Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: 0Hoc9QFYv3ZUFIvE4bt0G1ZLyECrDRnyvMJ9j8syikE=
Subject key identifier: 35:E2:BF:E2:D7:36:A9:8D:4D:53:12:F7:45:99:FC:C4:04:1D:1D:6A
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 0194BCA9C8186A52C032609CA177CDE1192D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: Y2i5zokebW/NdmrdIle+Z9UbUDb7wmjPvo4bRnNjL1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:18:6a:52:c0:32:60:9c:a1:77:cd:e1:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=35e2bfe2d736a98d4d5312f74599fcc4041d1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:50:21:dd:72:5e:71:f0:17:a4:f5:0e:c1:
e4:85:50:61:af:e0:45:0d:ba:bc:fa:f7:08:38:eb:
06:57:38:a3:57:fc:f9:88:86:a3:ac:cb:e4:c6:77:
14:66:3e:7d:6e:a0:74:e4:9c:7b:c7:5d:f3:f8:a0:
34:2b:75:e0:cc:52:c8:4c:f8:93:a1:60:de:b1:f7:
8b:41:4a:14:5c:42:fa:64:4f:28:9a:de:8b:73:e4:
48:ef:56:8a:da:1b:2e:05:47:3e:3a:7a:75:12:37:
f6:ec:14:fe:da:eb:e8:f8:c1:11:cf:2b:4a:c7:04:
da:32:6e:8f:ea:68:78:65:7c:a7:7f:8f:23:f1:b5:
d4:e1:f3:8a:6b:60:5f:aa:79:74:82:c9:4e:0d:f7:
28:03:3d:61:13:e3:cd:8c:5a:23:a5:35:ef:94:d7:
9c:77:ca:e5:76:8b:19:17:b7:9e:15:7d:29:fe:13:
4c:fb:84:d6:23:23:8d:7e:35:e1:52:54:4a:36:83:
db:8e:cc:36:e9:d1:ab:3e:70:9a:5e:45:8b:d7:e8:
37:9e:b5:d4:e6:81:72:b5:1d:d3:16:2b:f2:6b:4e:
07:44:99:5a:98:08:96:40:5b:6a:50:0f:d1:c1:f5:
74:58:82:b1:12:56:18:a9:96:f7:eb:99:4a:54:5b:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E2:BF:E2:D7:36:A9:8D:4D:53:12:F7:45:99:FC:C4:04:1D:1D:6A
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:aa:27:7d:e7:b8:2b:6d:07:72:c4:2b:1c:b8:75:cb:55:c4:
a1:2e:ea:88:c7:f5:d8:30:70:7c:04:9c:17:5b:dc:e5:31:38:
ea:a6:81:62:b2:33:5b:64:d7:86:49:8f:97:12:40:7f:68:4b:
c3:5d:a9:92:29:5f:42:f3:bc:51:3d:f8:93:4c:47:18:8b:5b:
17:64:bc:86:8e:ce:6b:cc:43:ec:e7:c9:40:f9:49:e8:1e:bc:
97:eb:ce:a5:37:45:42:94:6d:c1:63:81:de:6b:5e:94:06:e8:
1b:22:2e:96:07:13:92:81:a3:27:e9:92:6b:f4:a9:94:e0:53:
35:a8:b2:c0:97:b8:02:a0:0b:b7:3c:e2:d7:2e:40:53:46:18:
04:32:80:03:8c:86:b0:a7:36:65:46:40:33:d2:80:21:38:31:
b6:02:7a:44:ca:6a:06:61:db:64:a5:45:61:64:57:13:39:28:
aa:2e:4c:fc:b7:30:88:24:74:03:ea:cb:6d:a6:62:2f:6a:8a:
eb:07:bc:27:21:86:13:5c:2a:3c:61:37:8b:98:99:3d:6e:e9:
b9:a0:7a:4a:e8:2b:79:97:3c:b2:56:88:c9:e3:c8:60:ee:f6:
05:4f:a7:ff:e7:59:b6:8f:80:00:dc:9b:3b:17:57:ca:0f:a3:
6d:c7:2a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcgYalLAMmCcoXfN4RktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWI1YTJjNDllMWM2NDhhNzBjNzA4YWUxYmRlNDBiNjQ0
Yzc4MDIwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
EygzNWUyYmZlMmQ3MzZhOThkNGQ1MzEyZjc0NTk5ZmNjNDA0MWQxZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHhQId1yXnHwF6T1DsHkhVBhr+BF
Dbq8+vcIOOsGVzijV/z5iIajrMvkxncUZj59bqB05Jx7x13z+KA0K3XgzFLITPiT
oWDesfeLQUoUXEL6ZE8omt6Lc+RI71aK2hsuBUc+Onp1Ejf27BT+2uvo+MERzytK
xwTaMm6P6mh4ZXynf48j8bXU4fOKa2Bfqnl0gslODfcoAz1hE+PNjFojpTXvlNec
d8rldosZF7eeFX0p/hNM+4TWIyONfjXhUlRKNoPbjsw26dGrPnCaXkWL1+g3nrXU
5oFytR3TFivya04HRJlamAiWQFtqUA/RwfV0WIKxElYYqZb365lKVFuhpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXiv+LXNqmNTVMS90WZ/MQEHR1qMB8GA1UdIwQY
MBaAFMGbWixJ4cZIpwxwiuG95AtkTHgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQt
M2Q0NjFkYWRlNGE5LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQtM2Q0NjFkYWRlNGE5
LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqonfee4
K20HcsQrHLh1y1XEoS7qiMf12DBwfAScF1vc5TE46qaBYrIzW2TXhkmPlxJAf2hL
w12pkilfQvO8UT34k0xHGItbF2S8ho7Oa8xD7OfJQPlJ6B68l+vOpTdFQpRtwWOB
3mtelAboGyIulgcTkoGjJ+mSa/SplOBTNaiywJe4AqALtzzi1y5AU0YYBDKAA4yG
sKc2ZUZAM9KAITgxtgJ6RMpqBmHbZKVFYWRXEzkoqi5M/LcwiCR0A+rLbaZiL2qK
6we8JyGGE1wqPGE3i5iZPW7puaB6SugreZc8slaIyePIYO72BU+n/+dZto+AANyb
OxdXyg+jbccqUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:05 2025 by rpki-client