Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
File: wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft (raw, json)
Hash identifier: MTChFFUhvwJ/a4tQql+CMiSQUd2ds/kqBKz0k3yyemM=
Subject key identifier: 67:BA:06:79:0E:AE:A5:9A:ED:AB:60:CA:6F:E0:FF:7A:88:83:C0:F8
Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
Certificate issuer: /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Certificate serial: 0194BCE0D798C64C5E620C6C1FEC5CD32352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: f3Dh_2Y-zNZkcN90_TpfLSQTddk.roa (hash: vypiT7TdTiicDqreOdfVGNkJ1vOMr5vmxtAo64EoIdw=)
2: wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl (hash: nXKSeTpK4xXzf8aJ9uikQ2lrS5cGofeBtyRP2Ushask=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:98:c6:4c:5e:62:0c:6c:1f:ec:5c:d3:23:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=67ba06790eaea59aedab60ca6fe0ff7a8883c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:9a:96:e2:16:48:55:4b:4b:46:2d:47:ab:
04:43:9f:7f:cc:f6:fc:25:7a:13:ad:b8:83:f5:91:
23:a4:e1:55:3e:b3:82:60:ed:7b:0c:57:93:76:02:
de:28:52:ee:6a:f3:bb:29:93:30:2f:00:86:67:3c:
79:cc:03:2f:2d:3e:aa:44:27:bb:3e:62:67:d6:33:
02:41:8c:43:29:2b:45:cb:67:57:95:ad:04:da:f8:
c1:75:e2:bf:d1:40:18:69:61:43:b4:3f:ec:a2:b2:
88:84:d0:2a:8a:15:86:67:14:73:11:83:57:d4:c4:
01:d9:38:7f:65:c5:d3:37:33:03:26:9c:d7:f9:76:
86:ac:33:c0:c0:59:84:03:33:2f:e5:ed:c5:62:22:
ca:61:33:0b:cd:24:4b:e3:fa:db:5a:5e:b0:0a:26:
f5:c4:df:e9:fb:1b:05:b1:ee:af:21:ee:e7:cc:8c:
14:0a:de:70:b0:81:a3:c8:95:50:76:64:5b:d2:50:
52:dd:b4:10:f5:73:67:db:fd:89:af:a9:2e:24:43:
c5:d9:97:00:d8:92:53:4f:e9:cf:70:73:20:ac:79:
01:52:69:c0:49:26:0c:00:8f:e8:36:48:82:4b:29:
2a:97:e2:bf:40:61:fc:15:ae:dc:56:de:6d:09:01:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:06:79:0E:AE:A5:9A:ED:AB:60:CA:6F:E0:FF:7A:88:83:C0:F8
X509v3 Authority Key Identifier:
keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:ae:5b:96:b8:00:61:f0:14:06:36:45:0b:fd:e9:31:44:
3a:bb:66:2f:f6:44:8d:6b:46:9d:bc:fe:c1:f5:bb:e9:8f:1c:
92:cb:5d:fd:30:dd:bb:a5:4f:85:40:0b:1c:ce:db:58:5a:0b:
13:f7:e1:48:be:bf:c0:aa:7b:f4:47:8a:fc:27:a8:56:91:7b:
df:7c:a8:4d:b8:28:34:d0:59:7a:ff:df:31:f1:b7:7e:6e:52:
a4:0e:84:2b:1a:04:ad:04:b7:05:44:b5:75:33:91:6a:bd:19:
cf:92:14:d4:2f:bc:30:b5:5d:71:c1:21:d2:06:c0:4e:67:fa:
4c:fa:69:e5:1d:81:32:ad:4a:f7:c1:95:2f:f0:98:86:55:81:
9c:de:26:e6:64:60:d5:8b:be:84:74:fb:43:91:58:03:f5:58:
d7:e6:0e:9e:c8:c8:15:e6:fb:37:26:88:dc:60:3f:51:60:29:
e9:cc:a8:57:20:1b:3f:c4:bd:7f:2c:07:ba:f6:9d:5b:fe:64:
33:96:76:d3:b6:7d:d8:43:ed:e3:25:99:7b:7f:7a:3d:ab:37:
6b:24:5f:9b:40:79:54:8b:9e:21:93:13:1d:71:b1:8e:4f:7e:
64:18:e6:bf:95:80:35:c6:c6:5c:fc:64:5a:84:88:d0:05:c1:
c1:0c:06:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NeYxkxeYgxsH+xc0yNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOTg5MTRjYjBhOTQ1NDQwZjg0ZGVhZjNmM2Q5N2ZjNzdm
ZDI2Y2UwHhcNMjUwMTMxMTUwMDM5WhcNMjUwMjAxMTUwMDM5WjAzMTEwLwYDVQQD
Eyg2N2JhMDY3OTBlYWVhNTlhZWRhYjYwY2E2ZmUwZmY3YTg4ODNjMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqySaluIWSFVLS0YtR6sEQ59/zPb8
JXoTrbiD9ZEjpOFVPrOCYO17DFeTdgLeKFLuavO7KZMwLwCGZzx5zAMvLT6qRCe7
PmJn1jMCQYxDKStFy2dXla0E2vjBdeK/0UAYaWFDtD/sorKIhNAqihWGZxRzEYNX
1MQB2Th/ZcXTNzMDJpzX+XaGrDPAwFmEAzMv5e3FYiLKYTMLzSRL4/rbWl6wCib1
xN/p+xsFse6vIe7nzIwUCt5wsIGjyJVQdmRb0lBS3bQQ9XNn2/2Jr6kuJEPF2ZcA
2JJTT+nPcHMgrHkBUmnASSYMAI/oNkiCSykql+K/QGH8Fa7cVt5tCQFr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe6BnkOrqWa7atgym/g/3qIg8D4MB8GA1UdIwQY
MBaAFMCYkUywqUVED4Terz89l/x3/SbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ppUlRMQ3BSVVFQaE42dlB6MlhfSGY5SnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZjA4YTUtNDMyZi00OGZjLWJkOGIt
ZmI3MWJkNDU0NWIwLzEvd0ppUlRMQ3BSVVFQaE42dlB6MlhfSGY5SnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80ZjA4YTUtNDMyZi00OGZjLWJkOGItZmI3MWJkNDU0NWIw
LzEvd0ppUlRMQ3BSVVFQaE42dlB6MlhfSGY5SnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOWuW5a4
AGHwFAY2RQv96TFEOrtmL/ZEjWtGnbz+wfW76Y8ckstd/TDdu6VPhUALHM7bWFoL
E/fhSL6/wKp79EeK/CeoVpF733yoTbgoNNBZev/fMfG3fm5SpA6EKxoErQS3BUS1
dTORar0Zz5IU1C+8MLVdccEh0gbATmf6TPpp5R2BMq1K98GVL/CYhlWBnN4m5mRg
1Yu+hHT7Q5FYA/VY1+YOnsjIFeb7NyaI3GA/UWAp6cyoVyAbP8S9fywHuvadW/5k
M5Z207Z92EPt4yWZe396Pas3ayRfm0B5VIueIZMTHXGxjk9+ZBjmv5WANcbGXPxk
WoSI0AXBwQwGEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client