Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier: gEpXJY/5IRvtwsNXgPypONykhi0JqL+z+5THDFi7CGM=
Subject key identifier: 5C:ED:89:F0:11:DE:29:D0:E1:BE:73:AB:FB:D1:E8:88:9A:EB:FB:8B
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 0194BBCE02A8536778B49A639192BC9D9A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa (hash: 6wJtQ966GopPabKniSig2Pa6Q5RXd/Jr37kv2JhiMao=)
2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: GKZ/qZv2dpUyu2KR6DqfQ4s3hF55ZNI+Xe8PI1pI2d4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:a8:53:67:78:b4:9a:63:91:92:bc:9d:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=5ced89f011de29d0e1be73abfbd1e8889aebfb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:f5:12:45:7e:c7:71:f5:b0:18:0b:7f:79:
c2:30:3a:fc:f6:24:90:d5:9f:54:6d:d0:9f:07:f9:
59:82:9e:ab:33:2b:c4:1f:ce:46:2c:eb:ba:ce:9a:
d4:e5:e2:8f:cd:fd:8f:b4:4b:d1:0c:71:b7:74:17:
68:9b:f0:68:ec:b9:62:c2:cd:3c:3b:90:86:af:20:
36:a1:8d:31:2c:99:6e:28:08:62:6d:f2:21:e6:f6:
55:43:68:bb:0b:3e:1a:e7:18:2f:6c:7d:21:69:95:
be:02:d5:c4:d6:de:2a:d6:09:f2:52:a5:14:9f:e8:
b4:cf:c6:74:0b:a0:c2:5e:bf:b0:71:49:54:9f:19:
fd:66:ba:30:eb:0c:26:df:4a:4b:30:c5:1a:d2:8d:
cf:ec:85:0f:04:01:a4:92:37:82:ca:fe:e0:e0:87:
55:eb:38:0c:68:6c:b4:40:8b:27:dd:1c:51:a5:44:
b5:1e:2d:45:ce:6d:cd:0c:1a:4c:ce:c4:3a:9d:9e:
94:c8:4c:4e:27:9e:36:29:59:b9:bf:5e:4b:81:21:
0e:b8:03:b3:c1:47:d1:4c:a0:63:bb:47:94:13:b1:
ed:f9:7a:8c:cf:3e:36:7a:5b:12:00:18:6d:f2:bd:
f5:d5:c8:18:4d:24:72:78:e2:13:da:f4:07:0c:6f:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:89:F0:11:DE:29:D0:E1:BE:73:AB:FB:D1:E8:88:9A:EB:FB:8B
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:e6:61:fe:bc:6f:a2:42:36:a3:8f:b2:f0:ee:b4:e5:25:
8c:f0:d3:72:16:23:26:b3:0f:62:52:3e:1b:b0:ce:6d:c6:2f:
40:3b:9c:90:ec:64:1f:8b:f9:e5:08:d0:b9:10:1e:bb:a2:f0:
dd:ba:cb:42:6c:3e:7d:cd:a7:28:90:f1:a0:05:d0:a4:2a:0d:
2d:c1:f1:e1:2e:7a:2c:6e:e7:13:6b:99:58:63:bc:59:d3:db:
2b:c3:a5:7d:2e:2f:e0:d8:a5:38:99:e2:a5:80:e9:d8:07:04:
83:bd:da:d4:7e:ff:e8:d0:53:9a:58:df:92:f8:aa:f3:fd:86:
a2:9b:be:9e:ea:fc:6b:a8:18:ec:cc:7b:23:0e:23:c6:c3:f2:
d3:61:08:98:2d:7c:04:ac:7b:c1:ca:d2:be:ad:4e:92:17:04:
b7:5a:78:e0:6c:ae:0d:43:4f:aa:7c:1c:e6:4f:b9:8b:eb:09:
e9:bf:df:e1:5a:ed:1a:4c:ad:e7:5a:b8:d3:50:de:04:49:b5:
2b:4d:f0:17:c7:17:54:3e:3a:50:00:88:6c:2c:fc:af:6c:f5:
c7:ce:95:a1:2a:0f:03:57:80:3a:ce:48:eb:70:cf:55:96:13:
7b:b0:5e:65:68:7f:ba:0c:b1:42:45:3b:3b:af:a9:4b:b5:b1:
69:e0:5d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgKoU2d4tJpjkZK8nZpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmVkNDVmY2VhOWM3MWJiZWY1NmE1MzI1YzI5N2NhZmFl
OTFlNmUwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
Eyg1Y2VkODlmMDExZGUyOWQwZTFiZTczYWJmYmQxZTg4ODlhZWJmYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm/1EkV+x3H1sBgLf3nCMDr89iSQ
1Z9UbdCfB/lZgp6rMyvEH85GLOu6zprU5eKPzf2PtEvRDHG3dBdom/Bo7Lliws08
O5CGryA2oY0xLJluKAhibfIh5vZVQ2i7Cz4a5xgvbH0haZW+AtXE1t4q1gnyUqUU
n+i0z8Z0C6DCXr+wcUlUnxn9Zrow6wwm30pLMMUa0o3P7IUPBAGkkjeCyv7g4IdV
6zgMaGy0QIsn3RxRpUS1Hi1Fzm3NDBpMzsQ6nZ6UyExOJ542KVm5v15LgSEOuAOz
wUfRTKBju0eUE7Ht+XqMzz42elsSABht8r311cgYTSRyeOIT2vQHDG9TRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFztifAR3inQ4b5zq/vR6Iia6/uLMB8GA1UdIwQY
MBaAFMMu1F/OqccbvvVqUyXCl8r66R5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMt
ODc3NDQ2ZTg4ZTQwLzEvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMtODc3NDQ2ZTg4ZTQw
LzEvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIczmYf68
b6JCNqOPsvDutOUljPDTchYjJrMPYlI+G7DObcYvQDuckOxkH4v55QjQuRAeu6Lw
3brLQmw+fc2nKJDxoAXQpCoNLcHx4S56LG7nE2uZWGO8WdPbK8OlfS4v4NilOJni
pYDp2AcEg73a1H7/6NBTmljfkviq8/2Gopu+nur8a6gY7Mx7Iw4jxsPy02EImC18
BKx7wcrSvq1OkhcEt1p44GyuDUNPqnwc5k+5i+sJ6b/f4VrtGkyt51q401DeBEm1
K03wF8cXVD46UACIbCz8r2z1x86VoSoPA1eAOs5I63DPVZYTe7BeZWh/ugyxQkU7
O6+pS7WxaeBdtA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client