Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File: wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier: rTkMkXfKSYh7KqHM5rwA9EORVmMCX/HZBy2xppVJ4u4=
Subject key identifier: 44:B5:98:83:11:91:79:0F:82:1B:94:B6:D5:6B:7F:A4:F5:38:F2:9D
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial: 0194BC3C56715ED5ACCCE788E6CDFCF3200B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: xMKNqLWJEs6KM85LWuxnfWFWAHu/ZVY1GTcdSO+iwIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:71:5e:d5:ac:cc:e7:88:e6:cd:fc:f3:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=44b598831191790f821b94b6d56b7fa4f538f29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:af:10:9c:15:02:ff:6b:2e:57:5a:aa:b2:
41:4c:5d:7f:87:90:f6:89:e0:93:44:1a:52:85:9e:
80:5e:dc:5e:3e:21:ba:69:1c:e9:2f:08:c9:15:6a:
5d:81:fa:12:d3:57:55:e8:42:4b:be:0d:11:3b:ce:
7f:81:ea:5f:a7:de:d7:4f:51:2f:e1:8e:5b:e0:92:
83:51:2a:0a:ab:85:ce:5c:dc:4f:d3:7d:ca:46:3b:
fd:36:75:79:7e:52:f7:8e:ca:d8:32:81:00:92:aa:
bc:0f:24:ab:7c:7c:6e:c0:2a:a1:49:6b:f4:c0:4a:
0e:40:22:24:2d:9e:d3:0b:66:ce:ea:32:93:85:6b:
ef:30:63:8a:88:bc:d5:e4:53:ff:7f:dd:f6:9c:13:
9b:8d:c9:ae:1e:14:7a:fd:73:90:1a:c4:93:45:7d:
13:fa:ad:f5:98:af:96:5c:ab:6c:92:36:0b:28:00:
a1:81:89:0f:60:53:92:4e:d0:58:26:23:24:0a:bd:
9f:f3:24:fc:13:e7:4f:38:39:05:f6:a2:6e:0f:9b:
0d:e9:6e:fb:0a:26:53:38:f9:b9:99:c6:c4:ea:31:
e0:c6:0a:f1:82:fa:9f:fc:e3:91:4e:16:58:09:b5:
7b:a9:4e:ea:14:df:d6:1d:02:a7:ea:7d:56:54:5b:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:98:83:11:91:79:0F:82:1B:94:B6:D5:6B:7F:A4:F5:38:F2:9D
X509v3 Authority Key Identifier:
keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:99:da:e5:5a:58:21:c0:95:7c:2b:93:70:1a:cb:45:e2:
7c:6a:28:62:88:7f:f0:e9:92:08:9a:35:8a:12:9a:96:a1:c8:
f8:2a:d5:0a:e6:79:a3:80:c6:e9:83:75:2a:84:03:09:79:80:
a1:98:36:bc:d8:4e:1c:a0:df:d6:61:b7:eb:7b:ec:9d:95:7c:
88:42:2a:1a:6f:97:86:70:a5:10:66:ef:b9:e0:28:92:84:a9:
86:13:21:07:80:94:47:54:0d:f4:52:41:f1:5b:42:da:2f:ce:
e2:e0:d1:ce:72:ca:c8:7d:91:21:63:1e:35:d6:85:68:55:2c:
41:ff:9c:89:81:b3:31:dc:85:c2:fd:73:22:99:e5:43:74:83:
2f:68:ee:1a:87:7c:75:f2:8b:a0:fc:c7:2e:c2:2d:fc:d3:48:
e8:b5:c1:af:4f:72:99:26:8c:27:c2:91:99:fd:14:b3:85:32:
51:60:c9:9d:98:68:88:4f:e1:6a:50:70:82:0a:b3:dd:e2:84:
e2:2c:97:6f:4a:6e:cb:75:e4:17:70:f6:cc:51:a7:c5:6e:bc:
72:3b:26:90:bb:88:2b:33:68:89:0f:da:80:66:58:29:2e:0d:
3a:98:95:62:4a:27:74:42:98:c4:07:26:c6:74:fa:13:f7:99:
f5:45:d2:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFZxXtWszOeI5s388yALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMThlMzRlMDk0NzlkY2U4OWVmNjFkOThmNGMyYWJmODE4
OWNmMjQwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
Eyg0NGI1OTg4MzExOTE3OTBmODIxYjk0YjZkNTZiN2ZhNGY1MzhmMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaWvEJwVAv9rLldaqrJBTF1/h5D2
ieCTRBpShZ6AXtxePiG6aRzpLwjJFWpdgfoS01dV6EJLvg0RO85/gepfp97XT1Ev
4Y5b4JKDUSoKq4XOXNxP033KRjv9NnV5flL3jsrYMoEAkqq8DySrfHxuwCqhSWv0
wEoOQCIkLZ7TC2bO6jKThWvvMGOKiLzV5FP/f932nBObjcmuHhR6/XOQGsSTRX0T
+q31mK+WXKtskjYLKAChgYkPYFOSTtBYJiMkCr2f8yT8E+dPODkF9qJuD5sN6W77
CiZTOPm5mcbE6jHgxgrxgvqf/OORThZYCbV7qU7qFN/WHQKn6n1WVFuG0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES1mIMRkXkPghuUttVrf6T1OPKdMB8GA1UdIwQY
MBaAFMEY404JR53Oie9h2Y9MKr+Bic8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQt
ZTI5ODMzYzljMWM2LzEvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQtZTI5ODMzYzljMWM2
LzEvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNSZ2uVa
WCHAlXwrk3Aay0XifGooYoh/8OmSCJo1ihKalqHI+CrVCuZ5o4DG6YN1KoQDCXmA
oZg2vNhOHKDf1mG363vsnZV8iEIqGm+XhnClEGbvueAokoSphhMhB4CUR1QN9FJB
8VtC2i/O4uDRznLKyH2RIWMeNdaFaFUsQf+ciYGzMdyFwv1zIpnlQ3SDL2juGod8
dfKLoPzHLsIt/NNI6LXBr09ymSaMJ8KRmf0Us4UyUWDJnZhoiE/halBwggqz3eKE
4iyXb0puy3XkF3D2zFGnxW68cjsmkLuIKzNoiQ/agGZYKS4NOpiVYkondEKYxAcm
xnT6E/eZ9UXS7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client