Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File: wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier: +/6Etts+7rJQ+3oxE9eF5W8e/fg9axFacQKV/FiYyJk=
Subject key identifier: D9:7B:13:18:DE:A4:23:B9:55:42:F1:AF:2F:4A:6C:3A:EE:6B:C7:AC
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 0194BD8522D3A7C139BA8F367AC6BB81B39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: 0UXgCy0TQK3F5yOgcx72goP5jbgn0JM31GGcOqQ/fXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:22:d3:a7:c1:39:ba:8f:36:7a:c6:bb:81:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=d97b1318dea423b95542f1af2f4a6c3aee6bc7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:fb:62:ce:dc:57:c4:1e:26:04:cf:e1:be:
7c:98:81:95:22:bf:c5:cd:d0:60:8d:38:cb:5b:5e:
9a:25:b8:c6:8a:78:16:07:6b:44:b1:ac:d0:24:9a:
35:ee:02:0d:ea:9a:8b:63:34:25:96:a5:43:0c:8b:
ac:fe:c1:e0:45:62:53:eb:6b:11:a2:1a:8e:8b:02:
8e:04:c2:c9:69:64:a1:2f:aa:d1:5f:09:f4:38:f8:
12:5d:cd:fd:30:4f:87:29:a0:ae:aa:bb:a0:b9:0b:
a7:c9:c0:53:ed:08:59:da:b8:9e:6b:23:f0:87:40:
e7:0b:99:e6:14:dc:fb:b3:fe:a8:da:e6:5b:b9:ea:
f9:31:28:81:30:98:c0:06:a7:87:b5:7c:fe:b1:33:
cd:b0:20:24:f9:44:b5:10:fa:1c:8c:e8:15:22:8d:
9c:c8:5c:69:3b:af:14:f4:3c:9d:2d:af:69:5e:2c:
4e:f6:4b:cb:d4:a9:bf:c4:07:b6:73:9a:ba:62:96:
70:31:ee:c9:e4:17:22:39:b7:6e:d1:d0:f5:54:51:
19:e8:d0:6a:c0:ee:8d:2e:da:c7:c9:48:0d:62:cc:
79:e0:e9:3c:e3:ea:3c:ad:4b:76:c9:bc:6d:78:b8:
62:b2:3e:ae:b9:37:7e:55:64:94:35:53:20:5c:c0:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:13:18:DE:A4:23:B9:55:42:F1:AF:2F:4A:6C:3A:EE:6B:C7:AC
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:dd:38:13:48:33:64:d7:2b:c9:f2:12:da:dc:7b:c6:8d:
ec:54:e9:6e:48:98:52:6e:dd:7f:95:fa:c5:a6:fe:3e:b5:80:
a9:55:92:fe:d5:0f:ea:03:b9:58:03:ba:49:9a:35:12:f2:bd:
6e:5b:6d:4e:9b:31:3a:34:c8:bf:c4:47:9f:3f:25:32:87:79:
a1:4d:d2:aa:da:37:69:33:75:e5:38:9a:13:d7:56:99:87:9f:
34:ec:90:a9:a5:aa:ae:5a:47:0f:96:b2:d1:34:72:a0:54:a5:
68:aa:d1:ac:65:a4:10:9e:f0:75:8b:96:ab:eb:5f:c9:fc:fe:
0d:a2:ab:57:08:bb:ba:dc:b9:df:df:09:e6:2c:50:f6:42:34:
64:ea:5a:7d:9d:c8:02:bb:fe:3f:e3:92:29:1c:4c:6a:10:98:
b1:5c:dc:41:1c:88:24:30:a5:3f:5f:1d:4e:48:22:1f:ae:d8:
fc:03:90:e6:ea:58:b7:0f:4a:ff:e5:ca:28:67:04:61:8e:1a:
27:d1:87:3d:7e:f5:f5:67:f1:c1:cc:69:40:5e:ed:76:93:8e:
bb:6c:8d:bb:c1:dd:7f:07:89:31:b8:9d:2f:6c:8d:de:15:67:
2f:a8:a0:52:d1:bf:14:d9:07:92:9e:94:cf:2d:f6:6e:70:66:
55:eb:f5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSLTp8E5uo82esa7gbOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5
YjYwYmUwHhcNMjUwMTMxMTgwMDA2WhcNMjUwMjAxMTgwMDA2WjAzMTEwLwYDVQQD
EyhkOTdiMTMxOGRlYTQyM2I5NTU0MmYxYWYyZjRhNmMzYWVlNmJjN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOr7Ys7cV8QeJgTP4b58mIGVIr/F
zdBgjTjLW16aJbjGingWB2tEsazQJJo17gIN6pqLYzQllqVDDIus/sHgRWJT62sR
ohqOiwKOBMLJaWShL6rRXwn0OPgSXc39ME+HKaCuqruguQunycBT7QhZ2rieayPw
h0DnC5nmFNz7s/6o2uZbuer5MSiBMJjABqeHtXz+sTPNsCAk+US1EPocjOgVIo2c
yFxpO68U9DydLa9pXixO9kvL1Km/xAe2c5q6YpZwMe7J5BciObdu0dD1VFEZ6NBq
wO6NLtrHyUgNYsx54Ok84+o8rUt2ybxteLhisj6uuTd+VWSUNVMgXMDQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl7ExjepCO5VULxry9KbDrua8esMB8GA1UdIwQY
MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt
ZmZkNjQ2ZDA1ZjY3LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3
LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5DdOBNI
M2TXK8nyEtrce8aN7FTpbkiYUm7df5X6xab+PrWAqVWS/tUP6gO5WAO6SZo1EvK9
blttTpsxOjTIv8RHnz8lMod5oU3Sqto3aTN15TiaE9dWmYefNOyQqaWqrlpHD5ay
0TRyoFSlaKrRrGWkEJ7wdYuWq+tfyfz+DaKrVwi7uty5398J5ixQ9kI0ZOpafZ3I
Arv+P+OSKRxMahCYsVzcQRyIJDClP18dTkgiH67Y/AOQ5upYtw9K/+XKKGcEYY4a
J9GHPX719WfxwcxpQF7tdpOOu2yNu8HdfweJMbidL2yN3hVnL6igUtG/FNkHkp6U
zy32bnBmVev1nw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:10:46 2025 by rpki-client