Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
File: wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft (raw, json)
Hash identifier: vcDBqwM7Tk4FIAsZpHi6+uvR/8IvrUc0dNEgvuACUcQ=
Subject key identifier: AB:6D:B5:0E:FE:9A:91:0B:8D:FF:77:A1:EE:47:7F:5E:60:B4:C8:ED
Authority key identifier: C2:1E:53:BA:AD:11:B4:3C:5A:02:3E:19:A6:F0:F1:B6:D9:7E:63:6B
Certificate issuer: /CN=c21e53baad11b43c5a023e19a6f0f1b6d97e636b
Certificate serial: 0194BCAA2E141CC84190E732887393C4DD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
Manifest number: 12EE
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.crl (hash: VT7Kuu9PdMtrDjADNxD6ZJi/Im4VZu0kx+BxIHYTCvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:14:1c:c8:41:90:e7:32:88:73:93:c4:dd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e53baad11b43c5a023e19a6f0f1b6d97e636b
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=ab6db50efe9a910b8dff77a1ee477f5e60b4c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:bd:fa:a1:95:fa:08:0a:9c:f8:23:14:34:
4d:dd:62:33:e0:e0:09:d3:47:0e:e8:d9:64:ac:07:
1c:5f:cc:f6:7b:30:1f:ee:61:f1:11:9f:1c:8b:67:
1f:00:99:96:2e:b0:58:11:cb:8b:60:56:a8:c6:8e:
38:8d:e4:aa:b3:06:8e:19:07:fd:85:e8:8b:a3:19:
e6:76:72:9a:2a:8d:c5:c7:7f:21:eb:47:34:74:66:
85:e7:bf:67:17:fa:fc:67:47:c8:2e:4d:a9:d4:6f:
57:de:5d:16:01:8b:40:cf:c5:23:2d:62:f9:5b:bb:
a3:43:6e:e6:a3:7e:b7:89:79:1c:54:f8:45:c7:17:
79:5c:1d:3e:d0:42:aa:99:53:d4:a1:db:4f:f8:55:
0c:75:13:e4:95:1e:b2:f7:7f:0d:a6:d3:09:b5:57:
77:04:19:fd:a6:29:85:b9:c9:1b:40:46:cc:cc:a9:
fd:72:43:18:5c:5a:c5:02:8d:fb:7b:a2:43:7c:c1:
b3:9a:1e:86:14:8e:53:20:93:77:fd:60:20:18:19:
8a:d6:cb:2f:ea:a4:df:f8:92:86:f2:bb:c7:29:53:
3b:c2:7b:dd:66:18:c6:f1:7c:17:1f:a9:6f:25:e8:
46:09:51:67:7e:48:dc:06:6a:f5:81:2c:99:61:e7:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:B5:0E:FE:9A:91:0B:8D:FF:77:A1:EE:47:7F:5E:60:B4:C8:ED
X509v3 Authority Key Identifier:
keyid:C2:1E:53:BA:AD:11:B4:3C:5A:02:3E:19:A6:F0:F1:B6:D9:7E:63:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9dd88b-8e74-4559-a5e1-c1d513572182/1/wh5Tuq0RtDxaAj4ZpvDxttl-Y2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:83:ca:79:4a:cd:c7:78:95:27:65:73:e8:09:7d:fd:fa:
0f:f5:e8:77:38:6d:b9:c4:6a:53:c0:de:aa:41:76:36:8c:af:
33:b0:a8:c2:49:8d:56:de:83:98:02:25:e8:60:83:dc:3f:ba:
85:40:fb:5a:fd:0c:0c:7b:d5:9e:52:1f:68:e6:ee:40:bd:3b:
98:92:bf:af:21:58:9a:3a:f2:25:50:f7:8c:14:cd:c2:6d:af:
70:b6:cb:a4:b1:15:97:0d:6b:c9:72:0a:26:a0:1c:eb:07:cd:
4e:3c:ab:d6:26:8d:27:98:4c:ce:02:e0:fd:88:b5:79:21:55:
9b:74:94:c2:33:55:80:0e:73:38:5b:bf:50:7a:58:c0:64:8d:
c1:c7:53:b1:15:55:66:20:b5:1f:6b:fa:1a:13:73:b1:0b:95:
04:5a:63:e5:9f:df:c6:05:15:5a:d8:14:0b:0d:83:31:54:48:
87:ab:f4:01:0d:0c:7b:be:e3:7f:bb:36:f6:9e:dc:93:b1:a7:
65:46:eb:59:ed:4f:d9:3a:25:f7:2e:60:cd:19:b5:11:79:e0:
5d:52:71:ce:73:6a:a7:51:c4:28:34:05:e7:fc:e9:07:8d:69:
93:5d:11:3f:84:1d:8c:9a:0f:57:6c:06:1b:e7:fd:80:59:e5:
97:ce:9e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qi4UHMhBkOcyiHOTxN0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWU1M2JhYWQxMWI0M2M1YTAyM2UxOWE2ZjBmMWI2ZDk3
ZTYzNmIwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
EyhhYjZkYjUwZWZlOWE5MTBiOGRmZjc3YTFlZTQ3N2Y1ZTYwYjRjOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHa9+qGV+ggKnPgjFDRN3WIz4OAJ
00cO6NlkrAccX8z2ezAf7mHxEZ8ci2cfAJmWLrBYEcuLYFaoxo44jeSqswaOGQf9
heiLoxnmdnKaKo3Fx38h60c0dGaF579nF/r8Z0fILk2p1G9X3l0WAYtAz8UjLWL5
W7ujQ27mo363iXkcVPhFxxd5XB0+0EKqmVPUodtP+FUMdRPklR6y938NptMJtVd3
BBn9pimFuckbQEbMzKn9ckMYXFrFAo37e6JDfMGzmh6GFI5TIJN3/WAgGBmK1ssv
6qTf+JKG8rvHKVM7wnvdZhjG8XwXH6lvJehGCVFnfkjcBmr1gSyZYeeiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtttQ7+mpELjf93oe5Hf15gtMjtMB8GA1UdIwQY
MBaAFMIeU7qtEbQ8WgI+Gabw8bbZfmNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2g1VHVxMFJ0RHhhQWo0WnB2RHh0dGwtWTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZGQ4OGItOGU3NC00NTU5LWE1ZTEt
YzFkNTEzNTcyMTgyLzEvd2g1VHVxMFJ0RHhhQWo0WnB2RHh0dGwtWTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85ZGQ4OGItOGU3NC00NTU5LWE1ZTEtYzFkNTEzNTcyMTgy
LzEvd2g1VHVxMFJ0RHhhQWo0WnB2RHh0dGwtWTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrSDynlK
zcd4lSdlc+gJff36D/XodzhtucRqU8DeqkF2NoyvM7CowkmNVt6DmAIl6GCD3D+6
hUD7Wv0MDHvVnlIfaObuQL07mJK/ryFYmjryJVD3jBTNwm2vcLbLpLEVlw1ryXIK
JqAc6wfNTjyr1iaNJ5hMzgLg/Yi1eSFVm3SUwjNVgA5zOFu/UHpYwGSNwcdTsRVV
ZiC1H2v6GhNzsQuVBFpj5Z/fxgUVWtgUCw2DMVRIh6v0AQ0Me77jf7s29p7ck7Gn
ZUbrWe1P2Tol9y5gzRm1EXngXVJxznNqp1HEKDQF5/zpB41pk10RP4QdjJoPV2wG
G+f9gFnll86egQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:03 2025 by rpki-client