Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: f8vRuznSmLZqCuPqHEenicjYozjPM+3bVV4Af+HGVzc=
Subject key identifier: BB:74:DC:3C:AC:C9:94:13:0A:A3:D0:7D:B0:17:CC:D6:53:51:CA:7C
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 0194BD17ACCB9F923641D86F64B5E248CD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 074D
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: g657yfi8/68t4iYPwgRcHOTnMKOGGdcuNy6wyDD3030=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:cb:9f:92:36:41:d8:6f:64:b5:e2:48:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=bb74dc3cacc994130aa3d07db017ccd65351ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:d3:ce:ed:4e:59:ba:27:ec:80:3f:1f:53:
ee:2f:34:bc:e3:0a:68:73:29:fa:b4:9f:40:4e:91:
93:2d:df:b6:d2:e1:3e:93:4c:32:a4:e3:3d:eb:db:
da:d0:49:37:14:b1:b2:4e:a8:ec:c1:59:a8:70:3e:
2f:e3:a4:1b:bf:f7:44:82:b6:2b:c9:0c:03:a4:e6:
1a:c1:1c:71:80:f4:0d:12:14:b9:50:d8:bb:38:5a:
96:b4:b8:37:b8:1c:38:bd:32:95:38:d6:95:ae:2c:
8a:c3:45:da:1f:6e:a8:22:61:77:6f:70:b5:35:c3:
7b:88:26:9a:c2:02:52:f1:1c:ee:cb:fe:1b:b5:61:
a1:f2:4e:24:87:87:49:d6:c2:8a:9a:0b:f0:5c:09:
a5:bd:dc:f8:e7:45:4b:b0:f3:79:9a:b2:a8:06:9e:
8e:c8:1d:35:46:61:62:d9:47:9d:d4:db:89:af:de:
81:ec:a1:25:e2:3b:e4:20:2f:e1:3b:2e:85:e7:22:
c3:bf:80:f2:ff:28:2e:75:70:e0:bc:1c:3a:27:7c:
b9:3a:d7:36:e7:96:f8:aa:61:f4:ae:bb:09:11:f5:
d5:95:8f:53:5e:b1:1b:70:62:ea:ca:62:bf:31:9c:
3a:c5:a9:28:57:d2:39:c2:0c:89:2b:f8:cc:68:84:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:74:DC:3C:AC:C9:94:13:0A:A3:D0:7D:B0:17:CC:D6:53:51:CA:7C
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:74:9a:d7:33:94:c4:2a:fb:aa:3f:fd:0e:f4:b1:07:fa:
d4:b4:25:6f:33:5f:fc:7b:c2:6a:f1:48:18:a2:5b:df:c9:8b:
9c:9b:d2:d9:75:3c:06:2f:f0:17:ee:aa:23:b7:63:9c:47:25:
16:1e:dd:87:80:76:01:c5:d8:cd:5b:56:1a:20:16:a5:94:48:
47:26:b9:69:39:2a:91:a2:1c:3a:c8:d6:34:92:27:57:b4:09:
92:a0:7b:9a:8a:8e:ef:6e:5f:1a:4f:0e:fd:f6:90:86:8e:c0:
04:f1:93:03:ea:4d:e3:b7:de:e8:72:e9:9a:31:19:1b:55:9b:
a3:af:61:78:78:24:e0:41:b9:d1:3a:36:b4:6c:9f:65:b7:73:
94:3c:3e:37:7a:95:c5:27:72:9a:48:41:68:3a:c3:01:5a:2e:
10:58:ac:f1:4a:d7:ad:de:4f:83:56:30:2a:e6:60:43:67:8e:
09:50:9b:cf:e4:ba:a3:3a:93:d5:c4:e3:3c:11:00:0c:82:4b:
f7:8d:ed:1b:80:6c:a9:e5:6e:ae:cb:a0:89:01:c0:84:5a:dc:
82:c3:6b:fb:d9:66:c7:ee:75:38:0d:1b:98:e6:a7:65:72:d5:
45:70:04:32:94:4a:98:5b:f1:98:c7:15:7b:da:83:e4:2b:47:
b7:18:71:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6zLn5I2QdhvZLXiSM0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3
MWRlMWMwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EyhiYjc0ZGMzY2FjYzk5NDEzMGFhM2QwN2RiMDE3Y2NkNjUzNTFjYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMXTzu1OWbon7IA/H1PuLzS84wpo
cyn6tJ9ATpGTLd+20uE+k0wypOM969va0Ek3FLGyTqjswVmocD4v46Qbv/dEgrYr
yQwDpOYawRxxgPQNEhS5UNi7OFqWtLg3uBw4vTKVONaVriyKw0XaH26oImF3b3C1
NcN7iCaawgJS8Rzuy/4btWGh8k4kh4dJ1sKKmgvwXAmlvdz450VLsPN5mrKoBp6O
yB01RmFi2Ued1NuJr96B7KEl4jvkIC/hOy6F5yLDv4Dy/ygudXDgvBw6J3y5Otc2
55b4qmH0rrsJEfXVlY9TXrEbcGLqymK/MZw6xakoV9I5wgyJK/jMaISqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt03DysyZQTCqPQfbAXzNZTUcp8MB8GA1UdIwQY
MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt
MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi
LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzd0mtcz
lMQq+6o//Q70sQf61LQlbzNf/HvCavFIGKJb38mLnJvS2XU8Bi/wF+6qI7djnEcl
Fh7dh4B2AcXYzVtWGiAWpZRIRya5aTkqkaIcOsjWNJInV7QJkqB7moqO725fGk8O
/faQho7ABPGTA+pN47fe6HLpmjEZG1Wbo69heHgk4EG50To2tGyfZbdzlDw+N3qV
xSdymkhBaDrDAVouEFis8UrXrd5Pg1YwKuZgQ2eOCVCbz+S6ozqT1cTjPBEADIJL
943tG4BsqeVursugiQHAhFrcgsNr+9lmx+51OA0bmOanZXLVRXAEMpRKmFvxmMcV
e9qD5CtHtxhxwA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:14 2025 by rpki-client