Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: CIebmHHsx7Ld9EM3kREwNUoCh9t8NIVpXIe2aPv1HRs=
Subject key identifier: C8:D5:EA:87:0C:61:70:F3:E5:6D:C0:E8:CF:8E:9D:A9:01:4D:9D:C6
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0194BC3BDCB9D05D08FD9B8EE6FF78E9D49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 85
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: GrXC8pDuiqZLNLkJxov+WbhBbGZLFLjOrg0gvFLXmI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:b9:d0:5d:08:fd:9b:8e:e6:ff:78:e9:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=c8d5ea870c6170f3e56dc0e8cf8e9da9014d9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:10:32:84:53:09:7d:e1:ca:cb:da:cf:a5:
85:12:d1:2a:af:0a:ef:83:66:49:d8:6a:12:9e:1b:
d6:3c:62:df:13:20:2d:8e:81:4b:2b:4a:29:5d:6e:
23:b0:57:40:a3:d2:51:a1:16:a1:62:d9:fe:bf:fa:
44:81:8e:74:ae:96:db:be:fc:d4:e8:0d:06:3f:60:
8f:72:1d:fa:74:11:65:a5:9f:e6:15:da:67:45:7e:
6d:08:fb:db:36:94:34:71:ff:19:b9:9e:e5:74:1b:
aa:c9:94:be:e5:41:da:38:2c:cc:f2:92:1a:52:2c:
7a:be:0a:2c:7d:aa:fc:23:2f:a2:e7:0c:9a:8c:51:
4f:8b:aa:59:53:f4:e4:ae:39:1b:cd:32:0b:9a:32:
67:a1:55:38:3d:b6:83:b8:52:1f:55:c9:77:80:3f:
00:7f:b2:a3:39:66:c2:99:9c:9c:56:cf:de:cc:cc:
f0:49:d7:11:38:c0:67:58:a6:50:f0:12:1e:7a:d3:
8e:6e:76:7c:12:a7:9e:f3:af:f2:14:35:27:98:83:
06:fb:d5:3e:b6:04:ec:58:64:ac:ee:34:71:3c:29:
66:a0:34:a7:e0:76:6e:e4:86:4f:3a:3c:e5:30:a7:
f3:95:8e:70:18:98:e0:0c:8e:b5:ac:44:c9:b5:a4:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:EA:87:0C:61:70:F3:E5:6D:C0:E8:CF:8E:9D:A9:01:4D:9D:C6
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:47:b9:b4:e8:e0:68:8e:1e:b7:32:24:cd:33:df:ce:af:93:
cf:17:86:e4:9d:10:37:88:78:97:c4:fa:e0:6f:bf:91:cc:2d:
e4:54:a1:9b:19:4c:3b:a1:ec:ce:44:3f:32:27:12:df:db:88:
00:c9:f9:ad:ab:df:e4:d3:88:ec:26:1f:ef:10:4e:8f:82:73:
65:fb:92:2d:80:bb:3b:5b:b6:ac:8b:0f:c3:1d:f7:a8:f1:f7:
39:59:b7:42:a5:69:61:8c:41:f1:84:34:a0:18:e1:45:60:ac:
e3:96:9b:cd:61:00:93:a6:1f:29:87:69:9c:25:7e:d0:24:fa:
84:a7:3a:80:40:f4:35:c7:98:f9:26:53:39:fb:64:be:98:b5:
39:e5:67:89:d1:06:16:c7:1f:c6:e1:a7:d6:f3:a7:fa:de:9c:
f3:54:7f:8a:09:2f:d4:2f:f5:63:98:5c:70:3f:f8:62:b3:6e:
76:ed:9b:c3:a3:0f:aa:2d:dc:89:2d:5c:8e:1e:ec:aa:98:3a:
82:ea:af:04:ad:0e:66:dc:b6:ba:5e:d7:b5:94:dd:35:0d:54:
93:2b:f6:2f:66:a8:3c:4e:f2:da:b8:13:48:5e:20:68:0d:af:
08:a0:84:76:e7:13:84:d4:f9:88:e1:33:ca:d5:e6:66:d8:b5:
57:89:18:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9y50F0I/ZuO5v946dSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGVlNGNlOGQzY2VlZTIzZTAyNjZmY2FmNTQ0ODIwYWU0
MTA3ODgwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
EyhjOGQ1ZWE4NzBjNjE3MGYzZTU2ZGMwZThjZjhlOWRhOTAxNGQ5ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QcQMoRTCX3hysvaz6WFEtEqrwrv
g2ZJ2GoSnhvWPGLfEyAtjoFLK0opXW4jsFdAo9JRoRahYtn+v/pEgY50rpbbvvzU
6A0GP2CPch36dBFlpZ/mFdpnRX5tCPvbNpQ0cf8ZuZ7ldBuqyZS+5UHaOCzM8pIa
Uix6vgosfar8Iy+i5wyajFFPi6pZU/TkrjkbzTILmjJnoVU4PbaDuFIfVcl3gD8A
f7KjOWbCmZycVs/ezMzwSdcROMBnWKZQ8BIeetOObnZ8Eqee86/yFDUnmIMG+9U+
tgTsWGSs7jRxPClmoDSn4HZu5IZPOjzlMKfzlY5wGJjgDI61rETJtaSsSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjV6ocMYXDz5W3A6M+OnakBTZ3GMB8GA1UdIwQY
MBaAFMFO5M6NPO7iPgJm/K9USCCuQQeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQt
NDg0MzgyMDJkYmFiLzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQtNDg0MzgyMDJkYmFi
LzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEe5tOjg
aI4etzIkzTPfzq+TzxeG5J0QN4h4l8T64G+/kcwt5FShmxlMO6HszkQ/MicS39uI
AMn5ravf5NOI7CYf7xBOj4JzZfuSLYC7O1u2rIsPwx33qPH3OVm3QqVpYYxB8YQ0
oBjhRWCs45abzWEAk6YfKYdpnCV+0CT6hKc6gED0NceY+SZTOftkvpi1OeVnidEG
FscfxuGn1vOn+t6c81R/igkv1C/1Y5hccD/4YrNudu2bw6MPqi3ciS1cjh7sqpg6
guqvBK0OZty2ul7XtZTdNQ1Ukyv2L2aoPE7y2rgTSF4gaA2vCKCEducThNT5iOEz
ytXmZti1V4kYCw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:34 2025 by rpki-client