Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier: BH1TEklo/Vvm7tqq+6Y30L7vc7uYvErUdGp7nSvvAHA=
Subject key identifier: 8A:11:D2:5D:7B:D1:F6:20:95:81:D6:1E:3D:4A:FB:12:07:B8:64:68
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 0194BC3C51435498830A0491C7415D55EFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number: 11B7
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: WanD5C51VAcft94pFpRAoChpwR+2zoAeXOfnPvcNdos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:43:54:98:83:0a:04:91:c7:41:5d:55:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=8a11d25d7bd1f6209581d61e3d4afb1207b86468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:b8:52:78:4a:f1:99:de:6a:ba:8d:92:ae:
b4:7a:45:4e:6b:e0:c0:c0:73:39:0b:a2:7c:a0:42:
5b:58:84:fc:b3:33:3f:a9:bb:2a:eb:35:0a:56:91:
d9:4b:14:ff:60:32:d7:84:a3:a0:59:3a:bc:06:7c:
2a:cc:70:29:c9:96:b1:04:e4:12:e8:04:b5:be:e8:
95:19:3a:94:d3:de:63:bc:99:91:67:bf:c1:0b:1b:
b1:01:87:55:09:ed:1d:49:5a:0b:d1:c0:a5:45:0d:
73:3f:67:bf:9f:d0:95:74:d8:24:00:4d:78:6c:42:
ce:2d:d8:ba:ff:aa:81:35:fb:2e:0e:cd:03:b8:52:
a7:4b:71:be:c7:54:ef:ab:17:05:04:c5:e1:7f:db:
c2:b8:c2:64:0c:f4:91:14:c9:48:7f:5b:16:08:f8:
74:25:f4:3e:3e:a2:28:0b:a8:01:8b:29:76:d0:48:
98:bf:7e:a2:97:f3:66:1d:2b:b4:ba:e7:fb:65:1f:
5c:67:8d:4d:7f:57:14:e4:20:86:1c:fd:bb:76:f0:
76:d6:6d:ba:64:91:73:5d:2c:b6:2f:ad:96:27:4c:
d7:fa:54:bd:e7:fa:ba:f9:d5:c3:34:71:5c:cf:00:
ce:88:47:0c:c1:17:f6:b3:b2:be:18:97:22:0a:ff:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:D2:5D:7B:D1:F6:20:95:81:D6:1E:3D:4A:FB:12:07:B8:64:68
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4e:34:28:28:d8:9a:9e:21:cf:76:14:64:92:85:7b:21:1f:
66:01:93:1e:b4:e3:1d:ff:e7:70:c6:84:4e:1c:df:44:b1:72:
9b:1f:31:91:82:33:b5:44:19:87:4f:7a:65:be:76:44:0e:b7:
72:66:9f:41:e9:1d:64:29:cd:f0:02:44:89:4d:0f:26:9c:9d:
62:22:03:e7:2c:96:0c:55:20:d9:ee:b6:e9:9b:16:17:7e:72:
a2:4f:44:44:fa:a0:47:8a:b2:0e:89:63:da:ff:d4:bc:63:bb:
8f:46:52:81:dc:fc:be:6b:50:d4:02:9e:d9:3b:6e:14:f4:e3:
2e:f5:c3:6a:f5:ca:ec:00:2e:4d:1b:83:21:eb:a4:04:8d:13:
b1:0c:70:3e:a8:13:07:22:e6:e8:b7:ff:7a:d6:4f:51:78:00:
56:f8:a5:66:1c:a1:a8:0d:6a:79:63:a4:a9:7b:a8:53:e7:02:
46:76:7f:a3:31:1c:20:ed:71:17:72:c5:79:7a:df:32:1c:db:
d0:7c:5d:0d:76:d4:d7:38:80:ce:0c:ab:d4:d2:31:79:c2:90:
41:32:73:75:6c:59:8d:a3:db:7f:a9:43:29:6f:43:f8:2f:39:
4d:23:a4:a7:e9:50:20:36:e8:a3:71:a3:ce:2f:54:51:47:7c:
79:8d:2e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFFDVJiDCgSRx0FdVe/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx
ZmM4NDUwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
Eyg4YTExZDI1ZDdiZDFmNjIwOTU4MWQ2MWUzZDRhZmIxMjA3Yjg2NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VK4UnhK8ZnearqNkq60ekVOa+DA
wHM5C6J8oEJbWIT8szM/qbsq6zUKVpHZSxT/YDLXhKOgWTq8BnwqzHApyZaxBOQS
6AS1vuiVGTqU095jvJmRZ7/BCxuxAYdVCe0dSVoL0cClRQ1zP2e/n9CVdNgkAE14
bELOLdi6/6qBNfsuDs0DuFKnS3G+x1TvqxcFBMXhf9vCuMJkDPSRFMlIf1sWCPh0
JfQ+PqIoC6gBiyl20EiYv36il/NmHSu0uuf7ZR9cZ41Nf1cU5CCGHP27dvB21m26
ZJFzXSy2L62WJ0zX+lS95/q6+dXDNHFczwDOiEcMwRf2s7K+GJciCv8bLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoR0l170fYglYHWHj1K+xIHuGRoMB8GA1UdIwQY
MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt
NGYyMjVkMDg4NTY2LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2
LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW040KCjY
mp4hz3YUZJKFeyEfZgGTHrTjHf/ncMaEThzfRLFymx8xkYIztUQZh096Zb52RA63
cmafQekdZCnN8AJEiU0PJpydYiID5yyWDFUg2e626ZsWF35yok9ERPqgR4qyDolj
2v/UvGO7j0ZSgdz8vmtQ1AKe2TtuFPTjLvXDavXK7AAuTRuDIeukBI0TsQxwPqgT
ByLm6Lf/etZPUXgAVvilZhyhqA1qeWOkqXuoU+cCRnZ/ozEcIO1xF3LFeXrfMhzb
0HxdDXbU1ziAzgyr1NIxecKQQTJzdWxZjaPbf6lDKW9D+C85TSOkp+lQIDboo3Gj
zi9UUUd8eY0uQg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:05 2025 by rpki-client