Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: +Prjggtly96NonGBxq6ecuWZxD79oTsFsdhw2gyyw+k=
Subject key identifier: 5D:A6:DD:5F:27:68:D3:40:5A:08:F3:5F:72:40:0F:1B:ED:E0:6F:53
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 0194BD852F8B21D0C03CF5502565F183A6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0AD2
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: vwvASPXQm3p3673DbluZJnQTNv5V+ziI3J5V13LNBoQ=)
2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:8b:21:d0:c0:3c:f5:50:25:65:f1:83:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=5da6dd5f2768d3405a08f35f72400f1bede06f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:c7:52:9a:3e:de:97:65:f6:bd:b7:2a:25:
c1:80:fe:96:62:d0:e5:ab:d9:41:28:78:3d:40:a0:
03:ba:44:01:17:45:a0:5c:3a:8e:52:40:e9:ef:20:
3d:f6:fb:ad:04:26:67:a9:7e:07:dd:8f:24:27:36:
33:13:6f:6b:b9:8d:3e:6a:f5:62:3a:03:9d:9c:ca:
f0:49:02:d6:26:3e:72:df:22:f6:68:98:65:17:0c:
17:f6:01:52:ca:37:16:23:eb:e8:70:44:85:57:17:
26:d5:b2:f4:ae:3b:1b:07:b8:37:fa:b4:03:02:5c:
d0:e0:44:9e:35:88:2b:23:c3:94:d7:cf:df:9a:45:
df:d7:28:df:14:21:8f:29:7e:16:26:fb:9c:06:65:
4a:7f:f1:b6:c3:14:60:26:ec:1f:2c:6f:36:11:96:
c1:c4:60:a8:7f:33:b6:2c:f9:ab:ea:20:fc:ae:7a:
ee:3b:42:20:16:a3:ef:c4:e5:0b:be:4c:c8:fa:81:
c0:e5:5e:ff:43:27:84:49:af:39:d2:75:fa:88:1c:
a2:bc:0a:6c:2c:f2:f8:c6:e4:c3:6c:84:55:99:37:
40:4b:52:2a:08:b3:e4:b4:a3:c4:ce:e2:de:98:f9:
e2:4c:70:d8:c2:66:cc:01:34:73:c8:5e:36:a0:37:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:DD:5F:27:68:D3:40:5A:08:F3:5F:72:40:0F:1B:ED:E0:6F:53
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:4a:bc:56:db:42:9d:80:1b:02:64:a7:da:59:02:a7:70:
2b:b0:3d:ad:ab:7a:76:48:0d:f5:a1:a4:4f:40:c4:64:6f:6b:
26:7f:fc:f6:37:6c:6b:2a:87:22:11:7d:43:98:6f:e5:5e:f8:
bf:03:09:72:b3:41:11:ea:b0:b1:79:df:91:dc:06:95:0e:97:
0b:ea:5c:7f:c7:64:ea:1c:25:1c:42:a0:b3:85:28:0b:ed:df:
14:64:7f:e0:66:f3:51:16:dd:d3:5e:9b:0a:58:f4:53:6e:16:
52:1b:f8:8b:ab:6f:0e:39:96:3a:8b:51:08:2d:40:ca:8c:55:
24:70:7f:36:20:8b:0c:4d:b4:c9:0e:03:ab:9e:ff:b2:f2:65:
2d:7e:84:1d:18:f1:f7:69:43:d8:5c:10:83:1f:3e:6e:6b:35:
da:58:03:ef:91:f7:8c:75:f1:d6:47:7a:ea:94:75:d3:2f:3f:
28:d4:7d:07:7f:d5:fd:47:aa:7b:f6:e6:b0:fa:74:59:f9:32:
84:ac:bb:d5:20:58:ed:06:7c:87:1e:fc:11:b2:b4:73:29:cb:
b1:04:6b:c8:77:ee:46:2e:0b:c6:69:c5:79:18:85:bd:50:07:
a0:d3:f5:fc:d0:d4:1e:81:0c:6a:6a:84:74:57:95:70:4c:fc:
fa:f0:d4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS+LIdDAPPVQJWXxg6bUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz
NzZlZjAwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
Eyg1ZGE2ZGQ1ZjI3NjhkMzQwNWEwOGYzNWY3MjQwMGYxYmVkZTA2ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvHUpo+3pdl9r23KiXBgP6WYtDl
q9lBKHg9QKADukQBF0WgXDqOUkDp7yA99vutBCZnqX4H3Y8kJzYzE29ruY0+avVi
OgOdnMrwSQLWJj5y3yL2aJhlFwwX9gFSyjcWI+vocESFVxcm1bL0rjsbB7g3+rQD
AlzQ4ESeNYgrI8OU18/fmkXf1yjfFCGPKX4WJvucBmVKf/G2wxRgJuwfLG82EZbB
xGCofzO2LPmr6iD8rnruO0IgFqPvxOULvkzI+oHA5V7/QyeESa850nX6iByivAps
LPL4xuTDbIRVmTdAS1IqCLPktKPEzuLemPniTHDYwmbMATRzyF42oDeAJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2m3V8naNNAWgjzX3JADxvt4G9TMB8GA1UdIwQY
MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct
YzgxM2NlMGY1ZTQ3LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3
LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn65KvFbb
Qp2AGwJkp9pZAqdwK7A9rat6dkgN9aGkT0DEZG9rJn/89jdsayqHIhF9Q5hv5V74
vwMJcrNBEeqwsXnfkdwGlQ6XC+pcf8dk6hwlHEKgs4UoC+3fFGR/4GbzURbd016b
Clj0U24WUhv4i6tvDjmWOotRCC1AyoxVJHB/NiCLDE20yQ4Dq57/svJlLX6EHRjx
92lD2FwQgx8+bms12lgD75H3jHXx1kd66pR10y8/KNR9B3/V/Ueqe/bmsPp0Wfky
hKy71SBY7QZ8hx78EbK0cynLsQRryHfuRi4LxmnFeRiFvVAHoNP1/NDUHoEMamqE
dFeVcEz8+vDUBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:39 2025 by rpki-client