Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File: wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier: 3+ru9zeVauye7JcIpbboIcSf+dHAPXuywg+Ao/zI55I=
Subject key identifier: 74:01:31:6F:30:D6:A0:F9:D6:FA:5C:69:CC:3D:20:80:DB:7C:E9:F6
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 0194BD1795868030BBE4E31A8791C10CA3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number: 123E
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 20U7SL-48kkH7iK0DO4f8T7R21E.roa (hash: GmOKvt6kHI1bE0YH6oqXpTeejjgDh3Wthg7QwYWtufU=)
2: OzaQ_7kTZTHwoTTX2NN8mltJI-o.roa (hash: 6dDv5MDRbhiqHG8v8VT7PwYWFlQ7ZjLoFXsl3qy3Gc8=)
3: cIRs34GrM17DP76r2K4VKlnq1i8.roa (hash: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=)
4: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: cjkKnW+FvZqBrSKX6qx8+XLwlTGtsm/cJZfx4k5V6cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:86:80:30:bb:e4:e3:1a:87:91:c1:0c:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=7401316f30d6a0f9d6fa5c69cc3d2080db7ce9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:4b:99:81:b9:d7:ec:e6:a8:20:b8:5c:95:
7d:25:32:ea:9c:24:86:2e:5b:e0:a7:4e:37:ef:6c:
fa:f7:f1:df:4c:c8:51:fd:b5:ae:c1:9c:b1:83:c9:
a4:1a:65:91:0c:34:50:76:b9:32:b8:44:8d:71:ba:
31:4e:af:e6:a1:1e:4d:ec:e4:ef:ad:fa:a5:f6:49:
86:63:97:9a:db:a5:19:88:11:01:6f:e5:03:5a:4b:
21:41:7f:ca:a3:bc:5b:a9:22:db:59:59:88:35:e6:
bc:af:a3:8e:cb:e9:90:00:7e:38:9a:c8:e8:3b:35:
4e:bc:d0:ce:38:99:a3:67:84:a3:20:96:a0:8a:8d:
0d:af:2b:f6:16:b1:86:72:80:83:7f:00:9e:aa:40:
1d:b4:a8:7c:23:3f:9f:ac:70:37:c3:f5:4c:20:51:
b7:26:b6:bc:5d:33:a9:4e:3f:f1:e1:55:c1:93:aa:
75:bf:7e:95:85:91:8a:e4:61:bf:51:b3:b1:16:c9:
5c:47:1f:2b:03:0d:e5:44:3d:58:98:d5:c8:28:13:
5c:78:bf:9e:9a:a9:0e:ec:5e:86:4c:7d:50:16:fb:
1d:6d:a8:24:de:de:08:48:9b:f1:84:90:da:c6:de:
8e:84:75:f4:41:86:76:cd:e3:2b:07:8f:62:7d:09:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:31:6F:30:D6:A0:F9:D6:FA:5C:69:CC:3D:20:80:DB:7C:E9:F6
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:40:aa:2d:6a:da:21:46:05:18:65:71:e4:f2:d5:c3:ae:
57:01:55:76:ae:6a:cf:53:0c:d2:5f:7e:1b:35:b9:be:c1:a8:
b2:7e:de:53:6d:ff:e0:86:f2:c8:4e:94:95:4b:57:db:d3:6c:
45:30:22:10:8e:20:d3:84:42:33:59:a8:7c:6d:34:7f:af:6b:
8f:a2:b4:08:d0:81:f7:f4:23:d5:f1:e6:ed:5a:5c:b9:a2:b8:
f5:d9:c3:b9:b6:7a:b6:ad:67:2f:fc:98:88:b9:4d:dc:2d:db:
df:4d:fb:58:fb:1e:b0:3e:56:ca:39:6f:57:5d:39:b8:fb:c3:
ba:b9:10:61:4a:62:9e:7d:49:a6:79:77:07:8f:97:4b:4c:ef:
1d:3a:72:ad:f7:7a:89:32:ad:0f:cb:8b:13:2d:ac:18:6d:56:
5a:24:0b:fe:e3:64:ae:64:99:80:a9:43:55:db:5a:8e:e5:ad:
e8:11:5c:2b:b7:44:cd:c6:31:dc:67:59:6a:4a:98:89:6a:dc:
3e:5f:d9:53:4b:d9:a3:a0:40:c2:16:4b:74:4b:ee:ce:62:57:
6a:2d:fc:42:00:d0:95:ae:e6:4e:c1:03:5c:61:96:55:68:b1:
a6:5d:4f:14:b7:f9:9b:3e:10:89:b9:5d:a7:2e:44:89:f6:6b:
12:d6:a9:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5WGgDC75OMah5HBDKPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNGQ1YmQzY2VlYWFiMDc4NmNlMTUxYTMxNzhkYWRjMTA3
YmYyODAwHhcNMjUwMTMxMTYwMDI2WhcNMjUwMjAxMTYwMDI2WjAzMTEwLwYDVQQD
Eyg3NDAxMzE2ZjMwZDZhMGY5ZDZmYTVjNjljYzNkMjA4MGRiN2NlOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjJLmYG51+zmqCC4XJV9JTLqnCSG
Llvgp04372z69/HfTMhR/bWuwZyxg8mkGmWRDDRQdrkyuESNcboxTq/moR5N7OTv
rfql9kmGY5ea26UZiBEBb+UDWkshQX/Ko7xbqSLbWVmINea8r6OOy+mQAH44msjo
OzVOvNDOOJmjZ4SjIJagio0Nryv2FrGGcoCDfwCeqkAdtKh8Iz+frHA3w/VMIFG3
Jra8XTOpTj/x4VXBk6p1v36VhZGK5GG/UbOxFslcRx8rAw3lRD1YmNXIKBNceL+e
mqkO7F6GTH1QFvsdbagk3t4ISJvxhJDaxt6OhHX0QYZ2zeMrB49ifQmQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQBMW8w1qD51vpcacw9IIDbfOn2MB8GA1UdIwQY
MBaAFMJNW9PO6qsHhs4VGjF42twQe/KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEt
NDFkODIzMjlmMjZkLzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEtNDFkODIzMjlmMjZk
LzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlktAqi1q
2iFGBRhlceTy1cOuVwFVdq5qz1MM0l9+GzW5vsGosn7eU23/4IbyyE6UlUtX29Ns
RTAiEI4g04RCM1mofG00f69rj6K0CNCB9/Qj1fHm7VpcuaK49dnDubZ6tq1nL/yY
iLlN3C3b3037WPsesD5WyjlvV105uPvDurkQYUpinn1Jpnl3B4+XS0zvHTpyrfd6
iTKtD8uLEy2sGG1WWiQL/uNkrmSZgKlDVdtajuWt6BFcK7dEzcYx3GdZakqYiWrc
Pl/ZU0vZo6BAwhZLdEvuzmJXai38QgDQla7mTsEDXGGWVWixpl1PFLf5mz4Qibld
py5EifZrEtapoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:05 2025 by rpki-client