Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: WlJyt13B5J9M3tMDvDq573Y57NAX6ygXANcEBa6z4CE=
Subject key identifier: A8:BC:84:4C:5E:EF:8D:D1:87:AD:19:FB:08:B1:89:ED:CC:E2:23:90
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 0194BD8567AA4A4CB87B4E21D21BF5C26720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 100C
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: /+q8kedZ+9Rcj1d59gpChjDYnhZzaMPI7a/X2H21tkQ=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:aa:4a:4c:b8:7b:4e:21:d2:1b:f5:c2:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=a8bc844c5eef8dd187ad19fb08b189edcce22390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:0b:77:7d:3d:32:5c:63:92:67:d1:49:22:
df:a1:d1:18:2e:54:c6:71:da:7b:79:bd:8c:3d:e2:
89:ac:c1:29:7e:d2:75:76:7c:9b:96:f5:2c:39:1c:
b9:fe:5b:37:76:0c:b6:e1:da:02:1f:83:0c:61:5d:
c8:7c:9d:3e:d3:2d:c7:9e:d3:11:f2:8b:d2:73:1e:
80:0f:5f:5f:45:3a:38:f0:83:5b:e3:fa:07:d6:98:
36:ae:7a:f6:b6:0e:98:0c:2a:ab:ce:a3:04:dd:64:
49:bf:75:c1:54:87:34:16:d5:7e:07:c3:28:df:b3:
8d:f2:0b:c2:fc:07:d9:b8:c7:b5:32:55:31:5d:1b:
98:38:a8:bd:72:2d:f7:42:ca:27:ed:98:9d:7a:3d:
43:4e:a4:1a:2a:f0:5f:18:83:31:d4:bd:85:6a:10:
5f:02:79:69:5c:8a:8e:12:f1:6e:bf:c4:e1:76:ec:
be:8d:74:33:9f:d8:d1:ad:a2:59:1b:ca:8b:af:45:
c9:ac:b7:b4:90:a1:8e:c8:6e:f9:4b:71:19:04:e7:
b0:0b:b5:2b:32:0e:78:d0:9b:02:ae:5f:9a:57:e4:
71:ca:95:17:95:66:fd:e6:66:e3:25:bd:ab:36:aa:
9b:ae:f3:d5:96:50:ef:56:8f:c8:6e:39:41:c9:70:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:84:4C:5E:EF:8D:D1:87:AD:19:FB:08:B1:89:ED:CC:E2:23:90
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:c7:78:be:f9:5b:21:56:59:b6:52:4c:1a:9a:1a:c9:37:
d8:b9:5b:9f:b1:49:20:15:04:94:28:56:4f:15:e2:44:f5:6f:
01:6b:ba:f2:e2:3a:c5:e1:c8:24:ce:0e:52:1a:fe:8e:e0:2f:
6c:32:86:06:a8:6a:f0:1f:1c:7b:bf:51:41:27:b3:b6:b9:31:
a5:bc:52:b3:cd:98:48:d3:49:23:9d:9d:10:71:03:f5:3e:2c:
a3:26:f8:5f:2a:13:8b:32:b8:04:89:2c:2c:68:d5:df:4e:af:
1b:29:be:79:8c:85:39:c7:31:b8:64:79:41:1c:38:da:95:f2:
e7:02:61:91:d6:b6:2e:92:56:2d:ab:43:6b:4a:a0:59:7d:fb:
d2:7b:75:06:5f:8d:b9:c0:af:1b:af:6a:d4:74:0b:d4:5d:4d:
0f:02:12:86:b5:89:f8:7f:31:30:d9:a0:99:26:14:c3:db:dc:
5a:55:97:92:07:04:b4:cd:29:e3:76:fa:ff:85:61:c6:78:54:
bc:bf:d0:3e:89:22:4b:62:8c:c3:32:77:f9:ea:95:db:13:60:
41:eb:2c:a7:1b:9c:ec:ca:74:55:34:5f:1a:fa:a1:f2:e8:8c:
e4:14:7f:66:7b:f4:cc:d5:82:c1:37:2c:36:69:cb:03:bf:fc:
e2:5d:6c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWeqSky4e04h0hv1wmcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm
NmUzNGUwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
EyhhOGJjODQ0YzVlZWY4ZGQxODdhZDE5ZmIwOGIxODllZGNjZTIyMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23kLd309MlxjkmfRSSLfodEYLlTG
cdp7eb2MPeKJrMEpftJ1dnyblvUsORy5/ls3dgy24doCH4MMYV3IfJ0+0y3HntMR
8ovScx6AD19fRTo48INb4/oH1pg2rnr2tg6YDCqrzqME3WRJv3XBVIc0FtV+B8Mo
37ON8gvC/AfZuMe1MlUxXRuYOKi9ci33Qson7Zidej1DTqQaKvBfGIMx1L2FahBf
AnlpXIqOEvFuv8Thduy+jXQzn9jRraJZG8qLr0XJrLe0kKGOyG75S3EZBOewC7Ur
Mg540JsCrl+aV+RxypUXlWb95mbjJb2rNqqbrvPVllDvVo/IbjlByXB8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi8hExe743Rh60Z+wixie3M4iOQMB8GA1UdIwQY
MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt
ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi
LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4rHeL75
WyFWWbZSTBqaGsk32Llbn7FJIBUElChWTxXiRPVvAWu68uI6xeHIJM4OUhr+juAv
bDKGBqhq8B8ce79RQSeztrkxpbxSs82YSNNJI52dEHED9T4soyb4XyoTizK4BIks
LGjV306vGym+eYyFOccxuGR5QRw42pXy5wJhkda2LpJWLatDa0qgWX370nt1Bl+N
ucCvG69q1HQL1F1NDwIShrWJ+H8xMNmgmSYUw9vcWlWXkgcEtM0p43b6/4VhxnhU
vL/QPokiS2KMwzJ3+eqV2xNgQesspxuc7Mp0VTRfGvqh8uiM5BR/Znv0zNWCwTcs
NmnLA7/84l1sbQ==
-----END CERTIFICATE-----
Generated at Thu May 1 08:10:01 2025 by rpki-client