Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier: AYHn5gobeIp388Sg0lJyVgqnVNc9TF5wOSoW9zgO/+M=
Subject key identifier: FE:58:60:7E:71:F4:41:A1:A0:A8:78:5E:AA:59:B9:36:9D:DC:C5:B8
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 0194BCE0CE4D13DAA53C10FCFF49D283396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number: 0605
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: OQOfIBTtC9P7jCN0mN43Fc_lGps.roa (hash: ObKTxdr4K0eIsn14ipiRS5l0MCp4U/+rAHXfJfh0K1g=)
2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: w/TGyAoIGHpeBh+PqCvshvOTazDSjlr5f2nDCL3JoLM=)
3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
4: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:4d:13:da:a5:3c:10:fc:ff:49:d2:83:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=fe58607e71f441a1a0a8785eaa59b9369ddcc5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:bb:f1:a5:8d:35:3e:6a:22:ce:fe:c1:33:
e9:56:8f:05:13:fa:48:97:c7:90:f5:de:c7:3d:55:
b9:6d:27:b0:03:97:91:6d:c3:e9:cf:a4:d6:d9:2d:
a5:b9:01:32:db:78:35:4d:3d:85:10:17:4a:35:2b:
f4:0a:c8:41:c8:8c:e7:be:07:ef:db:ce:d3:cb:b3:
10:45:c5:3f:11:3d:fb:97:fb:88:14:f6:41:02:2f:
e9:00:1f:f3:9f:0b:2e:aa:c8:41:b9:10:65:48:24:
e6:b9:8d:fe:ee:02:b9:bc:e6:44:95:ad:2b:72:a1:
18:19:b4:00:6c:02:b9:d2:dc:f4:bc:ff:d5:bf:51:
ed:12:1e:ef:ba:d6:42:09:52:ed:de:60:07:06:7a:
9c:69:98:f4:0e:f7:c5:98:b2:4a:3c:2d:ed:79:ad:
7d:71:fc:ca:4a:0b:e3:a5:bf:00:8e:9b:f5:f1:72:
b2:59:e5:d2:7b:dc:ff:3b:cc:56:70:1b:70:36:21:
3e:65:52:8d:bd:7c:28:9e:94:70:3b:06:17:74:32:
8b:a5:a2:52:e6:23:a3:91:1c:d4:b4:1a:c5:de:33:
e4:cf:b2:cc:10:6b:b0:eb:54:45:88:c4:a4:fe:d5:
c9:a3:eb:e0:c8:4b:c9:83:fa:72:03:b5:ca:4d:04:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:58:60:7E:71:F4:41:A1:A0:A8:78:5E:AA:59:B9:36:9D:DC:C5:B8
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:92:c8:00:57:de:57:98:ad:27:56:95:57:21:3a:58:53:62:
46:1c:9d:1e:9f:ec:97:2c:74:38:94:bf:66:30:8f:a7:51:4e:
e6:b8:05:99:e8:13:1e:18:0a:ef:89:df:38:b2:09:ed:2e:26:
9a:9a:77:5f:cc:13:10:13:6d:fb:1d:4b:ba:25:88:76:c5:8f:
76:7d:64:78:59:68:53:d6:1c:79:19:11:b4:dd:df:98:c9:2a:
08:8b:fc:19:9a:31:a6:0a:20:28:30:b4:e3:98:d9:5c:d9:81:
a1:d0:d8:3b:3a:e9:af:43:31:9d:58:c6:9a:35:95:9e:92:f6:
90:6c:ab:79:cc:39:47:66:4e:60:18:4a:e3:94:89:3f:25:c4:
68:c9:3e:28:93:07:ec:be:85:25:13:d6:8a:5d:34:9b:b2:7c:
2c:5a:88:8d:74:2b:f0:05:9a:55:d1:07:31:9b:c0:0c:04:36:
30:f7:9b:fc:bf:56:4d:f5:71:79:ef:9e:65:d7:e3:12:ce:df:
5c:b5:1e:d1:4f:62:bc:ac:c6:0c:a9:1b:11:3f:2f:09:14:b0:
09:87:57:73:2b:4b:5a:71:e0:a2:a6:89:6b:c1:ef:04:64:9a:
3f:a5:c8:f7:dc:29:dd:fd:dc:ac:e1:dd:ba:2b:9d:c8:9e:e0:
1c:66:c8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M5NE9qlPBD8/0nSgzlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy
N2M2YzMwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EyhmZTU4NjA3ZTcxZjQ0MWExYTBhODc4NWVhYTU5YjkzNjlkZGNjNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWq78aWNNT5qIs7+wTPpVo8FE/pI
l8eQ9d7HPVW5bSewA5eRbcPpz6TW2S2luQEy23g1TT2FEBdKNSv0CshByIznvgfv
287Ty7MQRcU/ET37l/uIFPZBAi/pAB/znwsuqshBuRBlSCTmuY3+7gK5vOZEla0r
cqEYGbQAbAK50tz0vP/Vv1HtEh7vutZCCVLt3mAHBnqcaZj0DvfFmLJKPC3tea19
cfzKSgvjpb8Ajpv18XKyWeXSe9z/O8xWcBtwNiE+ZVKNvXwonpRwOwYXdDKLpaJS
5iOjkRzUtBrF3jPkz7LMEGuw61RFiMSk/tXJo+vgyEvJg/pyA7XKTQRj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5YYH5x9EGhoKh4XqpZuTad3MW4MB8GA1UdIwQY
MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt
NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz
LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJLIAFfe
V5itJ1aVVyE6WFNiRhydHp/slyx0OJS/ZjCPp1FO5rgFmegTHhgK74nfOLIJ7S4m
mpp3X8wTEBNt+x1LuiWIdsWPdn1keFloU9YceRkRtN3fmMkqCIv8GZoxpgogKDC0
45jZXNmBodDYOzrpr0MxnVjGmjWVnpL2kGyrecw5R2ZOYBhK45SJPyXEaMk+KJMH
7L6FJRPWil00m7J8LFqIjXQr8AWaVdEHMZvADAQ2MPeb/L9WTfVxee+eZdfjEs7f
XLUe0U9ivKzGDKkbET8vCRSwCYdXcytLWnHgoqaJa8HvBGSaP6XI99wp3f3crOHd
uiudyJ7gHGbIdg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:07 2025 by rpki-client