Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier: re6y4YCGXjZgvV5pYGMyXSeVCq5O6ikmBwTGtotJZrc=
Subject key identifier: 75:39:33:1A:7C:E6:51:DA:66:05:D7:7C:13:F2:7B:25:DB:DC:83:52
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 0194BCA9C3C4EF193B7C075EB52725634703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: 5C3prpv9jk/LH+a0YaT8OOcDftSJIwI5X4kdvNG00dE=)
2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:c4:ef:19:3b:7c:07:5e:b5:27:25:63:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=7539331a7ce651da6605d77c13f27b25dbdc8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:bd:28:09:22:a4:f0:af:6c:48:e3:35:46:
95:f9:13:1c:a2:1f:3c:c2:75:54:9f:6c:75:7b:d4:
93:7c:30:48:59:51:29:7b:5a:c6:44:c0:28:99:ac:
95:86:ee:73:b9:13:78:de:76:fd:60:d3:a8:9c:87:
2d:8e:2b:24:95:37:b6:b6:e9:74:43:f9:06:99:95:
f0:ad:18:af:99:9e:74:87:ae:e6:2e:e0:d8:fa:38:
40:3c:a4:d1:30:39:a3:a4:45:eb:fe:18:46:7a:d0:
64:33:f1:a3:0c:ad:be:6d:f2:ef:48:0c:41:a0:d7:
41:48:02:12:0c:2e:4e:d4:0e:82:f9:9e:41:26:78:
b0:f1:2e:5e:b8:e8:76:16:6d:2c:17:f9:80:c7:3c:
9d:29:ef:d5:7b:eb:28:82:67:5f:3e:11:80:78:77:
aa:ae:28:4b:3a:d0:fc:aa:b9:15:3a:36:c8:fa:1e:
22:68:06:7f:80:40:fc:46:f6:98:43:af:fc:38:c4:
b7:9c:a3:e3:2a:9c:1e:6a:0c:c1:dc:eb:5c:92:11:
1e:ac:57:23:58:66:4f:b9:24:b9:b9:84:07:0f:cd:
ec:20:22:e9:9f:dc:de:a2:5b:88:aa:92:ae:17:aa:
55:92:0a:d5:1f:79:7d:53:3a:d1:8b:bb:61:a8:eb:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:33:1A:7C:E6:51:DA:66:05:D7:7C:13:F2:7B:25:DB:DC:83:52
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:6f:c9:db:6b:dd:ba:eb:03:b7:9b:95:d8:44:0a:ff:01:
15:f3:1c:58:80:45:b9:c1:66:c3:78:06:2d:fd:fb:e9:fb:af:
ed:b4:03:d2:de:6a:10:a4:15:70:21:84:db:80:aa:b8:d2:8a:
4a:19:cf:4f:e7:d9:36:3f:15:fe:69:5e:40:96:d0:96:a3:30:
00:dd:76:f7:d5:d0:eb:ee:21:26:35:5e:94:64:fb:3d:be:7f:
30:4c:23:d7:64:c6:2d:cb:ba:48:ac:df:7e:7e:48:b8:c6:00:
ce:b7:21:77:6f:d3:08:62:f0:4d:0d:bc:b1:8f:da:7e:1c:16:
75:19:c6:ef:7d:da:ee:c1:1d:94:64:f8:22:ad:8f:61:95:07:
4a:3b:d2:c9:b1:31:c8:b2:ab:ed:10:55:82:69:da:f1:46:1d:
3f:1e:48:1e:28:63:e2:6b:65:3d:81:41:9a:a9:37:ed:40:76:
ba:b9:5e:95:31:49:92:3d:db:18:d3:45:eb:ef:b8:44:e9:19:
94:5b:23:fd:54:50:79:19:d0:4b:41:39:39:5d:2f:7c:25:72:
15:61:7b:b5:fc:4f:35:26:cc:76:52:37:20:43:72:bc:07:5c:
22:80:6d:c5:b5:1f:ad:2a:4b:f4:69:ed:40:43:b6:79:88:25:
17:9f:61:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcPE7xk7fAdetSclY0cDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzRiMTg0ODYxMTAwMDcxZmU0ZGIzZGRhODRhODJjYzFi
YmNjNjIwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
Eyg3NTM5MzMxYTdjZTY1MWRhNjYwNWQ3N2MxM2YyN2IyNWRiZGM4MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoq9KAkipPCvbEjjNUaV+RMcoh88
wnVUn2x1e9STfDBIWVEpe1rGRMAomayVhu5zuRN43nb9YNOonIctjisklTe2tul0
Q/kGmZXwrRivmZ50h67mLuDY+jhAPKTRMDmjpEXr/hhGetBkM/GjDK2+bfLvSAxB
oNdBSAISDC5O1A6C+Z5BJniw8S5euOh2Fm0sF/mAxzydKe/Ve+sogmdfPhGAeHeq
rihLOtD8qrkVOjbI+h4iaAZ/gED8RvaYQ6/8OMS3nKPjKpweagzB3OtckhEerFcj
WGZPuSS5uYQHD83sICLpn9zeoluIqpKuF6pVkgrVH3l9UzrRi7thqOuSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU5Mxp85lHaZgXXfBPyeyXb3INSMB8GA1UdIwQY
MBaAFFs0sYSGEQAHH+TbPdqEqCzBu8xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hOGRlNTYtZWRjYy00MGIxLWI4N2Yt
NGEwN2Y5N2U5OGE5LzEvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hOGRlNTYtZWRjYy00MGIxLWI4N2YtNGEwN2Y5N2U5OGE5
LzEvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3hvydtr
3brrA7ebldhECv8BFfMcWIBFucFmw3gGLf376fuv7bQD0t5qEKQVcCGE24CquNKK
ShnPT+fZNj8V/mleQJbQlqMwAN1299XQ6+4hJjVelGT7Pb5/MEwj12TGLcu6SKzf
fn5IuMYAzrchd2/TCGLwTQ28sY/afhwWdRnG733a7sEdlGT4Iq2PYZUHSjvSybEx
yLKr7RBVgmna8UYdPx5IHihj4mtlPYFBmqk37UB2urlelTFJkj3bGNNF6++4ROkZ
lFsj/VRQeRnQS0E5OV0vfCVyFWF7tfxPNSbMdlI3IENyvAdcIoBtxbUfrSpL9Gnt
QEO2eYglF59h2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:06 2025 by rpki-client