Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: POyde3vx2cR4Oy/qKiS+A9pWmToQUHbPaH+kPkAr7Xo=
Subject key identifier: 1A:25:E2:3A:A4:5F:4F:98:05:7C:47:2C:B5:90:06:72:5F:BA:6C:BD
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 0194BC04A7A94D025D68DC41D177505F8204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 1087
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: oHLp8LoCyWbrfIwwHxUT/fALJWJqfIo8mzoZSdMTP2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a7:a9:4d:02:5d:68:dc:41:d1:77:50:5f:82:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=1a25e23aa45f4f98057c472cb59006725fba6cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:9a:1c:41:53:21:17:a2:b5:c4:67:74:52:
29:1f:ae:87:56:c7:eb:c8:7a:73:78:a5:c1:b1:2f:
7f:1b:e9:f8:e0:f4:e6:65:a9:da:a4:54:73:77:04:
a1:dc:d7:66:41:9e:75:e3:0c:76:a7:9d:c6:9a:cf:
aa:74:24:87:2d:d1:8d:54:86:79:8b:53:91:b9:e6:
f0:7a:30:46:14:df:79:65:b0:1f:5c:18:67:1a:7e:
57:b2:f6:f5:9d:76:5c:84:db:55:57:63:b3:d9:a8:
7c:2a:b4:21:a1:be:6c:a8:d4:31:30:13:eb:03:70:
50:0c:d9:86:f7:41:ca:69:67:ae:ea:0a:44:89:68:
ad:7e:6a:1c:0e:a6:0f:28:21:91:a7:8b:4c:09:b0:
50:d3:e9:9d:d3:62:da:72:db:bd:37:7e:79:1a:5a:
76:fc:5d:25:c6:ae:88:b0:f6:b0:c8:0a:cc:ad:e9:
82:21:9d:b7:99:04:c4:e6:a4:2d:d2:61:72:63:a5:
12:9d:ed:f3:31:f1:8c:b5:a8:0c:77:d0:fb:92:1d:
a9:ef:f4:ab:41:5a:df:0e:b7:53:16:0c:5d:0d:53:
9c:1b:93:8c:ee:52:db:52:ef:3a:2a:07:fe:07:b9:
aa:fb:5f:f7:aa:ca:80:8d:25:48:f3:cd:20:d4:42:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:E2:3A:A4:5F:4F:98:05:7C:47:2C:B5:90:06:72:5F:BA:6C:BD
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:ed:eb:49:1b:5e:6c:fc:3e:83:22:19:84:f7:6b:91:d1:
27:0d:d5:6c:c5:23:08:9b:cd:36:8e:87:6d:1e:af:15:db:c1:
46:37:e2:bb:4c:f1:07:11:c4:5f:ff:39:e0:92:25:71:1c:a0:
12:20:c2:a0:33:2a:f5:5b:fd:83:f5:d8:e4:2e:b4:65:f9:e2:
c4:88:fc:c4:8b:9e:a5:32:62:6b:e3:29:c8:d3:48:fb:21:4b:
12:e0:5b:50:32:95:04:bc:f3:9c:ca:3c:5d:02:f7:0a:3b:5a:
ad:6c:ca:2d:60:47:b2:02:35:36:a5:a3:33:01:6f:1c:42:98:
7c:4a:b3:07:6b:3b:90:26:3c:59:5f:af:d1:3a:c3:56:cd:03:
d4:bb:3d:87:42:4b:8f:fb:a3:93:8e:1f:bb:57:5c:e9:71:d5:
17:40:19:92:3f:9b:bc:8f:c4:f0:2e:7a:3f:fd:6a:c0:57:c6:
fe:c4:ca:aa:ae:38:32:b7:e6:35:f1:72:58:94:30:cc:c5:f3:
88:36:a9:8a:04:d9:68:e1:cf:86:fc:b1:c9:96:e9:18:2f:31:
4e:ea:56:da:00:7d:08:b8:3e:58:2e:ac:6f:74:5a:f7:e1:33:
d9:1f:70:f0:86:ac:74:ba:21:6d:6a:84:cc:29:18:9a:bd:27:
d7:40:6d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKepTQJdaNxB0XdQX4IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjUwMTMxMTEwMDA4WhcNMjUwMjAxMTEwMDA4WjAzMTEwLwYDVQQD
EygxYTI1ZTIzYWE0NWY0Zjk4MDU3YzQ3MmNiNTkwMDY3MjVmYmE2Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkuaHEFTIReitcRndFIpH66HVsfr
yHpzeKXBsS9/G+n44PTmZanapFRzdwSh3NdmQZ514wx2p53Gms+qdCSHLdGNVIZ5
i1ORuebwejBGFN95ZbAfXBhnGn5Xsvb1nXZchNtVV2Oz2ah8KrQhob5sqNQxMBPr
A3BQDNmG90HKaWeu6gpEiWitfmocDqYPKCGRp4tMCbBQ0+md02Lactu9N355Glp2
/F0lxq6IsPawyArMremCIZ23mQTE5qQt0mFyY6USne3zMfGMtagMd9D7kh2p7/Sr
QVrfDrdTFgxdDVOcG5OM7lLbUu86Kgf+B7mq+1/3qsqAjSVI880g1EIsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBol4jqkX0+YBXxHLLWQBnJfumy9MB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORDt60kb
Xmz8PoMiGYT3a5HRJw3VbMUjCJvNNo6HbR6vFdvBRjfiu0zxBxHEX/854JIlcRyg
EiDCoDMq9Vv9g/XY5C60ZfnixIj8xIuepTJia+MpyNNI+yFLEuBbUDKVBLzznMo8
XQL3CjtarWzKLWBHsgI1NqWjMwFvHEKYfEqzB2s7kCY8WV+v0TrDVs0D1Ls9h0JL
j/ujk44fu1dc6XHVF0AZkj+bvI/E8C56P/1qwFfG/sTKqq44MrfmNfFyWJQwzMXz
iDapigTZaOHPhvyxyZbpGC8xTupW2gB9CLg+WC6sb3Ra9+Ez2R9w8IasdLohbWqE
zCkYmr0n10BtWQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:24 2025 by rpki-client