Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: Mg5bErbZBy2yBitlNEBQrQ4VSIyCvA2K31tPEXXLq8U=
Subject key identifier: C0:D4:75:A3:35:6A:DC:18:01:C0:0C:A5:70:69:63:21:DB:95:7C:29
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 0194BC3C8D11B8B070F1DFD9CCFEB63D8751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: P5ThOK6CQShk8+6MMbb0Q03K+OAjp8ZfVHMJ2+lAUyU=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:11:b8:b0:70:f1:df:d9:cc:fe:b6:3d:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=c0d475a3356adc1801c00ca570696321db957c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:02:26:ba:6b:ea:a2:cf:2d:1f:3d:e1:76:
77:55:a3:1c:8e:85:74:1c:7d:f7:ed:31:8a:db:5a:
18:e8:55:82:4d:75:01:99:e5:39:62:51:21:35:6b:
24:7f:4d:8c:be:b3:e9:6e:c1:61:1c:52:52:d6:11:
ba:1c:03:95:04:03:4b:8e:b3:59:c4:0a:84:f6:13:
47:d6:40:1c:bf:9a:00:c9:e8:68:52:fd:99:cb:85:
d5:2d:d6:33:d7:b5:99:47:fd:71:e8:f1:d0:08:c2:
9f:95:6b:68:34:2d:36:0e:5e:b0:03:4b:21:99:f4:
4a:d7:03:64:da:5b:73:f8:3d:8d:73:3a:0d:96:ec:
fa:f4:c7:8d:b4:aa:f3:90:31:ba:91:0d:47:40:1d:
2c:06:b4:a5:42:e9:47:30:82:de:73:14:40:43:f3:
b8:25:63:61:9d:82:10:47:72:f3:cc:61:92:b9:d2:
e4:16:fb:34:b6:e2:e5:68:da:62:35:ef:97:df:4a:
ed:8b:77:20:02:f7:c1:fd:df:27:6b:0b:d3:aa:6b:
26:d6:52:f5:df:80:f7:a6:ad:e3:94:23:e9:ee:29:
28:8b:95:77:72:e2:e7:3b:c6:6e:25:0c:51:f1:28:
01:7f:53:75:0e:aa:83:e7:3b:a0:60:8f:c5:88:c6:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:75:A3:35:6A:DC:18:01:C0:0C:A5:70:69:63:21:DB:95:7C:29
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:46:c1:ac:14:31:4e:0c:21:93:48:a6:9c:e5:ce:1d:9f:41:
bc:3d:75:2e:0b:95:9b:1f:c8:ae:a7:3a:36:29:07:81:d9:1f:
7e:a2:20:d4:4f:67:36:ff:c1:fc:4b:09:fb:c3:4c:38:64:1a:
d0:ca:82:e4:98:e6:fd:4a:e5:77:8b:a8:be:99:6a:f6:53:4c:
c3:9f:a9:d7:7c:c4:c0:a8:32:26:e0:b3:6d:1f:8d:71:3c:98:
3a:46:ea:6b:ce:a6:2b:96:d3:05:d3:2f:20:d3:33:df:93:2d:
eb:56:37:42:19:18:1f:ba:1d:87:c4:d5:52:83:c1:fa:b8:e4:
65:3f:f8:e0:8e:e1:5a:be:55:c1:e1:d6:3b:95:43:be:08:c2:
ee:b9:7d:ba:fe:70:3e:79:37:94:75:48:11:c8:31:0c:c3:a1:
82:8c:65:73:c7:ae:44:1f:6d:61:ff:33:70:b7:63:db:2c:22:
eb:df:6f:39:97:5f:91:a1:92:54:bc:83:28:a7:67:b6:06:36:
75:3d:e3:73:26:c1:af:89:fd:57:41:fd:c9:9e:56:67:c8:87:
84:23:f0:eb:de:91:fa:20:4f:8f:93:4a:78:e4:79:45:48:6c:
9c:86:3e:cf:0c:51:02:bf:af:67:3b:6d:53:bd:4a:b2:ca:53:
48:82:7d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PI0RuLBw8d/ZzP62PYdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw
NWE0ODEwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EyhjMGQ0NzVhMzM1NmFkYzE4MDFjMDBjYTU3MDY5NjMyMWRiOTU3YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwCJrpr6qLPLR894XZ3VaMcjoV0
HH337TGK21oY6FWCTXUBmeU5YlEhNWskf02MvrPpbsFhHFJS1hG6HAOVBANLjrNZ
xAqE9hNH1kAcv5oAyehoUv2Zy4XVLdYz17WZR/1x6PHQCMKflWtoNC02Dl6wA0sh
mfRK1wNk2ltz+D2NczoNluz69MeNtKrzkDG6kQ1HQB0sBrSlQulHMILecxRAQ/O4
JWNhnYIQR3LzzGGSudLkFvs0tuLlaNpiNe+X30rti3cgAvfB/d8nawvTqmsm1lL1
34D3pq3jlCPp7ikoi5V3cuLnO8ZuJQxR8SgBf1N1DqqD5zugYI/FiMb73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDUdaM1atwYAcAMpXBpYyHblXwpMB8GA1UdIwQY
MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt
OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4
LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0bBrBQx
Tgwhk0imnOXOHZ9BvD11LguVmx/Irqc6NikHgdkffqIg1E9nNv/B/EsJ+8NMOGQa
0MqC5Jjm/Urld4uovplq9lNMw5+p13zEwKgyJuCzbR+NcTyYOkbqa86mK5bTBdMv
INMz35Mt61Y3QhkYH7odh8TVUoPB+rjkZT/44I7hWr5VweHWO5VDvgjC7rl9uv5w
Pnk3lHVIEcgxDMOhgoxlc8euRB9tYf8zcLdj2ywi699vOZdfkaGSVLyDKKdntgY2
dT3jcybBr4n9V0H9yZ5WZ8iHhCPw696R+iBPj5NKeOR5RUhsnIY+zwxRAr+vZztt
U71KsspTSIJ95g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:42 2025 by rpki-client