Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: sgr/bKi3IxLp0EyrfrQMx/AcYavMrY2+9IOe7+aK1r0=
Subject key identifier: AC:8F:30:9B:B0:A2:B6:7B:07:ED:F6:EF:3A:85:E9:1F:55:30:75:0A
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0194BD85B485237CA3FDA7C1283B2ABF00D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: txWvaQBRf3CFZEGHgj+aVG1WRQ4qYHuKuhEEP9oxPiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:85:23:7c:a3:fd:a7:c1:28:3b:2a:bf:00:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=ac8f309bb0a2b67b07edf6ef3a85e91f5530750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:12:90:2a:d0:9a:db:88:68:61:a3:01:19:
b9:3f:38:40:66:74:95:9d:c5:f4:cf:37:31:80:71:
86:bf:66:ed:ca:c7:2e:8e:c0:a4:16:5a:5f:4d:25:
5d:3a:18:8c:36:84:60:08:bc:4f:1f:d7:2f:46:7a:
1a:6c:b6:30:5c:dc:d6:b8:2a:a0:d6:9b:84:aa:53:
02:41:f9:72:d7:85:69:2b:b9:40:b0:2a:26:cc:d7:
70:02:22:4a:23:17:ba:0c:1b:14:80:74:1e:b1:67:
ce:17:de:57:e4:a1:e1:49:62:db:0f:c6:77:72:4c:
f7:73:90:fa:ab:c2:9c:e4:1d:56:93:2d:c6:8a:86:
fb:10:d2:00:d5:90:02:82:e3:03:4c:ee:49:f4:e6:
72:94:53:e5:31:86:5a:85:08:18:dc:04:c2:41:2b:
b9:f5:2e:29:a8:61:f8:d6:6e:22:a9:2b:59:52:52:
b6:3d:c7:93:4d:3a:47:9f:ae:fd:75:fa:4a:af:55:
34:f6:50:0d:7f:56:d2:6b:08:47:c2:12:8f:76:c0:
5a:b0:af:b0:33:ea:ab:3d:14:df:91:3b:30:58:5a:
5d:88:a6:43:b2:79:08:8a:44:fa:30:a4:9b:09:44:
13:f7:b8:fa:b4:70:6c:5c:72:a1:27:42:31:16:01:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:30:9B:B0:A2:B6:7B:07:ED:F6:EF:3A:85:E9:1F:55:30:75:0A
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:a7:e0:d8:5d:18:91:3a:9f:5c:e4:2f:dd:21:b5:db:75:
73:07:f1:cc:54:ca:70:cd:3d:66:f8:e0:b4:6f:c5:a1:65:9f:
29:cc:37:f9:4d:99:76:e5:f1:9f:ff:0a:5f:02:7f:38:0c:3b:
01:43:f0:be:51:46:33:d0:e5:35:92:3d:43:e3:1a:82:bf:7c:
e0:91:3c:24:19:be:58:45:91:af:eb:28:c4:28:7c:c1:f0:52:
e3:d9:88:c0:5c:0e:49:78:59:c7:c5:b2:b1:bd:e3:a3:b8:6f:
90:f0:b4:fd:25:1d:fd:6e:51:e7:0b:16:0f:63:ef:79:69:e0:
c1:3d:c3:d0:d2:c3:12:34:ae:ed:17:2d:10:45:46:c6:da:fc:
6e:2a:28:2f:9e:87:af:c0:fe:68:42:7b:4b:14:a6:9b:f3:a8:
87:30:1d:4b:95:01:85:55:4b:51:1e:d9:72:13:18:d7:3b:99:
e1:0d:cb:a0:73:65:85:08:e5:8f:3f:e4:c1:93:84:26:74:21:
bc:28:ac:df:bf:93:f0:40:51:75:38:f2:fe:81:b1:fd:6e:a3:
39:40:e9:05:3f:a8:73:dd:c8:b1:c3:03:f8:a1:9a:69:a3:30:
46:17:e7:ab:44:34:93:53:7f:3f:c8:e1:80:2f:ad:bc:5c:48:
94:1e:b9:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbSFI3yj/afBKDsqvwDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOGNhMWQ0MThjMjE4ZTI2Zjc5NTE4MWE5ZTNiYjdiNzlk
NDQ0M2YwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
EyhhYzhmMzA5YmIwYTJiNjdiMDdlZGY2ZWYzYTg1ZTkxZjU1MzA3NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNYSkCrQmtuIaGGjARm5PzhAZnSV
ncX0zzcxgHGGv2btyscujsCkFlpfTSVdOhiMNoRgCLxPH9cvRnoabLYwXNzWuCqg
1puEqlMCQfly14VpK7lAsComzNdwAiJKIxe6DBsUgHQesWfOF95X5KHhSWLbD8Z3
ckz3c5D6q8Kc5B1Wky3Giob7ENIA1ZACguMDTO5J9OZylFPlMYZahQgY3ATCQSu5
9S4pqGH41m4iqStZUlK2PceTTTpHn679dfpKr1U09lANf1bSawhHwhKPdsBasK+w
M+qrPRTfkTswWFpdiKZDsnkIikT6MKSbCUQT97j6tHBsXHKhJ0IxFgHyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyPMJuworZ7B+327zqF6R9VMHUKMB8GA1UdIwQY
MBaAFMOModQYwhjib3lRganju3t51EQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYt
MmVmMjdhMTkxNmJkLzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYtMmVmMjdhMTkxNmJk
LzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJen4Nhd
GJE6n1zkL90htdt1cwfxzFTKcM09ZvjgtG/FoWWfKcw3+U2ZduXxn/8KXwJ/OAw7
AUPwvlFGM9DlNZI9Q+Magr984JE8JBm+WEWRr+soxCh8wfBS49mIwFwOSXhZx8Wy
sb3jo7hvkPC0/SUd/W5R5wsWD2PveWngwT3D0NLDEjSu7RctEEVGxtr8biooL56H
r8D+aEJ7SxSmm/OohzAdS5UBhVVLUR7ZchMY1zuZ4Q3LoHNlhQjljz/kwZOEJnQh
vCis37+T8EBRdTjy/oGx/W6jOUDpBT+oc93IscMD+KGaaaMwRhfnq0Q0k1N/P8jh
gC+tvFxIlB65Cg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:50 2025 by rpki-client