Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier: 4Cu3kzZZonD6Tzw/8gRmTj5HyvTdDFlyrv8j1P07YIY=
Subject key identifier: EB:EC:45:78:90:30:8B:4E:71:36:56:E0:B4:A7:C4:98:97:A5:D2:0C
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial: 0194BC72A1FF6EBEC674CA374259ED9F37F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=)
2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: odVCU02PljbP8IwnS1E5jNaV6gFNmdqsNF46a0M/+GA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:ff:6e:be:c6:74:ca:37:42:59:ed:9f:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=ebec457890308b4e713656e0b4a7c49897a5d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:32:6f:31:08:cd:cb:3f:52:c5:ad:35:0c:
20:95:c0:75:24:dd:da:91:89:19:10:3d:1a:80:77:
d9:21:ff:26:6c:63:2c:85:64:e3:b0:3d:8c:53:41:
fb:9c:f4:c4:c6:8b:90:2f:43:b5:f2:33:91:79:c3:
7d:78:02:38:05:4c:ca:6a:76:ab:a0:9a:2e:59:9d:
e9:d4:4d:28:5c:43:85:84:fb:80:cf:f6:40:87:64:
33:33:0a:28:65:82:78:82:92:96:02:37:5f:57:d2:
a3:92:41:0b:b1:dc:ec:38:f1:f4:ca:29:00:df:14:
2b:de:ce:4e:a8:a6:51:5f:f7:85:b6:63:dc:31:2d:
e9:57:68:82:8e:27:78:a6:1c:01:9e:6c:c3:0a:72:
ff:65:68:39:0b:ca:16:29:f2:fa:4e:fb:24:f7:4b:
df:02:c8:21:69:e2:03:c9:30:e9:07:c9:09:40:74:
00:37:5d:e9:bd:e4:10:25:ec:b8:47:21:2a:73:0e:
1d:eb:2a:87:ef:26:c1:b8:f6:f8:df:c0:99:6b:21:
0e:ef:93:26:a5:5f:bd:1d:fe:0b:b3:7f:12:ea:42:
da:58:5a:48:5c:0c:90:1e:1a:bb:3e:11:dc:8a:75:
6e:17:f7:34:ee:08:48:f2:91:9c:b3:fd:28:9b:01:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:45:78:90:30:8B:4E:71:36:56:E0:B4:A7:C4:98:97:A5:D2:0C
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b0:c1:3b:df:4e:6f:31:63:6a:80:7b:14:6c:18:2d:d1:8c:
7e:e8:2e:7d:35:de:41:9b:3d:5a:f5:00:72:3e:df:4a:5b:00:
11:42:fc:5d:67:64:9d:e8:ce:97:65:d0:f3:08:e4:71:9e:cb:
99:07:5e:93:ff:25:b1:61:2a:68:b0:c9:b2:9a:19:2b:35:1e:
ce:13:37:fd:c0:cc:43:08:0f:f5:8b:7d:72:8d:35:59:de:a9:
0c:45:90:d7:94:3c:6e:c8:5f:2f:9d:ea:af:71:38:6c:93:9f:
f9:26:d8:55:d4:21:76:80:ef:e3:44:67:e8:43:0d:5c:64:48:
5e:82:eb:e2:2b:6f:48:51:8b:d5:7a:fc:bf:e3:bd:ef:ee:f2:
52:4f:5d:24:97:05:db:2f:fa:a4:d7:d3:5a:b2:c4:d4:79:d8:
c2:6a:14:28:b3:cf:04:7b:a9:78:03:b6:34:38:3a:94:b2:64:
c7:3a:25:f7:b5:44:e2:3d:09:3f:c8:6f:bd:5f:a8:b0:47:bc:
83:39:0f:6a:e8:16:c4:0b:d3:55:37:1d:0f:51:db:79:f7:b5:
f3:7d:f8:ec:18:66:06:ab:35:b4:d9:e0:58:45:80:6a:cb:b0:
dc:b9:70:10:7b:5c:7b:89:47:9c:c7:ba:46:a1:df:6b:fb:44:
98:fe:f8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqH/br7GdMo3QlntnzfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTI0YTlkYTZiZTA3NTRlZGRjMTQ3OGQ2OTRlNmRhOWUx
NWEyNTgwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhlYmVjNDU3ODkwMzA4YjRlNzEzNjU2ZTBiNGE3YzQ5ODk3YTVkMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi4ybzEIzcs/UsWtNQwglcB1JN3a
kYkZED0agHfZIf8mbGMshWTjsD2MU0H7nPTExouQL0O18jORecN9eAI4BUzKanar
oJouWZ3p1E0oXEOFhPuAz/ZAh2QzMwooZYJ4gpKWAjdfV9KjkkELsdzsOPH0yikA
3xQr3s5OqKZRX/eFtmPcMS3pV2iCjid4phwBnmzDCnL/ZWg5C8oWKfL6Tvsk90vf
AsghaeIDyTDpB8kJQHQAN13pveQQJey4RyEqcw4d6yqH7ybBuPb438CZayEO75Mm
pV+9Hf4Ls38S6kLaWFpIXAyQHhq7PhHcinVuF/c07ghI8pGcs/0omwEOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvsRXiQMItOcTZW4LSnxJiXpdIMMB8GA1UdIwQY
MBaAFMLiSp2mvgdU7dwUeNaU5tqeFaJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAt
NTBlMjUzM2ZjZDRlLzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAtNTBlMjUzM2ZjZDRl
LzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7DBO99O
bzFjaoB7FGwYLdGMfugufTXeQZs9WvUAcj7fSlsAEUL8XWdknejOl2XQ8wjkcZ7L
mQdek/8lsWEqaLDJspoZKzUezhM3/cDMQwgP9Yt9co01Wd6pDEWQ15Q8bshfL53q
r3E4bJOf+SbYVdQhdoDv40Rn6EMNXGRIXoLr4itvSFGL1Xr8v+O97+7yUk9dJJcF
2y/6pNfTWrLE1HnYwmoUKLPPBHupeAO2NDg6lLJkxzol97VE4j0JP8hvvV+osEe8
gzkPaugWxAvTVTcdD1Hbefe183347BhmBqs1tNngWEWAasuw3LlwEHtce4lHnMe6
RqHfa/tEmP74wQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client