Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier: qLlcTk595Mn09I2CZt3h2SAf/QKuw+jSQ0JNw/+3wpA=
Subject key identifier: BA:CB:33:FA:85:F1:2A:BB:62:2A:85:D6:0A:8C:5F:74:47:81:A3:24
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0194BCAA285455E849E29FFEF8EBFCB37C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number: 1559
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: LB1GcsyU4zrivtmh4Y-5ahuJoPY.roa (hash: jhdMXHkRLxzA0l81lJjuyLRhF979kNoecc7T4ENc4GY=)
2: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: SPVGdmNwWuPdba2pdHEBXGssXynB4oVr6kg5c/a5w+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:54:55:e8:49:e2:9f:fe:f8:eb:fc:b3:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=bacb33fa85f12abb622a85d60a8c5f744781a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:a2:47:58:f2:10:d0:39:fa:7c:7e:6c:c8:
25:13:fe:6f:38:f6:29:3d:6d:e8:d4:b6:03:68:85:
62:d0:64:85:0f:07:57:c6:af:99:e5:9e:7b:ef:7c:
43:67:d6:2b:a7:ec:67:0a:67:f7:57:3c:51:fd:df:
03:2f:b1:15:fb:b3:40:f6:7c:6c:c9:5c:ed:47:ed:
01:fa:44:52:96:97:c2:0c:2a:cc:80:61:19:01:00:
92:b5:b4:3f:6e:0a:a1:64:22:b8:d2:87:66:f5:ae:
16:1d:e6:a8:92:fc:80:a2:fe:c1:a2:8e:50:81:59:
83:a8:94:5e:8e:2a:55:ce:43:21:51:5b:52:69:f6:
74:2c:b9:d6:fa:08:78:02:83:c6:92:79:82:ab:8f:
81:36:d8:66:ae:29:48:2b:35:57:ac:27:10:18:17:
1a:55:67:4a:81:d5:41:71:ba:a6:31:a6:4a:c6:47:
b3:11:30:bf:16:9e:22:fe:4c:06:c6:59:66:07:58:
22:22:50:7d:2d:d4:ac:fd:f0:c3:3d:06:02:a3:74:
c1:be:c8:59:ca:ac:fd:57:ea:b8:61:21:fb:74:16:
16:23:5e:91:89:a5:ca:67:d5:36:a3:23:b8:d8:c8:
ef:a4:24:8b:93:a1:87:5a:82:71:12:ff:19:86:42:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:33:FA:85:F1:2A:BB:62:2A:85:D6:0A:8C:5F:74:47:81:A3:24
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:bf:cc:02:77:cc:f3:a0:54:a8:17:1a:dd:83:13:97:63:
dd:49:86:b0:d6:f6:58:8b:7c:a4:55:de:d7:ed:02:4f:fe:3e:
0a:bf:b8:3e:26:b2:c8:a1:58:fc:96:69:67:0f:a6:1c:84:58:
fb:c9:ea:9a:b1:a9:e9:6f:a9:24:73:24:95:d6:11:68:b0:7e:
d8:1a:93:3c:c5:b8:db:53:42:11:86:50:86:c1:a5:c2:22:22:
53:ea:55:0f:1a:79:38:e4:5a:ed:66:3c:c5:12:69:f3:0c:14:
42:ae:84:b3:01:e2:cf:ab:8d:af:d2:82:26:a4:29:0e:61:19:
ff:c4:b7:98:dd:d9:38:42:01:b9:52:d5:7c:ba:9c:63:dc:52:
4c:f6:26:db:d6:e5:2c:fb:8e:d6:52:6e:e6:f7:06:e7:29:6d:
b4:f6:5e:7d:99:3a:5f:55:55:33:aa:1b:17:df:6a:86:3a:aa:
96:06:6b:4f:49:b5:a6:d2:b3:a2:ff:0e:69:2d:f2:77:5b:0b:
07:41:db:64:ab:85:91:df:64:93:f0:8a:32:46:0d:97:44:97:
2d:1f:b3:23:a7:67:57:84:19:32:61:cf:cf:8c:7a:81:a4:41:
3f:c7:39:4e:29:41:90:19:67:a8:25:d7:4f:e5:c6:fe:c2:b9:
92:51:b8:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qihUVehJ4p/++Ov8s3waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
EyhiYWNiMzNmYTg1ZjEyYWJiNjIyYTg1ZDYwYThjNWY3NDQ3ODFhMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UGiR1jyENA5+nx+bMglE/5vOPYp
PW3o1LYDaIVi0GSFDwdXxq+Z5Z5773xDZ9Yrp+xnCmf3VzxR/d8DL7EV+7NA9nxs
yVztR+0B+kRSlpfCDCrMgGEZAQCStbQ/bgqhZCK40odm9a4WHeaokvyAov7Boo5Q
gVmDqJRejipVzkMhUVtSafZ0LLnW+gh4AoPGknmCq4+BNthmrilIKzVXrCcQGBca
VWdKgdVBcbqmMaZKxkezETC/Fp4i/kwGxllmB1giIlB9LdSs/fDDPQYCo3TBvshZ
yqz9V+q4YSH7dBYWI16RiaXKZ9U2oyO42MjvpCSLk6GHWoJxEv8ZhkLQ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrLM/qF8Sq7YiqF1gqMX3RHgaMkMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBu/zAJ3
zPOgVKgXGt2DE5dj3UmGsNb2WIt8pFXe1+0CT/4+Cr+4PiayyKFY/JZpZw+mHIRY
+8nqmrGp6W+pJHMkldYRaLB+2BqTPMW421NCEYZQhsGlwiIiU+pVDxp5OORa7WY8
xRJp8wwUQq6EswHiz6uNr9KCJqQpDmEZ/8S3mN3ZOEIBuVLVfLqcY9xSTPYm29bl
LPuO1lJu5vcG5ylttPZefZk6X1VVM6obF99qhjqqlgZrT0m1ptKzov8OaS3yd1sL
B0HbZKuFkd9kk/CKMkYNl0SXLR+zI6dnV4QZMmHPz4x6gaRBP8c5TilBkBlnqCXX
T+XG/sK5klG4xw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:03 2025 by rpki-client