Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier: KDIX7wkhPa5riXangBCFQKgL4p812MY7cGwHi4Ne57E=
Subject key identifier: AB:15:F6:BD:4B:9E:BB:88:7E:CA:2E:68:CC:2A:CF:4F:46:25:15:56
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 0194BD8569A52B5AA1540CA7ED0F819F19FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=)
2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: ZO1SFsglYqC4lEGXsl8OCwTAi0UJ444xIDnWt+WRrm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:69:a5:2b:5a:a1:54:0c:a7:ed:0f:81:9f:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=ab15f6bd4b9ebb887eca2e68cc2acf4f46251556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:08:f5:46:90:33:df:a9:1a:51:0f:2a:f4:
af:a3:0d:2a:23:32:ad:71:64:92:84:1c:f5:67:be:
9d:e2:be:3d:5e:77:fc:0f:00:f0:c1:98:f1:31:bd:
3c:17:e3:4e:1c:9d:ce:ba:ac:f1:fc:48:79:00:9e:
9d:98:2f:13:91:9c:5a:ba:2b:c1:21:e1:ad:e5:84:
ab:b7:d4:98:2e:37:d0:84:69:0a:c4:e4:40:3a:43:
a2:ce:bd:28:3b:60:47:61:de:79:d7:47:45:ee:23:
be:80:76:89:11:20:a2:91:7a:51:b7:23:45:96:73:
b3:3c:e0:8c:8a:39:ab:9b:05:1f:05:7d:2d:7f:bd:
05:38:8a:ea:8c:1f:a2:90:2e:2b:15:39:08:d0:ce:
50:43:ec:e7:8e:4a:f0:f9:0f:69:9b:99:0b:f9:59:
85:68:65:68:5a:cb:d5:ff:5a:1c:b5:7d:f0:bc:a0:
1d:8b:9b:6c:eb:87:31:b6:71:62:a2:39:ae:44:14:
c4:0e:92:93:e7:43:06:58:96:9f:17:00:15:c2:94:
b9:15:8c:e2:d5:ba:ad:a9:b4:56:e8:08:c6:0b:db:
da:90:9b:0b:ee:07:48:26:06:5c:9e:61:46:f1:07:
76:6c:dc:ce:1b:a9:e3:f3:3e:31:1d:9f:90:a3:59:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:F6:BD:4B:9E:BB:88:7E:CA:2E:68:CC:2A:CF:4F:46:25:15:56
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:0e:79:84:f4:f9:d7:3a:33:b4:90:73:b5:8a:8a:83:8c:
fd:3f:0f:80:e2:3d:0a:29:fb:6d:86:c0:51:f8:47:32:ee:e9:
70:16:d7:91:78:0f:eb:1a:b5:ad:37:96:e7:dc:8e:6d:23:6e:
d0:16:0c:48:02:7c:20:c5:63:05:2f:ce:bd:cd:33:bc:f0:57:
c0:7a:64:8c:29:65:5e:ef:09:96:e4:3e:12:29:69:e8:a1:29:
d3:55:bd:d6:94:62:03:23:21:3e:fa:e0:e5:0c:2c:ab:5d:b4:
fb:2b:f2:6d:2d:27:fb:15:bd:56:bc:29:fb:11:de:61:34:23:
32:93:0d:b1:69:8b:5e:de:73:93:31:c6:81:08:9f:f4:ea:7e:
2c:4e:5d:43:78:67:87:36:1f:91:76:dc:21:dc:d6:cc:71:ab:
fc:34:8b:97:1e:9a:ea:4e:8b:a5:48:3c:80:4b:7b:e6:e6:52:
ac:10:c2:bc:ce:cb:d8:c8:4d:ce:f2:5d:7d:b4:33:a7:1a:02:
54:ea:cc:b9:87:29:74:02:3a:8c:c8:a7:01:55:b7:71:b7:8c:
db:28:8e:1c:e5:12:56:59:87:44:d5:f8:4e:1b:b3:86:38:c4:
88:37:0e:50:8c:33:16:59:e0:38:82:b2:c6:56:ef:03:86:3f:
73:53:36:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWmlK1qhVAyn7Q+Bnxn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh
YTAyZGEwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
EyhhYjE1ZjZiZDRiOWViYjg4N2VjYTJlNjhjYzJhY2Y0ZjQ2MjUxNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPEI9UaQM9+pGlEPKvSvow0qIzKt
cWSShBz1Z76d4r49Xnf8DwDwwZjxMb08F+NOHJ3Ouqzx/Eh5AJ6dmC8TkZxauivB
IeGt5YSrt9SYLjfQhGkKxORAOkOizr0oO2BHYd5510dF7iO+gHaJESCikXpRtyNF
lnOzPOCMijmrmwUfBX0tf70FOIrqjB+ikC4rFTkI0M5QQ+znjkrw+Q9pm5kL+VmF
aGVoWsvV/1octX3wvKAdi5ts64cxtnFiojmuRBTEDpKT50MGWJafFwAVwpS5FYzi
1bqtqbRW6AjGC9vakJsL7gdIJgZcnmFG8Qd2bNzOG6nj8z4xHZ+Qo1kRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsV9r1LnruIfsouaMwqz09GJRVWMB8GA1UdIwQY
MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt
YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz
LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGsOeYT0
+dc6M7SQc7WKioOM/T8PgOI9Cin7bYbAUfhHMu7pcBbXkXgP6xq1rTeW59yObSNu
0BYMSAJ8IMVjBS/Ovc0zvPBXwHpkjCllXu8JluQ+Eilp6KEp01W91pRiAyMhPvrg
5Qwsq120+yvybS0n+xW9Vrwp+xHeYTQjMpMNsWmLXt5zkzHGgQif9Op+LE5dQ3hn
hzYfkXbcIdzWzHGr/DSLlx6a6k6LpUg8gEt75uZSrBDCvM7L2MhNzvJdfbQzpxoC
VOrMuYcpdAI6jMinAVW3cbeM2yiOHOUSVlmHRNX4ThuzhjjEiDcOUIwzFlngOIKy
xlbvA4Y/c1M2vw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:13 2025 by rpki-client