Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: eoBa/vmY0KDJzDh1f2LeDIokMZAv6VqlzMRT72rKiuE=
Subject key identifier: 4C:46:DC:92:6B:64:B6:7E:9E:DF:E6:F2:D1:B9:15:95:5F:7F:C6:B0
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0194BCA9A2702CA257E6FCF647DC9680D527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: mPj1Sgk5dyjCcJAFR8s96fGr7zA2WKlxOzmBq0W+EJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:70:2c:a2:57:e6:fc:f6:47:dc:96:80:d5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=4c46dc926b64b67e9edfe6f2d1b915955f7fc6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:93:bd:f8:0e:d0:48:e3:eb:c6:b3:84:ab:
e6:3b:ba:3c:47:15:e1:67:ff:73:05:b5:4d:62:62:
cc:35:ea:1a:c5:12:af:2c:c5:e3:8f:dc:d4:24:8f:
27:7a:cd:79:20:45:3c:4e:37:97:bb:f4:15:d2:54:
8c:ae:73:f4:9c:bc:57:61:b1:84:a4:18:12:6f:39:
f3:5f:53:db:a4:5b:89:3a:24:95:d8:d7:bd:54:f2:
87:f9:5d:1b:c3:9f:57:89:fd:bf:83:44:e1:86:a9:
29:e3:4a:6b:e3:cd:b8:0e:8e:d9:d8:1b:45:a0:09:
06:af:ba:f0:9f:9d:23:0b:dd:81:0a:9e:46:4b:fe:
3d:8e:50:47:10:e5:8a:11:aa:65:19:6e:03:21:bf:
f1:8d:c8:8b:ea:61:b3:13:1f:d2:ed:34:01:11:d9:
2f:06:ba:b5:da:41:eb:38:01:6f:21:d9:b4:41:d3:
1f:85:b1:f8:12:fc:c1:21:1e:16:ea:f5:8e:d1:97:
73:0f:b2:17:15:fd:70:4c:0c:70:7a:6e:e6:9e:43:
46:ef:8c:e6:30:e0:54:f7:21:0b:8a:8f:6f:5b:4c:
76:e4:ef:1b:53:3a:bf:14:16:dd:3c:a9:08:53:05:
9b:bf:08:b3:06:fc:7b:d9:b0:ea:04:af:24:3a:f9:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:DC:92:6B:64:B6:7E:9E:DF:E6:F2:D1:B9:15:95:5F:7F:C6:B0
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:77:79:9a:1c:ca:4d:98:34:57:21:71:10:91:7c:c8:3b:
ed:a4:47:50:2e:6a:29:31:b0:3b:a7:1a:eb:f3:5e:8e:da:2d:
17:74:c0:b7:f5:e4:72:b0:b7:fc:f6:d4:64:02:56:b8:90:0e:
b8:b5:1b:56:d1:74:01:3a:5e:fd:cf:39:d6:99:00:cd:a1:08:
0f:18:ce:5c:76:27:87:d3:40:d4:a1:c4:55:c3:19:61:a9:f4:
0e:03:b0:e5:7b:5f:ea:4f:b5:00:6b:f2:0f:18:fd:2a:44:b7:
e0:c7:6b:5b:de:ad:8d:8c:1f:03:eb:f3:01:43:5d:64:c6:24:
1e:eb:07:56:f4:d0:48:8b:7f:43:f1:d2:ba:f7:38:ba:9a:e8:
88:b4:55:63:e9:90:fe:ae:f4:2e:ca:73:13:a6:ec:8b:a8:c8:
3d:83:e4:78:5b:29:1e:8b:5a:f6:dd:67:74:7b:9a:44:d6:58:
04:cd:bd:90:a3:ea:08:71:f9:b0:12:97:94:8d:aa:4c:cc:ed:
df:07:5b:4d:8f:84:35:45:28:e8:dc:ec:30:94:28:b9:79:82:
87:9e:98:cf:e1:93:f7:28:18:57:54:1e:02:36:48:95:a2:38:
47:a8:49:c4:0e:f5:c1:b4:42:c0:f1:34:a1:ec:4e:37:fb:21:
3f:2b:11:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaJwLKJX5vz2R9yWgNUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1
OWJhNmYwHhcNMjUwMTMxMTQwMDIxWhcNMjUwMjAxMTQwMDIxWjAzMTEwLwYDVQQD
Eyg0YzQ2ZGM5MjZiNjRiNjdlOWVkZmU2ZjJkMWI5MTU5NTVmN2ZjNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4+TvfgO0Ejj68azhKvmO7o8RxXh
Z/9zBbVNYmLMNeoaxRKvLMXjj9zUJI8nes15IEU8TjeXu/QV0lSMrnP0nLxXYbGE
pBgSbznzX1PbpFuJOiSV2Ne9VPKH+V0bw59Xif2/g0Thhqkp40pr4824Do7Z2BtF
oAkGr7rwn50jC92BCp5GS/49jlBHEOWKEaplGW4DIb/xjciL6mGzEx/S7TQBEdkv
Brq12kHrOAFvIdm0QdMfhbH4EvzBIR4W6vWO0ZdzD7IXFf1wTAxwem7mnkNG74zm
MOBU9yELio9vW0x25O8bUzq/FBbdPKkIUwWbvwizBvx72bDqBK8kOvlySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExG3JJrZLZ+nt/m8tG5FZVff8awMB8GA1UdIwQY
MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt
ZTM0MDcxNzQ2NjNiLzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi
LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0x3eZoc
yk2YNFchcRCRfMg77aRHUC5qKTGwO6ca6/NejtotF3TAt/XkcrC3/PbUZAJWuJAO
uLUbVtF0ATpe/c851pkAzaEIDxjOXHYnh9NA1KHEVcMZYan0DgOw5Xtf6k+1AGvy
Dxj9KkS34MdrW96tjYwfA+vzAUNdZMYkHusHVvTQSIt/Q/HSuvc4uproiLRVY+mQ
/q70LspzE6bsi6jIPYPkeFspHota9t1ndHuaRNZYBM29kKPqCHH5sBKXlI2qTMzt
3wdbTY+ENUUo6NzsMJQouXmCh56Yz+GT9ygYV1QeAjZIlaI4R6hJxA71wbRCwPE0
oexON/shPysRaw==
-----END CERTIFICATE-----
Generated at Thu May 1 15:15:52 2025 by rpki-client