Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: szqIeqULPIz0sqka1lQOoEXzOtXigoCB9YbB1XIbvRY=
Subject key identifier: 41:02:EE:FC:9D:74:87:E6:17:42:4B:CF:9D:30:52:8B:31:15:1A:94
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 0194BD1797C90F256AA442381F659BE5E940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0653
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: PbquhIW9zV3GTwFfHVfvcLv6xJw.roa (hash: aemUH4PS/FSjfL3HdRU+EJA2H9Gd9sGg3EwGKTMzK9w=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: dMzTHLR6A2hjDpxAOR3x6gkmzDtmtzN9ZMZtRV2CNnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:c9:0f:25:6a:a4:42:38:1f:65:9b:e5:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=4102eefc9d7487e617424bcf9d30528b31151a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:2a:a9:d7:db:23:6c:40:91:46:91:d0:7b:
6d:f1:a1:b1:06:ee:1f:9d:1d:d1:e4:1d:27:c2:db:
d4:86:4c:10:1a:2d:b5:5f:19:30:96:af:73:05:2f:
be:87:d1:e8:df:9a:3a:21:66:f0:46:cd:b1:01:24:
f6:c1:19:38:1f:58:23:5e:06:d7:cf:bf:db:a0:50:
f8:30:5a:7e:e6:9d:d2:c8:e2:ae:4f:f9:5a:c4:f9:
8d:83:5c:26:a4:29:1a:c9:a9:f4:c9:39:b5:06:4d:
86:4e:da:2b:ed:8d:e7:9d:b4:ae:85:b0:4f:03:18:
14:2c:ea:ff:92:a0:18:50:b3:ed:28:58:a0:46:19:
97:d3:6e:7e:60:6f:0a:07:54:fb:31:dc:0a:6b:ee:
29:f7:4b:6c:5a:72:52:f7:2b:50:3d:e0:19:05:ac:
66:c6:18:23:52:73:68:7b:9d:01:6d:45:6d:50:ff:
cb:f9:97:a3:3f:8a:a6:2e:85:e7:9c:b0:61:56:90:
84:27:3e:e7:3d:99:18:28:9e:9f:be:e6:c7:cc:1b:
a4:d0:b6:6b:b6:24:87:55:07:f8:d2:2c:8a:ba:d8:
20:d9:b9:43:3e:e3:e3:7c:28:2f:e1:c9:05:c3:84:
13:f7:30:c4:45:36:b9:ce:4b:20:be:39:0e:b9:ab:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:EE:FC:9D:74:87:E6:17:42:4B:CF:9D:30:52:8B:31:15:1A:94
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:90:35:eb:50:f6:05:82:5c:ff:a7:dc:c9:57:5d:9c:2e:56:
d5:28:71:04:00:be:d9:d7:57:98:95:78:58:90:9e:fc:24:ac:
19:22:0a:28:a2:60:c0:ba:a8:02:40:a2:80:c1:aa:37:bf:02:
2a:71:80:08:79:89:cb:bc:83:7e:f9:40:3c:cb:a6:00:ce:96:
3e:8c:f4:1a:ce:85:41:87:9e:94:bf:ee:80:96:98:59:43:a6:
c8:7b:89:91:ed:4c:81:1f:9e:4e:7f:44:8a:44:c9:46:f6:70:
8e:96:00:87:c7:71:6e:10:05:26:dd:29:45:a7:8f:b3:8b:0a:
ab:a4:0a:25:70:6d:89:66:2e:94:db:92:1e:95:d1:d8:b1:70:
97:29:32:13:6e:e3:d0:89:19:2f:65:c5:3f:ad:7e:2b:a1:07:
68:35:a6:bb:84:cc:87:5d:ab:2f:c4:41:00:87:98:79:78:9f:
d4:7c:99:25:c8:0e:1c:5b:49:cd:34:53:5d:48:e3:9e:79:8c:
ea:d1:0c:6e:9f:ea:0c:3d:7a:73:08:41:6b:30:f8:24:a9:a9:
36:fa:35:c7:60:66:a9:82:3a:08:ec:8a:37:14:7b:c7:64:d9:
b0:54:dd:8c:08:fa:7e:e9:5a:29:87:f8:66:9e:d8:d9:89:4b:
59:cd:c7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5fJDyVqpEI4H2Wb5elAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4
ZTdlN2MwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD
Eyg0MTAyZWVmYzlkNzQ4N2U2MTc0MjRiY2Y5ZDMwNTI4YjMxMTUxYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R0qqdfbI2xAkUaR0Htt8aGxBu4f
nR3R5B0nwtvUhkwQGi21Xxkwlq9zBS++h9Ho35o6IWbwRs2xAST2wRk4H1gjXgbX
z7/boFD4MFp+5p3SyOKuT/laxPmNg1wmpCkayan0yTm1Bk2GTtor7Y3nnbSuhbBP
AxgULOr/kqAYULPtKFigRhmX025+YG8KB1T7MdwKa+4p90tsWnJS9ytQPeAZBaxm
xhgjUnNoe50BbUVtUP/L+ZejP4qmLoXnnLBhVpCEJz7nPZkYKJ6fvubHzBuk0LZr
tiSHVQf40iyKutgg2blDPuPjfCgv4ckFw4QT9zDERTa5zksgvjkOuauTrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEC7vyddIfmF0JLz50wUosxFRqUMB8GA1UdIwQY
MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt
YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx
LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpA161D2
BYJc/6fcyVddnC5W1ShxBAC+2ddXmJV4WJCe/CSsGSIKKKJgwLqoAkCigMGqN78C
KnGACHmJy7yDfvlAPMumAM6WPoz0Gs6FQYeelL/ugJaYWUOmyHuJke1MgR+eTn9E
ikTJRvZwjpYAh8dxbhAFJt0pRaePs4sKq6QKJXBtiWYulNuSHpXR2LFwlykyE27j
0IkZL2XFP61+K6EHaDWmu4TMh12rL8RBAIeYeXif1HyZJcgOHFtJzTRTXUjjnnmM
6tEMbp/qDD16cwhBazD4JKmpNvo1x2BmqYI6COyKNxR7x2TZsFTdjAj6fulaKYf4
Zp7Y2YlLWc3Hpw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client