Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: NkQEowPnM399sOd3xmTSH2ULN9+KKtUvPeS+yJOuDuM=
Subject key identifier: EE:0B:9F:2B:56:40:C1:14:CB:A4:CF:61:D2:D6:D0:92:3A:F3:8D:AF
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0194BC04B23F4E68DA0E28D7E58EB90BFDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: srk1AXLQAqwfgOmGW7RUArvWXPS+jwjEIQ9rI23ICww=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:3f:4e:68:da:0e:28:d7:e5:8e:b9:0b:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=ee0b9f2b5640c114cba4cf61d2d6d0923af38daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:f1:3b:77:d0:bd:e4:a9:aa:72:80:f3:29:
00:3b:92:63:a6:67:c3:ad:a2:a6:d4:3c:c0:38:50:
e6:2e:63:a2:23:f6:77:bc:5e:9d:ab:13:c7:de:1f:
11:45:e9:69:4d:fb:72:58:8d:aa:6f:0c:06:a7:dc:
13:8e:c6:01:4b:64:af:06:85:a2:a0:34:51:b2:50:
b4:be:a7:ba:27:4f:c2:4f:66:62:c6:37:6b:5a:ca:
cf:a2:84:06:fc:a5:4b:a7:62:13:94:18:65:f9:65:
26:c8:b4:88:df:e3:b7:75:e4:55:9d:2d:ea:e3:7f:
5b:37:7a:9a:48:42:fb:2e:22:ec:af:35:12:58:71:
6d:12:29:c3:a3:eb:e6:95:c1:6b:71:c4:78:21:a4:
30:80:77:4f:42:b7:66:3e:1c:f0:f2:aa:20:e6:7d:
cd:03:f8:b5:df:35:4e:9e:70:53:d8:f6:ca:e8:e0:
4d:f3:b8:8a:63:ba:66:a5:1a:34:18:6a:24:73:ab:
d6:67:3f:69:1e:ef:8e:b8:98:37:ee:95:28:cf:1d:
a6:a3:9d:de:70:e2:bd:06:9e:57:fa:60:38:34:c0:
de:14:2d:88:cb:a6:4b:22:87:b3:88:91:59:14:c5:
9b:52:62:39:44:77:70:02:7f:ef:3d:52:b4:4a:b1:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:9F:2B:56:40:C1:14:CB:A4:CF:61:D2:D6:D0:92:3A:F3:8D:AF
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:10:12:c5:68:a3:14:bf:f4:66:86:bb:58:36:2c:bc:32:e3:
ac:17:fe:c4:fb:ba:73:8a:b0:59:57:4a:7b:17:b0:61:be:55:
84:c9:d3:39:e0:15:be:49:26:e3:e5:72:cb:88:f8:1f:4d:cc:
f7:7e:b1:25:f7:d4:57:7b:8a:47:51:24:6e:f0:22:31:a1:7b:
a1:0e:a4:3a:84:6e:63:92:0d:0c:d9:e2:7d:ee:29:68:2d:ff:
99:76:ac:3b:b4:03:0f:84:8f:18:ac:df:18:db:16:da:46:02:
ae:4b:fe:57:de:9e:a2:d0:52:36:d1:e3:36:d6:05:56:dc:b3:
4a:d6:b2:b2:e1:b9:7e:b8:47:83:b1:e7:e3:11:90:a3:4f:95:
ef:5e:b9:78:6c:cc:ac:47:ea:78:d6:7b:b8:02:c9:b7:02:7e:
21:07:a7:e3:87:dd:9b:32:c9:aa:c8:20:84:e5:9a:32:66:02:
3b:29:53:70:c6:0a:73:dd:aa:46:c2:2c:af:d9:4c:1c:65:c0:
3a:0c:f5:f0:12:53:1a:4d:be:94:95:d7:66:28:aa:b5:d1:c9:
b0:45:ee:c7:ce:d3:68:e0:14:7f:8b:ed:9e:eb:01:8c:27:63:
53:07:17:b4:2f:f3:a8:8b:51:97:cc:62:d4:86:22:2a:d3:d7:
50:44:1e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLI/TmjaDijX5Y65C/3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm
ZmQ5NzYwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EyhlZTBiOWYyYjU2NDBjMTE0Y2JhNGNmNjFkMmQ2ZDA5MjNhZjM4ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYfxO3fQveSpqnKA8ykAO5JjpmfD
raKm1DzAOFDmLmOiI/Z3vF6dqxPH3h8RRelpTftyWI2qbwwGp9wTjsYBS2SvBoWi
oDRRslC0vqe6J0/CT2ZixjdrWsrPooQG/KVLp2ITlBhl+WUmyLSI3+O3deRVnS3q
439bN3qaSEL7LiLsrzUSWHFtEinDo+vmlcFrccR4IaQwgHdPQrdmPhzw8qog5n3N
A/i13zVOnnBT2PbK6OBN87iKY7pmpRo0GGokc6vWZz9pHu+OuJg37pUozx2mo53e
cOK9Bp5X+mA4NMDeFC2Iy6ZLIoeziJFZFMWbUmI5RHdwAn/vPVK0SrHhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4LnytWQMEUy6TPYdLW0JI6842vMB8GA1UdIwQY
MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct
MTJhZDE0NjY1NWNlLzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl
LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBASxWij
FL/0Zoa7WDYsvDLjrBf+xPu6c4qwWVdKexewYb5VhMnTOeAVvkkm4+Vyy4j4H03M
936xJffUV3uKR1EkbvAiMaF7oQ6kOoRuY5INDNnife4paC3/mXasO7QDD4SPGKzf
GNsW2kYCrkv+V96eotBSNtHjNtYFVtyzStaysuG5frhHg7Hn4xGQo0+V7165eGzM
rEfqeNZ7uALJtwJ+IQen44fdmzLJqsgghOWaMmYCOylTcMYKc92qRsIsr9lMHGXA
Ogz18BJTGk2+lJXXZiiqtdHJsEXux87TaOAUf4vtnusBjCdjUwcXtC/zqItRl8xi
1IYiKtPXUEQexA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:23 2025 by rpki-client