Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: zJvcD2lJdLNBZtzjjX39ecI1oYojtrdXF2RhgBEQ6mc=
Subject key identifier: 41:B1:28:4E:4D:09:5B:13:82:0E:96:06:A7:74:1A:D4:54:35:27:C9
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 0194BBCE2ECE681877B0D4766BB45BEF2FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: mkQQZykU6KJa/WWuZ0yaM0R87OjwJRE03PMYBOUHmQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:ce:68:18:77:b0:d4:76:6b:b4:5b:ef:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=41b1284e4d095b13820e9606a7741ad4543527c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:f8:b9:7f:6a:06:bc:93:28:14:9e:39:a4:
7b:52:51:ea:94:04:23:9a:d3:a8:6b:e0:70:6b:a2:
bd:f2:c0:b3:7e:08:a1:af:4d:51:b5:d7:f6:89:71:
97:71:31:d6:c7:bb:34:7c:44:12:86:0a:fa:e0:f2:
12:35:c5:2c:f5:86:fa:d9:48:b0:57:eb:47:02:86:
ef:ed:d6:ae:31:1c:c1:83:1a:5d:37:cf:57:00:c8:
e8:d0:d7:b6:98:e9:ce:13:3f:a5:f0:47:aa:cd:44:
11:9f:91:41:ff:83:b4:23:f3:b6:12:ea:c1:73:80:
41:84:10:e4:88:32:58:b2:14:bd:80:ec:28:d5:1c:
48:1d:22:90:2f:e6:47:35:ce:56:ec:0f:bf:cf:75:
63:b1:08:d9:74:00:48:d8:72:6e:91:0d:85:8c:c0:
41:29:cf:ab:19:62:c3:35:a1:b6:75:09:66:13:44:
1f:c4:3f:94:a2:42:10:66:ab:29:de:52:40:6a:2f:
10:b2:26:27:98:bd:0b:14:36:e0:71:34:9f:74:e7:
7f:79:db:e8:80:46:61:65:81:74:2b:db:af:c4:cb:
cb:1f:80:02:d2:8d:96:b4:ab:72:49:6c:3b:1f:f5:
bf:85:12:0c:cf:7d:79:4b:48:9a:98:89:d9:24:fe:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:28:4E:4D:09:5B:13:82:0E:96:06:A7:74:1A:D4:54:35:27:C9
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:2c:b3:b0:de:a6:4d:f4:6a:e0:66:73:55:70:18:77:b9:
f8:ea:a2:c1:dd:0f:f3:82:96:73:06:84:9a:ce:df:03:26:91:
b4:b2:62:2a:fe:27:6e:d8:f1:7a:cc:cd:41:4f:d7:ac:7e:57:
b2:1d:4c:15:a7:92:66:af:d8:39:26:f6:bc:a1:2b:72:43:88:
90:28:65:2f:c3:fe:37:dc:1d:a5:02:ca:f0:b7:84:40:1e:a0:
c4:b2:c5:2a:a0:bc:a2:7b:1a:b8:52:63:a3:7d:b0:10:6f:2b:
37:4e:4b:f9:ec:62:2c:9f:14:c4:1a:36:28:ef:50:2c:27:30:
b3:8b:16:0a:07:24:aa:15:89:25:bd:93:62:11:26:94:56:18:
a2:39:38:61:34:6f:15:c7:d8:0b:f7:d1:a8:f7:a5:43:60:2b:
59:d4:f3:24:84:10:b7:af:04:0a:54:8e:3c:e1:5b:8d:ce:fd:
9f:05:96:29:dd:5e:9e:d3:4f:38:1b:1c:cf:4d:87:c0:67:5e:
cc:a7:26:93:5c:cc:eb:a4:2e:61:65:1f:a8:b7:48:b1:9a:7a:
f7:a4:f4:13:7b:16:f7:ac:99:6a:c1:9c:28:88:84:53:2b:0b:
e8:43:ed:6d:cd:9a:14:7b:e6:fc:16:f2:36:85:87:93:ae:15:
af:5e:a4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi7OaBh3sNR2a7Rb7y+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk
YTQwZWEwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
Eyg0MWIxMjg0ZTRkMDk1YjEzODIwZTk2MDZhNzc0MWFkNDU0MzUyN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl74uX9qBryTKBSeOaR7UlHqlAQj
mtOoa+Bwa6K98sCzfgihr01Rtdf2iXGXcTHWx7s0fEQShgr64PISNcUs9Yb62Uiw
V+tHAobv7dauMRzBgxpdN89XAMjo0Ne2mOnOEz+l8EeqzUQRn5FB/4O0I/O2EurB
c4BBhBDkiDJYshS9gOwo1RxIHSKQL+ZHNc5W7A+/z3VjsQjZdABI2HJukQ2FjMBB
Kc+rGWLDNaG2dQlmE0QfxD+UokIQZqsp3lJAai8QsiYnmL0LFDbgcTSfdOd/edvo
gEZhZYF0K9uvxMvLH4AC0o2WtKtySWw7H/W/hRIMz315S0iamInZJP45wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGxKE5NCVsTgg6WBqd0GtRUNSfJMB8GA1UdIwQY
MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut
YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1
LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzsss7De
pk30auBmc1VwGHe5+Oqiwd0P84KWcwaEms7fAyaRtLJiKv4nbtjxeszNQU/XrH5X
sh1MFaeSZq/YOSb2vKErckOIkChlL8P+N9wdpQLK8LeEQB6gxLLFKqC8onsauFJj
o32wEG8rN05L+exiLJ8UxBo2KO9QLCcws4sWCgckqhWJJb2TYhEmlFYYojk4YTRv
FcfYC/fRqPelQ2ArWdTzJIQQt68EClSOPOFbjc79nwWWKd1entNPOBscz02HwGde
zKcmk1zM66QuYWUfqLdIsZp696T0E3sW96yZasGcKIiEUysL6EPtbc2aFHvm/Bby
NoWHk64Vr16k9g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:18 2025 by rpki-client