Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File: RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier: 0I6CgxqSdTckiw0PYxbMbAfzMf3eCIxUTexTjCHXO4Q=
Subject key identifier: 23:86:E1:E7:CE:36:70:00:BA:76:FD:8D:90:7B:B5:7D:AE:22:64:EB
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 0194BC72B5DCB1883566205AAAFB369DBBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: 1OBm4SwvK8Ds+aBgdj3JbzccMBaxLHUKBqMCld8NqD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:dc:b1:88:35:66:20:5a:aa:fb:36:9d:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=2386e1e7ce367000ba76fd8d907bb57dae2264eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:1d:b5:e5:08:0b:7b:cd:1e:06:2f:89:0a:
53:62:8b:3c:08:f4:8f:d5:62:be:5d:9c:f9:cf:aa:
da:b6:b9:c7:bf:71:1b:82:29:c3:cb:71:2f:f7:29:
5b:be:e4:98:91:e8:c3:ba:a0:cf:b2:f0:72:4c:c5:
1f:dd:a7:eb:e8:57:c8:1f:1b:f3:ab:88:8e:99:e3:
94:a5:3a:a4:be:50:c6:9e:6b:8d:b3:fd:13:fb:12:
10:a0:31:98:23:da:f5:ec:33:92:50:b0:d3:af:e4:
97:31:a3:57:6e:5e:61:7e:b7:7b:97:e8:86:c1:1d:
ed:24:3f:00:08:7f:2a:ee:cb:74:d7:2f:13:21:61:
a3:d3:d6:b0:66:24:da:c9:9d:c2:9d:bc:a8:88:9a:
6d:c4:d1:ef:62:f1:5d:07:e3:fa:b0:c8:b8:2a:04:
15:5e:8a:52:f1:05:9e:d5:1b:f4:51:cf:50:c2:7f:
ca:ce:26:05:4e:0e:3a:81:b3:ce:90:8a:0b:aa:01:
8b:ff:81:bd:95:e3:6f:c7:60:f3:0a:13:4f:8e:13:
c7:a9:7b:01:5d:3a:e4:41:52:45:b9:b0:39:20:8a:
8a:2d:52:29:50:1b:4d:bf:0c:d7:99:e0:f2:59:65:
9b:f0:f9:92:1e:43:25:e2:71:82:76:28:6f:23:60:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:E1:E7:CE:36:70:00:BA:76:FD:8D:90:7B:B5:7D:AE:22:64:EB
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8a:4e:68:ab:1e:85:64:8d:ec:22:e6:aa:ff:24:bb:d2:f3:
e0:17:79:86:f4:e3:df:01:d2:7b:b7:ae:d8:8a:22:cf:70:1a:
3e:65:16:8e:47:83:d7:eb:ed:61:fc:d2:14:8b:3b:c8:d2:7d:
46:37:17:8d:8c:96:21:90:69:5f:76:86:4d:c5:82:b7:d7:99:
1b:63:df:8c:a4:bb:de:d5:9a:56:34:d7:d9:c9:36:70:2f:b0:
d9:81:27:b9:11:c2:d8:2e:5e:1b:11:cc:f1:e5:ca:a0:58:74:
39:19:1b:ee:ed:ba:7b:ea:dd:c6:9f:6b:7e:9d:30:ea:e2:66:
5f:be:56:d3:b1:e2:c0:ca:2f:c9:4f:ca:73:b2:fb:c9:65:19:
16:df:4a:e6:81:24:36:f2:df:8a:86:78:9d:27:fd:f5:c4:8c:
f0:e1:86:4e:a5:dd:22:b3:01:6e:13:7f:c2:d7:a6:51:b9:54:
7d:af:65:11:eb:dd:50:cc:7d:f4:34:df:94:4d:b3:ec:11:f2:
2c:5a:89:c6:a9:4c:6c:64:f8:45:82:90:87:ad:a9:d0:68:06:
4f:17:f8:b3:31:94:30:83:0d:fe:fa:cc:9b:55:1d:cb:d4:40:
8b:13:5c:b3:07:7d:5d:9d:d4:5c:84:e9:fa:14:72:02:3a:36:
2e:81:f5:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crXcsYg1ZiBaqvs2nbu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGMyYzk4M2I2MjcxNjkyMTg1NzFjNmI4Mjk0N2FlZWVh
NWY3Y2UwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
EygyMzg2ZTFlN2NlMzY3MDAwYmE3NmZkOGQ5MDdiYjU3ZGFlMjI2NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTwdteUIC3vNHgYviQpTYos8CPSP
1WK+XZz5z6ratrnHv3EbginDy3Ev9ylbvuSYkejDuqDPsvByTMUf3afr6FfIHxvz
q4iOmeOUpTqkvlDGnmuNs/0T+xIQoDGYI9r17DOSULDTr+SXMaNXbl5hfrd7l+iG
wR3tJD8ACH8q7st01y8TIWGj09awZiTayZ3CnbyoiJptxNHvYvFdB+P6sMi4KgQV
XopS8QWe1Rv0Uc9Qwn/KziYFTg46gbPOkIoLqgGL/4G9leNvx2DzChNPjhPHqXsB
XTrkQVJFubA5IIqKLVIpUBtNvwzXmeDyWWWb8PmSHkMl4nGCdihvI2AxAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOG4efONnAAunb9jZB7tX2uImTrMB8GA1UdIwQY
MBaAFEcMLJg7YnFpIYVxxrgpR67upffOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAt
MTE1YWFjOTJlOWJmLzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAtMTE1YWFjOTJlOWJm
LzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4pOaKse
hWSN7CLmqv8ku9Lz4Bd5hvTj3wHSe7eu2Ioiz3AaPmUWjkeD1+vtYfzSFIs7yNJ9
RjcXjYyWIZBpX3aGTcWCt9eZG2PfjKS73tWaVjTX2ck2cC+w2YEnuRHC2C5eGxHM
8eXKoFh0ORkb7u26e+rdxp9rfp0w6uJmX75W07HiwMovyU/Kc7L7yWUZFt9K5oEk
NvLfioZ4nSf99cSM8OGGTqXdIrMBbhN/wtemUblUfa9lEevdUMx99DTflE2z7BHy
LFqJxqlMbGT4RYKQh62p0GgGTxf4szGUMIMN/vrMm1Udy9RAixNcswd9XZ3UXITp
+hRyAjo2LoH1eQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:10 2025 by rpki-client