Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: ohsBbDYdVKoEEEbqxQohdFRzs0gRcDONls6fuXq7k7s=
Subject key identifier: 79:B0:FF:17:20:09:C1:DD:42:FA:FC:BC:86:38:33:F4:B8:9D:85:8B
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 0194BD4E698008D0B9560C16341E06487631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: 2G08xHv+OJdXPuyZLjTYrpF8JL2KxotOeMxJf393sgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:80:08:d0:b9:56:0c:16:34:1e:06:48:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=79b0ff172009c1dd42fafcbc863833f4b89d858b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:f0:73:02:51:00:a8:b6:62:a9:e3:08:5c:
13:fa:17:0f:eb:90:e1:63:0d:47:1a:34:2f:22:02:
8d:75:31:f9:0e:79:94:6b:c0:e9:95:6e:01:fc:b8:
38:f0:93:22:48:08:d8:82:60:4b:e1:92:d4:82:9b:
b6:a8:01:de:27:f8:54:33:74:58:25:ea:09:d3:a8:
32:0e:f4:32:0f:13:da:d7:04:3c:ab:1d:bb:94:b9:
a0:03:60:49:74:15:cf:1e:05:e7:ce:84:4b:6a:17:
fb:13:d4:7f:d2:05:31:b3:a5:70:e5:85:db:e5:ca:
42:7a:2a:4e:40:4b:b6:2b:e9:33:98:7f:17:3d:1e:
bb:42:a5:81:63:e1:4c:f3:20:2e:2b:06:63:19:ac:
90:f1:71:de:3e:e9:07:8d:11:35:d1:4a:c5:bb:84:
43:11:be:a5:41:d6:49:e1:ef:c5:93:d7:dd:e6:0b:
48:2e:56:ed:cb:bf:89:6c:5a:d0:75:90:c5:54:48:
8b:94:b4:5d:77:2a:ba:d1:27:8d:b0:03:67:c9:5e:
00:d1:e2:99:9c:7f:d0:33:4c:73:52:91:41:31:15:
6f:68:1b:5c:0d:62:95:e6:00:c3:47:9e:95:6c:31:
38:04:a6:a7:9b:db:2b:3c:04:ce:51:49:db:27:44:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:FF:17:20:09:C1:DD:42:FA:FC:BC:86:38:33:F4:B8:9D:85:8B
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:a3:e3:2b:5a:65:62:bf:7f:fb:5d:45:72:49:a1:b3:a0:
01:b6:84:b0:03:d9:de:24:85:16:d9:8a:4c:63:1c:66:40:0c:
d1:a8:0c:44:18:a9:0f:ba:86:4b:2c:ba:ad:c7:60:a4:06:f3:
87:96:ff:98:1c:0c:0b:a3:f3:99:26:97:61:77:c0:2a:48:78:
1b:37:2d:23:48:75:48:04:89:c9:a8:ef:b1:b9:6e:4f:39:97:
75:cc:94:05:58:91:c5:fe:72:f1:b7:7b:2e:59:9f:fa:e6:e7:
2f:95:5d:7d:ed:da:06:4e:ee:fb:43:94:41:d9:d6:89:51:81:
34:e2:2c:09:1f:c8:89:9f:35:e4:28:a3:91:77:0a:9b:3b:b6:
c1:45:17:be:f5:f2:25:95:23:36:0f:2b:19:d9:36:ef:e5:b8:
60:dd:cb:ef:00:1e:45:ae:98:1c:c6:d0:c3:0f:87:f8:7c:9c:
cb:a9:33:30:46:79:b0:3c:9b:8f:d4:de:fb:47:6d:f7:96:08:
93:33:e8:13:4f:d4:88:7a:6c:8c:f6:2c:ef:cf:40:4f:4b:f9:
b8:ac:7a:f7:b9:10:8e:29:f9:68:ec:68:91:f4:49:09:86:16:
17:71:6c:f0:59:53:4c:8e:b2:7d:45:42:dd:cd:74:84:e7:66:
23:e7:37:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmmACNC5VgwWNB4GSHYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2
ZGQ4MWYwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
Eyg3OWIwZmYxNzIwMDljMWRkNDJmYWZjYmM4NjM4MzNmNGI4OWQ4NThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2HwcwJRAKi2YqnjCFwT+hcP65Dh
Yw1HGjQvIgKNdTH5DnmUa8DplW4B/Lg48JMiSAjYgmBL4ZLUgpu2qAHeJ/hUM3RY
JeoJ06gyDvQyDxPa1wQ8qx27lLmgA2BJdBXPHgXnzoRLahf7E9R/0gUxs6Vw5YXb
5cpCeipOQEu2K+kzmH8XPR67QqWBY+FM8yAuKwZjGayQ8XHePukHjRE10UrFu4RD
Eb6lQdZJ4e/Fk9fd5gtILlbty7+JbFrQdZDFVEiLlLRddyq60SeNsANnyV4A0eKZ
nH/QM0xzUpFBMRVvaBtcDWKV5gDDR56VbDE4BKanm9srPATOUUnbJ0QPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmw/xcgCcHdQvr8vIY4M/S4nYWLMB8GA1UdIwQY
MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt
MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh
LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKWj4yta
ZWK/f/tdRXJJobOgAbaEsAPZ3iSFFtmKTGMcZkAM0agMRBipD7qGSyy6rcdgpAbz
h5b/mBwMC6PzmSaXYXfAKkh4GzctI0h1SASJyajvsbluTzmXdcyUBViRxf5y8bd7
Llmf+ubnL5Vdfe3aBk7u+0OUQdnWiVGBNOIsCR/IiZ815CijkXcKmzu2wUUXvvXy
JZUjNg8rGdk27+W4YN3L7wAeRa6YHMbQww+H+Hycy6kzMEZ5sDybj9Te+0dt95YI
kzPoE0/UiHpsjPYs789AT0v5uKx697kQjin5aOxokfRJCYYWF3Fs8FlTTI6yfUVC
3c10hOdmI+c34w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:13 2025 by rpki-client