Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: KX5+vaAw4HDkOGZMs07hPF4CTjhQH1FmSdgbGJcbC/M=
Subject key identifier: AB:7D:20:67:AD:99:99:EE:6A:19:FD:7D:93:1B:97:12:CE:A4:CC:FD
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 0194BC05153D54CC830100BAC7651CE1F140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: OM10zMeHOG1yACSHGQE2ILaHNMUVk+BMGXfpoH1ZgXk=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:3d:54:cc:83:01:00:ba:c7:65:1c:e1:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=ab7d2067ad9999ee6a19fd7d931b9712cea4ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:f6:78:4d:c1:32:48:3c:57:21:84:e5:ef:
30:99:88:aa:6b:0b:c3:54:1e:06:4c:81:fd:78:e9:
63:ac:88:ac:62:7a:fe:7e:11:c7:dc:98:79:13:97:
ca:4c:44:07:7a:4d:10:a9:f1:83:dd:70:b7:45:b8:
8d:3c:f0:64:54:ea:e3:90:7f:6c:a2:22:af:1d:00:
ab:96:be:00:5f:44:11:d5:6a:8e:37:c5:46:53:f5:
fe:cb:02:06:70:78:ef:33:9e:32:60:88:7f:49:40:
6a:3c:e3:54:06:b6:30:5b:92:9c:22:4f:45:59:b4:
f0:dd:c2:81:70:77:1f:1b:bf:5c:ea:cd:14:7b:10:
02:9c:70:a7:ad:b8:8f:56:09:70:af:b3:e4:c7:cc:
a0:3d:16:6c:2f:5b:78:aa:f1:9e:f4:db:41:a6:6e:
93:49:2b:8b:76:29:7d:ac:0a:dc:23:c2:24:30:6b:
4e:80:50:d1:94:11:88:36:fa:ff:51:62:55:e8:84:
b3:66:9e:c0:2c:a1:5d:77:35:5b:43:35:f2:42:dd:
37:e5:74:97:fc:6d:16:f0:85:13:cf:59:a4:ce:5e:
a6:c1:c8:89:ec:b5:5d:e3:35:d8:01:b5:2a:09:98:
ae:26:c2:cd:43:01:8a:26:25:9d:74:00:fd:5e:03:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:20:67:AD:99:99:EE:6A:19:FD:7D:93:1B:97:12:CE:A4:CC:FD
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:30:a0:cc:44:a0:15:89:2d:9a:95:3e:b5:ee:83:8e:72:9c:
89:a2:4b:4d:17:4c:04:a8:f8:02:66:4a:05:1d:cb:fa:14:23:
c7:c5:3e:38:25:59:04:ce:9a:f6:64:aa:72:0e:0b:c7:4e:fc:
76:16:b9:9a:34:2a:71:a9:bf:1a:fb:67:42:04:8e:0d:9b:4c:
0b:4a:3b:36:6d:5b:0d:b4:0f:1d:f6:36:26:e2:3b:1b:2a:04:
35:1c:e1:71:bf:be:58:11:33:be:7a:d9:5c:89:e1:fc:b1:9c:
fb:c4:e8:64:63:6b:10:73:d9:5a:00:fe:47:e5:bf:43:0a:5f:
0d:09:7b:10:c6:38:d4:73:13:db:40:84:cb:da:13:58:53:0d:
b5:a2:2a:29:34:b8:c3:4b:70:96:c6:e2:40:ad:61:ee:29:ab:
8c:65:b7:9a:73:94:58:d0:07:5f:fa:98:30:d3:1a:70:1e:a0:
58:2b:9e:cf:f0:77:0e:3b:0d:87:14:5f:e4:d6:fd:e0:74:07:
ac:8e:93:a5:8e:fb:33:0c:f8:72:4c:0c:2d:0f:05:11:00:04:
7a:30:4d:02:ac:c8:4f:c3:b1:70:03:6a:a0:62:94:be:0b:d2:
b1:c8:f3:01:42:32:ff:16:c1:10:bf:70:84:8f:80:22:de:2c:
f3:0f:1e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRU9VMyDAQC6x2Uc4fFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5
MWMxOTYwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EyhhYjdkMjA2N2FkOTk5OWVlNmExOWZkN2Q5MzFiOTcxMmNlYTRjY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2j2eE3BMkg8VyGE5e8wmYiqawvD
VB4GTIH9eOljrIisYnr+fhHH3Jh5E5fKTEQHek0QqfGD3XC3RbiNPPBkVOrjkH9s
oiKvHQCrlr4AX0QR1WqON8VGU/X+ywIGcHjvM54yYIh/SUBqPONUBrYwW5KcIk9F
WbTw3cKBcHcfG79c6s0UexACnHCnrbiPVglwr7Pkx8ygPRZsL1t4qvGe9NtBpm6T
SSuLdil9rArcI8IkMGtOgFDRlBGINvr/UWJV6ISzZp7ALKFddzVbQzXyQt035XSX
/G0W8IUTz1mkzl6mwciJ7LVd4zXYAbUqCZiuJsLNQwGKJiWddAD9XgNgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt9IGetmZnuahn9fZMblxLOpMz9MB8GA1UdIwQY
MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt
YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw
LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTCgzESg
FYktmpU+te6DjnKciaJLTRdMBKj4AmZKBR3L+hQjx8U+OCVZBM6a9mSqcg4Lx078
dha5mjQqcam/GvtnQgSODZtMC0o7Nm1bDbQPHfY2JuI7GyoENRzhcb++WBEzvnrZ
XInh/LGc+8ToZGNrEHPZWgD+R+W/QwpfDQl7EMY41HMT20CEy9oTWFMNtaIqKTS4
w0twlsbiQK1h7imrjGW3mnOUWNAHX/qYMNMacB6gWCuez/B3DjsNhxRf5Nb94HQH
rI6TpY77Mwz4ckwMLQ8FEQAEejBNAqzIT8OxcANqoGKUvgvSscjzAUIy/xbBEL9w
hI+AIt4s8w8e6g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:32 2025 by rpki-client