Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: KBNBm7VHZNrK9/4FfmiHCIxzkFN0lvsuPsSdY5v4MLE=
Subject key identifier: 1D:95:88:48:FA:D0:72:D9:31:EB:DD:AF:57:E4:58:2F:CF:14:17:01
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 0194BC3BF61119BD7363CAFF7FF6C8D346E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: LJR2NbQWDFpofH4Z6m+40so3Nz0B9R7/nHgwp/EwKGE=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:11:19:bd:73:63:ca:ff:7f:f6:c8:d3:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=1d958848fad072d931ebddaf57e4582fcf141701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:d0:17:3f:7a:3d:60:df:de:c4:75:e4:09:
a8:63:a2:50:8e:a0:76:de:ce:03:e3:b0:19:4b:a5:
4d:a7:a1:ef:39:e4:8f:fb:b5:fe:a3:20:9d:c3:32:
fb:6c:ab:b8:b4:3f:93:5f:15:f8:97:f4:5f:0b:cd:
c8:fb:b6:c0:e6:a0:81:30:22:28:6f:6f:70:23:6b:
74:13:d4:85:2f:b1:32:74:db:a8:8c:7d:8b:e7:98:
f0:91:8d:e5:69:3f:1b:e6:fa:d8:08:7e:73:f9:63:
65:9e:0a:26:ce:d8:0e:09:e3:1b:87:a7:07:2b:42:
13:1e:74:3a:28:10:ce:e9:6e:d3:35:25:af:de:28:
4e:83:9f:47:a1:a0:c8:68:63:c8:f8:6d:d4:a9:f9:
27:a4:8d:35:26:2b:8e:f4:2a:10:79:26:2b:ab:4b:
d2:2a:f6:23:cd:d8:8e:41:e1:5b:4b:f3:14:22:b6:
b8:b2:01:6f:76:ba:7b:98:0a:29:1f:f4:f9:2c:ee:
bd:e5:53:60:2e:52:88:d3:12:b0:d2:60:2d:69:e4:
11:95:a3:7b:75:cb:bd:a0:d0:9f:61:d1:4e:02:ba:
f1:19:d7:bd:55:a6:e2:81:23:30:41:db:c5:d3:89:
ac:d3:56:20:c9:0a:61:14:72:a3:14:ec:07:8b:d7:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:88:48:FA:D0:72:D9:31:EB:DD:AF:57:E4:58:2F:CF:14:17:01
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:06:e5:7b:b9:d6:b2:35:eb:65:32:95:40:16:6f:e1:7f:f5:
1b:10:fa:9d:c0:09:9b:ba:48:7c:4f:e7:08:3d:0e:5d:7e:0b:
8e:c5:b2:c8:73:81:12:ce:40:e6:64:9a:7e:e7:13:8e:94:06:
da:16:01:8d:b0:89:fa:61:f9:3b:25:3b:5b:70:d4:b8:45:b2:
08:f2:1e:35:a1:85:08:e9:cf:bf:cc:0b:88:a2:7d:2f:a8:84:
a4:21:04:c3:06:6f:61:c6:d5:ef:e5:9b:56:2a:76:1c:00:b0:
f4:aa:3f:5b:96:d8:84:6e:e5:75:a6:0c:a4:13:08:5d:c4:08:
23:18:7c:76:a0:bf:77:f9:f0:0f:bc:72:61:af:5e:e3:0d:e8:
3a:6f:a3:31:37:71:1b:e3:d9:62:80:b9:01:c2:91:ad:ad:25:
5f:e3:96:d7:a1:7b:bd:fa:83:40:d6:d0:6d:4e:0b:42:bd:d8:
44:31:3b:80:73:04:32:42:3a:a7:18:8d:d9:0d:de:80:a2:28:
1d:3d:20:80:45:e2:14:3b:e0:12:51:37:46:d6:f5:6c:4e:81:
37:45:d5:67:c9:55:51:b2:17:4b:43:ef:81:90:63:73:53:f9:
70:81:13:f2:37:cf:9d:06:5b:1c:b9:71:1a:5c:f8:0d:a8:c1:
65:60:b2:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/YRGb1zY8r/f/bI00biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh
YjZiMTkwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EygxZDk1ODg0OGZhZDA3MmQ5MzFlYmRkYWY1N2U0NTgyZmNmMTQxNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5PQFz96PWDf3sR15AmoY6JQjqB2
3s4D47AZS6VNp6HvOeSP+7X+oyCdwzL7bKu4tD+TXxX4l/RfC83I+7bA5qCBMCIo
b29wI2t0E9SFL7EydNuojH2L55jwkY3laT8b5vrYCH5z+WNlngomztgOCeMbh6cH
K0ITHnQ6KBDO6W7TNSWv3ihOg59HoaDIaGPI+G3UqfknpI01JiuO9CoQeSYrq0vS
KvYjzdiOQeFbS/MUIra4sgFvdrp7mAopH/T5LO695VNgLlKI0xKw0mAtaeQRlaN7
dcu9oNCfYdFOArrxGde9VabigSMwQdvF04ms01YgyQphFHKjFOwHi9eQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2ViEj60HLZMevdr1fkWC/PFBcBMB8GA1UdIwQY
MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt
YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1
LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAble7nW
sjXrZTKVQBZv4X/1GxD6ncAJm7pIfE/nCD0OXX4LjsWyyHOBEs5A5mSafucTjpQG
2hYBjbCJ+mH5OyU7W3DUuEWyCPIeNaGFCOnPv8wLiKJ9L6iEpCEEwwZvYcbV7+Wb
Vip2HACw9Ko/W5bYhG7ldaYMpBMIXcQIIxh8dqC/d/nwD7xyYa9e4w3oOm+jMTdx
G+PZYoC5AcKRra0lX+OW16F7vfqDQNbQbU4LQr3YRDE7gHMEMkI6pxiN2Q3egKIo
HT0ggEXiFDvgElE3Rtb1bE6BN0XVZ8lVUbIXS0PvgZBjc1P5cIET8jfPnQZbHLlx
Glz4DajBZWCycg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:50 2025 by rpki-client