Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: 8JBoJCrBKMUuMIKRLwRtA5A4cn9bxVpIqOP4kOy3/ik=
Subject key identifier: DE:F0:E5:41:32:B4:25:70:44:C1:92:ED:A6:57:EC:4F:C6:6C:9F:88
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 0194BBCEB83138854BF82FD826E928E52FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 0373
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: axjeqNF4XohI6cDssDcjftjuv4+4EouKOa3azXHF9bM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:31:38:85:4b:f8:2f:d8:26:e9:28:e5:2f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=def0e54132b4257044c192eda657ec4fc66c9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:c7:c4:a4:ed:03:14:7b:49:e2:31:12:7b:
4f:d2:9e:b0:16:6a:01:cb:62:57:90:0e:54:29:77:
b5:d0:cc:76:ab:78:fe:20:d6:4d:ed:36:02:00:3e:
34:57:9a:08:f8:05:88:ec:fc:c6:79:cb:1e:db:c8:
a5:b6:0e:78:4e:47:41:a5:aa:6f:ff:53:77:0f:94:
a1:4f:53:6b:5a:73:a1:a6:61:24:5a:20:48:cf:a5:
44:c1:48:35:94:89:ec:cc:4b:6c:98:9c:3a:ca:e2:
b0:8e:11:3f:79:56:e4:3a:92:4c:72:ce:a7:32:00:
e4:f3:10:84:1d:7c:51:7d:e7:e6:a9:7d:24:21:5c:
45:d3:ba:ba:ad:7b:ee:32:74:ea:3c:7c:ef:fb:0d:
27:a1:7b:8c:0f:70:05:5e:60:92:87:c5:64:ea:ad:
2c:c7:00:58:0a:64:22:8a:2e:82:b1:78:b9:09:db:
12:8a:eb:9d:b2:5f:15:ef:cf:d9:56:a0:4f:61:7d:
21:bd:6f:61:70:46:04:8e:b6:c2:46:02:03:7f:67:
b3:20:60:ce:34:a1:a8:55:c7:af:8e:db:d7:93:75:
2c:29:66:f8:9a:cc:e8:92:18:28:3a:72:c8:09:83:
88:1f:51:ac:b5:bc:36:cf:ab:fe:dd:77:12:6c:fe:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F0:E5:41:32:B4:25:70:44:C1:92:ED:A6:57:EC:4F:C6:6C:9F:88
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:72:fe:8c:80:3d:a0:84:7b:10:d5:dc:6b:04:47:7d:cc:
6c:eb:7a:40:8a:e2:8f:9c:a8:cb:d4:00:2f:46:0b:85:63:51:
19:8d:16:cd:18:ee:ba:1f:6e:0a:d2:4a:3b:67:42:51:7b:9b:
33:a4:f6:8f:a4:61:e3:da:96:db:3c:21:b1:a6:54:13:1f:8b:
04:b3:eb:3a:5b:4c:fb:8c:01:46:72:cc:80:2e:55:67:ba:e3:
02:3d:40:5c:d3:63:67:1b:74:54:82:0d:25:a5:1c:9b:c3:31:
24:0a:b9:62:98:a6:fc:95:3e:72:39:a9:9a:f2:e9:e7:a3:2f:
4d:22:bb:fb:d7:31:7b:d1:c9:8f:7b:55:87:6b:f8:9d:8f:47:
3e:ee:5a:c1:52:f3:c9:ef:e5:a6:1c:b9:cf:bb:9a:c8:ea:27:
98:03:b8:73:a5:40:2e:83:4f:54:74:f2:0f:d2:22:bf:e1:d6:
70:58:71:cf:a5:9e:0c:7b:67:07:ce:aa:93:fb:a9:d5:e1:22:
e1:b3:95:7b:94:66:2e:19:0d:f4:6e:19:97:86:bb:b2:22:f3:
95:84:e9:84:cd:6a:e3:75:d1:b4:d9:7c:6b:0f:ae:44:5a:13:
cf:ee:f4:a8:a1:d6:7c:73:24:8e:d4:b3:0e:81:d4:22:1c:73:
9e:ff:ab:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrgxOIVL+C/YJuko5S/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi
N2JhZmYwHhcNMjUwMTMxMTAwMTE0WhcNMjUwMjAxMTAwMTE0WjAzMTEwLwYDVQQD
EyhkZWYwZTU0MTMyYjQyNTcwNDRjMTkyZWRhNjU3ZWM0ZmM2NmM5Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TrHxKTtAxR7SeIxEntP0p6wFmoB
y2JXkA5UKXe10Mx2q3j+INZN7TYCAD40V5oI+AWI7PzGecse28iltg54TkdBpapv
/1N3D5ShT1NrWnOhpmEkWiBIz6VEwUg1lInszEtsmJw6yuKwjhE/eVbkOpJMcs6n
MgDk8xCEHXxRfefmqX0kIVxF07q6rXvuMnTqPHzv+w0noXuMD3AFXmCSh8Vk6q0s
xwBYCmQiii6CsXi5CdsSiuudsl8V78/ZVqBPYX0hvW9hcEYEjrbCRgIDf2ezIGDO
NKGoVcevjtvXk3UsKWb4mszokhgoOnLICYOIH1Gstbw2z6v+3XcSbP7nlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7w5UEytCVwRMGS7aZX7E/GbJ+IMB8GA1UdIwQY
MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt
MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2
LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqJy/oyA
PaCEexDV3GsER33MbOt6QIrij5yoy9QAL0YLhWNRGY0WzRjuuh9uCtJKO2dCUXub
M6T2j6Rh49qW2zwhsaZUEx+LBLPrOltM+4wBRnLMgC5VZ7rjAj1AXNNjZxt0VIIN
JaUcm8MxJAq5Ypim/JU+cjmpmvLp56MvTSK7+9cxe9HJj3tVh2v4nY9HPu5awVLz
ye/lphy5z7uayOonmAO4c6VALoNPVHTyD9Iiv+HWcFhxz6WeDHtnB86qk/up1eEi
4bOVe5RmLhkN9G4Zl4a7siLzlYTphM1q43XRtNl8aw+uRFoTz+70qKHWfHMkjtSz
DoHUIhxznv+rhQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:25 2025 by rpki-client