Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: qx1Zv18xBsdjlf0TlKt8ao9DNU5TZUuJ42Hx7rxvPUc=
Subject key identifier: 55:08:96:41:70:DB:8B:46:11:68:01:BA:2C:49:45:80:2D:D3:78:C2
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 0194BC3BC5C5BE0EE9810840A75512179A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: SWqLAeBomlQwp3ulikjkqm3EZltmXAfP0RvYt6koQH0=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:c5:be:0e:e9:81:08:40:a7:55:12:17:9a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=5508964170db8b46116801ba2c4945802dd378c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:58:c3:bc:98:ca:c5:cc:18:64:0c:30:47:
7d:c9:9c:ad:47:a1:72:58:58:b6:dc:9c:7f:70:e5:
b0:c8:c1:ce:39:34:c9:46:e9:cf:f6:32:6c:54:6e:
23:ea:95:66:83:15:d9:fa:06:a9:01:4e:74:d4:0e:
8f:87:0b:27:7b:b3:32:28:82:10:f1:f5:87:4e:80:
fa:f1:aa:40:d5:69:a1:51:21:79:b2:54:64:64:39:
c9:91:29:4d:6a:e3:6d:39:a8:8f:fb:26:99:56:ac:
b8:bb:fd:30:7c:28:28:71:67:37:c8:64:f0:36:33:
06:8a:e5:12:e6:c3:44:83:64:be:97:10:09:ff:fe:
fb:2c:24:00:0b:77:4c:cc:3a:27:cd:7c:57:ad:f0:
9f:5e:54:4f:15:85:dc:9d:e6:b8:47:87:b6:a7:16:
11:f4:35:32:4a:fe:7a:01:d7:2d:40:d7:96:58:68:
ff:c2:2e:67:c8:a0:46:16:fa:d3:c4:4b:e7:6b:e0:
b1:57:6b:7a:54:64:6b:10:39:b3:de:ba:75:20:f6:
ea:8c:36:87:b5:f8:ae:bf:8b:45:8d:78:88:f4:06:
eb:6c:a4:16:2a:5d:d0:f3:ba:d2:96:c3:1b:73:08:
2c:10:b3:6d:b5:c1:90:5a:71:13:e3:b4:26:d8:5a:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:96:41:70:DB:8B:46:11:68:01:BA:2C:49:45:80:2D:D3:78:C2
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:69:f5:9f:2e:81:09:2d:cc:3f:61:9a:62:0e:63:3b:7a:de:
a6:37:6e:f4:ee:e6:cd:72:19:16:d2:63:c6:28:8a:9e:21:df:
85:ab:08:12:31:73:5c:94:13:97:30:78:69:f8:5b:25:c8:8f:
67:39:6e:d5:81:36:38:81:46:ff:ad:f8:f2:98:24:35:4f:a0:
b3:98:76:ae:65:5f:9b:a3:87:e3:58:5e:e6:53:f7:5b:f6:c8:
e9:e9:99:4f:07:d6:68:66:ff:b3:33:74:e7:22:c0:4a:47:2b:
75:f8:41:78:48:bf:81:29:5b:d8:20:fd:79:7f:04:a1:f4:cc:
cf:c7:91:7f:02:19:3b:37:dc:ab:50:2a:08:2f:fb:9e:04:44:
55:d5:1d:de:fa:07:62:f9:2b:8b:43:0f:bf:06:2f:a3:10:30:
ff:13:a0:d3:6b:00:cc:3a:cb:f5:86:ea:25:82:ce:61:df:37:
17:c4:00:46:eb:53:bd:07:ca:fc:dd:d9:f0:f6:b6:f7:c6:18:
26:ee:c8:25:d9:66:bd:37:81:3c:81:4a:3a:dc:82:d5:76:41:
e0:7a:2f:18:75:4c:48:04:88:c3:0f:90:9e:cc:d3:1e:a6:1a:
5e:3e:d3:48:e2:2c:19:9c:c0:76:59:82:ef:57:05:e4:33:f4:
cf:64:c1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8XFvg7pgQhAp1USF5oqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1
YjIyMDQwHhcNMjUwMTMxMTIwMDIxWhcNMjUwMjAxMTIwMDIxWjAzMTEwLwYDVQQD
Eyg1NTA4OTY0MTcwZGI4YjQ2MTE2ODAxYmEyYzQ5NDU4MDJkZDM3OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFJYw7yYysXMGGQMMEd9yZytR6Fy
WFi23Jx/cOWwyMHOOTTJRunP9jJsVG4j6pVmgxXZ+gapAU501A6Phwsne7MyKIIQ
8fWHToD68apA1WmhUSF5slRkZDnJkSlNauNtOaiP+yaZVqy4u/0wfCgocWc3yGTw
NjMGiuUS5sNEg2S+lxAJ//77LCQAC3dMzDonzXxXrfCfXlRPFYXcnea4R4e2pxYR
9DUySv56AdctQNeWWGj/wi5nyKBGFvrTxEvna+CxV2t6VGRrEDmz3rp1IPbqjDaH
tfiuv4tFjXiI9AbrbKQWKl3Q87rSlsMbcwgsELNttcGQWnET47Qm2FrGtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUIlkFw24tGEWgBuixJRYAt03jCMB8GA1UdIwQY
MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt
YjZiNjcwYjY4MDlhLzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh
LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2n1ny6B
CS3MP2GaYg5jO3repjdu9O7mzXIZFtJjxiiKniHfhasIEjFzXJQTlzB4afhbJciP
Zzlu1YE2OIFG/6348pgkNU+gs5h2rmVfm6OH41he5lP3W/bI6emZTwfWaGb/szN0
5yLASkcrdfhBeEi/gSlb2CD9eX8EofTMz8eRfwIZOzfcq1AqCC/7ngREVdUd3voH
Yvkri0MPvwYvoxAw/xOg02sAzDrL9YbqJYLOYd83F8QARutTvQfK/N3Z8Pa298YY
Ju7IJdlmvTeBPIFKOtyC1XZB4HovGHVMSASIww+QnszTHqYaXj7TSOIsGZzAdlmC
71cF5DP0z2TB2g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:01 2025 by rpki-client