Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: UYpkAxfQVk7cI9l9+xSSQOfNJzd4KRiZMdbNM4iyP4w=
Subject key identifier: FC:6A:FB:55:91:0E:24:80:FE:42:58:A7:77:09:AD:98:51:C9:8A:31
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 0194BCA9D2613961FF14D153321BA76DD113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 0E86
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: mqAtKN3QXdfkEpzUuKbQx8s79+2JrlHfSPTuNPrqDgA=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:61:39:61:ff:14:d1:53:32:1b:a7:6d:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=fc6afb55910e2480fe4258a77709ad9851c98a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:c5:6f:1a:09:6c:0c:59:28:d4:c1:6c:ad:
d2:57:2e:d0:09:b5:14:1a:a4:a4:2f:88:79:23:77:
fe:47:3b:58:fc:5a:61:fa:61:f3:68:fb:a1:e6:46:
e5:80:bd:a9:92:6e:35:7a:f2:00:89:e6:21:c6:46:
d0:90:04:f9:85:d2:e7:5c:e2:52:f6:e3:32:db:6a:
33:b6:2c:19:cb:7e:d3:78:a3:11:35:2e:c6:aa:27:
14:17:cb:4a:95:b2:6f:3a:ea:ab:b5:10:75:17:6b:
b5:9c:e8:03:3e:90:b2:4c:53:3a:fa:c3:a6:dd:8b:
6a:40:14:39:6d:56:ce:73:12:f5:a4:e3:d9:fb:22:
ae:ee:27:4b:a2:0e:4a:65:98:a0:fa:dd:e0:51:d5:
37:4c:50:5d:b2:ce:ee:7f:17:62:7e:79:d1:b4:92:
3e:85:86:99:0c:07:4f:67:10:7f:94:08:63:68:72:
6e:ca:82:41:e3:0b:b7:94:3f:45:c3:e9:a7:ff:94:
4f:4c:ff:84:3a:36:86:2e:ef:b9:77:b8:90:6e:33:
ba:ca:ba:01:43:4c:9a:a9:b0:4e:a2:3c:6c:bb:7b:
ae:fd:6b:dc:28:e7:9d:ec:bd:f6:90:f5:f4:8a:70:
97:db:2a:61:d1:6b:bb:00:15:5b:8c:ec:88:40:26:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:FB:55:91:0E:24:80:FE:42:58:A7:77:09:AD:98:51:C9:8A:31
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:8c:df:c3:17:d5:b1:f7:2f:f8:1c:b0:b5:bd:dd:8b:5f:
e3:a6:bc:68:82:cf:65:ca:47:8e:e5:a6:21:a4:8c:d9:7f:d1:
c9:ed:dd:c1:c3:05:f6:1d:c8:7d:61:02:c6:c8:55:69:51:64:
81:73:97:4e:d7:a5:dd:6b:d9:b2:c8:1f:3f:be:f1:8e:93:3e:
70:8e:2b:28:37:4f:f0:a8:5a:17:dd:40:6c:f0:4b:c8:a0:ec:
54:c9:7d:f5:fe:cc:41:99:a1:c6:b9:52:6a:13:08:74:e2:e4:
d6:a5:33:4c:94:c8:8c:bd:3f:d6:db:7d:1e:01:d9:bc:82:c1:
61:47:ef:ca:55:2a:b1:d4:de:8c:13:39:bd:77:64:42:2c:fa:
76:65:8b:1f:d4:e6:fc:4a:9c:d5:82:c8:d1:93:65:c2:4a:12:
b7:d7:84:5f:64:b9:18:3a:03:26:d7:35:a6:8f:88:06:a3:91:
50:1c:4a:5a:4e:fa:75:6c:de:96:07:f8:09:db:d2:ac:10:5f:
8f:26:4c:74:36:9a:12:47:09:71:d2:c0:64:b3:e4:9b:df:1b:
30:97:cd:30:90:40:ea:88:c8:13:64:be:73:81:de:d0:70:37:
0f:bf:5b:e3:ae:89:3c:9f:e6:c7:81:50:31:a4:a0:b4:1e:d6:
14:be:9d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdJhOWH/FNFTMhunbdETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0
N2I1ZmYwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhmYzZhZmI1NTkxMGUyNDgwZmU0MjU4YTc3NzA5YWQ5ODUxYzk4YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFPFbxoJbAxZKNTBbK3SVy7QCbUU
GqSkL4h5I3f+RztY/Fph+mHzaPuh5kblgL2pkm41evIAieYhxkbQkAT5hdLnXOJS
9uMy22oztiwZy37TeKMRNS7GqicUF8tKlbJvOuqrtRB1F2u1nOgDPpCyTFM6+sOm
3YtqQBQ5bVbOcxL1pOPZ+yKu7idLog5KZZig+t3gUdU3TFBdss7ufxdifnnRtJI+
hYaZDAdPZxB/lAhjaHJuyoJB4wu3lD9Fw+mn/5RPTP+EOjaGLu+5d7iQbjO6yroB
Q0yaqbBOojxsu3uu/WvcKOed7L32kPX0inCX2yph0Wu7ABVbjOyIQCYL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxq+1WRDiSA/kJYp3cJrZhRyYoxMB8GA1UdIwQY
MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt
NGE0ZTBmNDI0ZjE3LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3
LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB+M38MX
1bH3L/gcsLW93Ytf46a8aILPZcpHjuWmIaSM2X/Rye3dwcMF9h3IfWECxshVaVFk
gXOXTtel3WvZssgfP77xjpM+cI4rKDdP8KhaF91AbPBLyKDsVMl99f7MQZmhxrlS
ahMIdOLk1qUzTJTIjL0/1tt9HgHZvILBYUfvylUqsdTejBM5vXdkQiz6dmWLH9Tm
/Eqc1YLI0ZNlwkoSt9eEX2S5GDoDJtc1po+IBqORUBxKWk76dWzelgf4CdvSrBBf
jyZMdDaaEkcJcdLAZLPkm98bMJfNMJBA6ojIE2S+c4He0HA3D79b466JPJ/mx4FQ
MaSgtB7WFL6dxA==
-----END CERTIFICATE-----
Generated at Thu May 1 14:20:50 2025 by rpki-client