRnSGzLc/yPIsCCmqviHZNC3mD+jrnXB3L50U0D6iCQWIDcx3cBM98y
L7dSO0t3mHpQWg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:43 2025 by rpki-client