Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: DBaqIcIMml+1qnkIJLRaIDaroXUyVml+OnfJUAjGsRI=
Subject key identifier: 9F:D2:EF:D0:06:8F:AC:86:44:54:52:EE:F2:DE:4C:59:9E:1B:B2:3B
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 0194BC73181A8DC0E58FC3EDE2681EB2CB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 0F22
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: Oag3Xm6KyewI/fMCHFUfcGpiaa6xj/vd+6kXgfXKqA4=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:1a:8d:c0:e5:8f:c3:ed:e2:68:1e:b2:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=9fd2efd0068fac86445452eef2de4c599e1bb23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:c3:8d:61:cd:32:0c:cf:d8:15:1c:26:33:
07:7e:fe:3f:25:d2:7c:95:b3:31:64:a6:d1:fd:80:
51:fb:1a:a6:d0:70:a1:99:7c:73:de:57:e1:71:24:
26:1d:45:b0:cb:f1:83:d3:4d:a9:74:de:4d:59:32:
17:32:eb:bd:36:66:9f:95:e8:43:bd:c1:73:fa:b9:
f6:4f:f0:c6:d6:ac:8d:8a:68:9d:84:2f:22:f3:fd:
60:44:84:7f:e6:2e:d5:ef:1a:b0:69:c2:4f:36:53:
eb:cc:71:40:93:85:af:98:b2:56:4a:99:0a:99:55:
72:2a:11:fa:a1:9c:da:e5:a7:f1:c2:2a:18:39:ac:
4f:62:6c:aa:9d:8d:d1:fd:37:be:c0:d3:57:dd:48:
7d:02:3e:80:f6:c7:ed:11:08:26:ac:a9:f1:b3:cf:
77:71:89:f5:b3:6b:b5:ee:91:b4:21:d0:eb:55:f8:
34:4c:8b:a8:32:69:70:fb:b0:ff:e6:da:f9:2c:2e:
7c:83:77:62:42:25:7a:82:6b:2a:e1:5a:e5:87:a3:
00:91:8d:11:c0:cd:06:4c:ee:c3:65:04:81:0d:8d:
4d:29:a8:44:58:30:37:07:32:ad:d3:57:7d:97:fd:
b4:d7:f1:c5:cd:da:7d:bc:d8:14:a6:bc:58:7e:26:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:EF:D0:06:8F:AC:86:44:54:52:EE:F2:DE:4C:59:9E:1B:B2:3B
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:69:0a:22:b0:c5:66:58:53:bf:63:83:20:0e:84:7b:08:f4:
8f:3a:6f:7b:b9:52:26:4c:66:f9:d5:39:07:64:72:8d:35:f1:
c1:4b:d6:00:47:00:14:66:a2:01:5b:d1:bc:23:f7:11:a9:87:
72:52:16:bf:39:46:94:45:e8:d3:d8:72:d0:e7:e7:53:9c:7d:
b4:a9:b8:b7:c3:17:91:5a:1d:62:ea:dc:62:1a:91:91:80:b3:
25:a9:af:49:c6:07:95:65:7f:eb:27:60:63:fe:73:dd:29:53:
e2:c9:c8:e9:b8:53:6e:a4:d7:b9:88:f8:35:66:df:4b:a2:61:
dd:5b:18:2e:c9:94:b3:dd:9c:c1:4c:a4:e7:36:28:8b:c7:ee:
e7:6f:2d:15:42:eb:73:27:48:96:cb:ef:15:3d:5e:53:48:9c:
aa:63:da:ba:a8:86:23:e5:7a:5e:e7:e9:8a:3c:a9:c4:d1:54:
ff:58:b8:a2:ff:5d:25:29:60:ba:67:bc:00:2e:44:2d:37:97:
6b:44:2e:1c:00:06:f7:82:22:59:31:f8:fc:62:c0:7c:5d:e0:
e2:6b:65:c3:b3:43:a0:40:05:2d:c6:51:21:0c:a1:ea:d9:ec:
de:0e:81:be:a0:17:67:49:75:46:fb:37:42:fd:61:62:38:3b:
18:53:ae:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxgajcDlj8Pt4mgessudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0
ZDAwYmYwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZmQyZWZkMDA2OGZhYzg2NDQ1NDUyZWVmMmRlNGM1OTllMWJiMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37rDjWHNMgzP2BUcJjMHfv4/JdJ8
lbMxZKbR/YBR+xqm0HChmXxz3lfhcSQmHUWwy/GD002pdN5NWTIXMuu9NmaflehD
vcFz+rn2T/DG1qyNimidhC8i8/1gRIR/5i7V7xqwacJPNlPrzHFAk4WvmLJWSpkK
mVVyKhH6oZza5afxwioYOaxPYmyqnY3R/Te+wNNX3Uh9Aj6A9sftEQgmrKnxs893
cYn1s2u17pG0IdDrVfg0TIuoMmlw+7D/5tr5LC58g3diQiV6gmsq4Vrlh6MAkY0R
wM0GTO7DZQSBDY1NKahEWDA3BzKt01d9l/201/HFzdp9vNgUprxYfial0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/S79AGj6yGRFRS7vLeTFmeG7I7MB8GA1UdIwQY
MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt
Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky
LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGkKIrDF
ZlhTv2ODIA6Eewj0jzpve7lSJkxm+dU5B2RyjTXxwUvWAEcAFGaiAVvRvCP3EamH
clIWvzlGlEXo09hy0OfnU5x9tKm4t8MXkVodYurcYhqRkYCzJamvScYHlWV/6ydg
Y/5z3SlT4snI6bhTbqTXuYj4NWbfS6Jh3VsYLsmUs92cwUyk5zYoi8fu528tFULr
cydIlsvvFT1eU0icqmPauqiGI+V6XufpijypxNFU/1i4ov9dJSlgume8AC5ELTeX
a0QuHAAG94IiWTH4/GLAfF3g4mtlw7NDoEAFLcZRIQyh6tns3g6BvqAXZ0l1Rvs3
Qv1hYjg7GFOumA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:16 2025 by rpki-client