Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: TU70eOTsS71nIrSHWCCaSjJzd1Nmn1mZdohmDPRR6E8=
Subject key identifier: 1F:43:B2:2A:A6:C0:0B:FB:E0:C9:80:DC:D2:BC:B3:05:A5:E4:3B:F9
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 0194BBCDFDEA369B98FB91F07572A51F0A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: sqo6nsc1g0+18QqEKGGm0jUBeVNEFRd3fDPUpSozKqk=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:ea:36:9b:98:fb:91:f0:75:72:a5:1f:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=1f43b22aa6c00bfbe0c980dcd2bcb305a5e43bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9e:dd:81:ba:f0:0d:f4:59:e3:e3:31:41:c9:
ee:df:eb:91:bf:55:29:b0:0e:f0:09:45:06:d1:b8:
7e:c3:05:e7:86:9e:86:69:c4:02:8d:25:80:ec:91:
aa:f4:0e:79:58:bf:b9:9a:3c:98:e8:51:98:07:72:
64:2e:3c:0d:b7:ff:c2:19:32:3c:45:5a:ea:2f:1c:
b1:ca:98:6b:6b:2e:0f:7b:cc:b3:84:2c:6b:fe:39:
2c:62:63:83:0c:12:75:82:c0:45:bb:b6:0f:e4:07:
a4:82:b7:05:a6:18:39:8f:0b:2f:a8:1f:7c:23:d8:
1d:5e:51:9f:48:a4:4a:34:a6:f7:ed:48:1c:4d:d3:
89:d7:76:fc:01:b3:e4:54:17:fe:4b:fa:1d:df:88:
a5:85:de:73:4b:3e:39:1a:40:a2:56:0b:3d:55:9f:
78:9e:a7:69:eb:87:5f:98:9f:91:46:46:77:6a:9a:
60:06:af:68:fa:7e:ca:27:c6:20:a3:3a:b3:47:94:
1a:91:5c:30:f0:13:41:7f:6f:82:37:15:3e:88:2d:
13:87:e6:f1:02:c4:db:1e:d5:49:26:ff:35:a1:7a:
60:f7:88:f2:58:6e:85:9b:46:44:b6:62:cc:d3:fa:
aa:88:9f:48:e0:d0:25:6f:14:e5:b7:4c:86:88:b9:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:B2:2A:A6:C0:0B:FB:E0:C9:80:DC:D2:BC:B3:05:A5:E4:3B:F9
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:43:c4:24:24:e7:cc:80:8d:a9:c9:3c:30:50:98:92:a6:
50:61:b7:76:a1:96:c6:ab:83:50:51:f4:4a:26:e6:fc:ec:bb:
8d:d5:0e:2e:ea:78:d9:76:b7:dd:cd:be:f6:96:a4:3a:da:2e:
c9:70:45:aa:97:10:77:65:8b:d4:f2:6e:0f:6f:2b:2f:44:ff:
b8:d4:72:b9:9b:75:b7:23:c6:fe:56:27:bc:20:28:d1:71:e2:
0f:bf:b5:3b:ce:d3:32:84:c1:6c:ce:fd:f7:23:1f:5e:f2:6a:
72:cb:ef:5e:04:e2:7c:92:25:a6:6c:04:62:bb:5c:0d:6f:ab:
58:74:e9:4c:7a:aa:c0:7e:c8:4d:7e:05:ed:0c:4c:58:42:ab:
ae:d2:a9:67:49:7a:da:1f:06:31:04:46:65:da:83:95:71:e3:
17:9c:a7:1f:b6:a3:c9:e7:d6:ed:54:62:f6:6f:1f:7b:76:cd:
76:cb:dd:9f:ab:94:ac:b1:5d:e4:dd:63:bc:c2:6f:a4:4f:b7:
c2:59:93:ab:1f:ee:a5:27:53:95:2c:fd:28:5d:5f:1f:65:fe:
e6:45:96:e9:19:8e:74:51:86:d6:1f:4c:38:83:16:29:98:0e:
a6:5f:26:5e:f2:7d:3f:0a:8a:92:95:b0:e7:50:ab:75:24:7c:
74:93:6e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf3qNpuY+5HwdXKlHwpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4
MjgzYjcwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EygxZjQzYjIyYWE2YzAwYmZiZTBjOTgwZGNkMmJjYjMwNWE1ZTQzYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Z7dgbrwDfRZ4+MxQcnu3+uRv1Up
sA7wCUUG0bh+wwXnhp6GacQCjSWA7JGq9A55WL+5mjyY6FGYB3JkLjwNt//CGTI8
RVrqLxyxyphray4Pe8yzhCxr/jksYmODDBJ1gsBFu7YP5AekgrcFphg5jwsvqB98
I9gdXlGfSKRKNKb37UgcTdOJ13b8AbPkVBf+S/od34ilhd5zSz45GkCiVgs9VZ94
nqdp64dfmJ+RRkZ3appgBq9o+n7KJ8YgozqzR5QakVww8BNBf2+CNxU+iC0Th+bx
AsTbHtVJJv81oXpg94jyWG6Fm0ZEtmLM0/qqiJ9I4NAlbxTlt0yGiLn3WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9DsiqmwAv74MmA3NK8swWl5Dv5MB8GA1UdIwQY
MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt
NDY5MjVjNTI0OWU2LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2
LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiVDxCQk
58yAjanJPDBQmJKmUGG3dqGWxquDUFH0Sibm/Oy7jdUOLup42Xa33c2+9pakOtou
yXBFqpcQd2WL1PJuD28rL0T/uNRyuZt1tyPG/lYnvCAo0XHiD7+1O87TMoTBbM79
9yMfXvJqcsvvXgTifJIlpmwEYrtcDW+rWHTpTHqqwH7ITX4F7QxMWEKrrtKpZ0l6
2h8GMQRGZdqDlXHjF5ynH7ajyefW7VRi9m8fe3bNdsvdn6uUrLFd5N1jvMJvpE+3
wlmTqx/upSdTlSz9KF1fH2X+5kWW6RmOdFGG1h9MOIMWKZgOpl8mXvJ9PwqKkpWw
51CrdSR8dJNujQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client