Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: ic38mxksGsBLxWa74PB2RuQEDAX3PrD5Zgwdfy/V6ss=
Subject key identifier: 2E:C3:06:E7:15:9B:DE:1E:67:B8:BA:ED:DB:59:4A:30:C9:AE:D1:89
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0195E0B4590598B95E2D2D88B950583561BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 14DB
Signing time: Sat 29 Mar 2025 07:01:10 +0000
Manifest this update: Sat 29 Mar 2025 07:01:10 +0000
Manifest next update: Sun 30 Mar 2025 07:01:10 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: DohepxpUEkVULVyy/qAzIWrFVdi736O5sr665HIX4X0=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:59:05:98:b9:5e:2d:2d:88:b9:50:58:35:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Mar 29 07:01:10 2025 GMT
Not After : Mar 30 07:01:10 2025 GMT
Subject: CN=2ec306e7159bde1e67b8baeddb594a30c9aed189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:20:74:c5:d9:0e:a8:4d:34:8d:0d:0b:fb:
92:7e:68:f1:fc:fa:2d:b8:e1:67:35:90:a6:91:2e:
75:e2:cf:29:c2:d6:5c:c3:50:03:1e:fe:06:84:b5:
82:da:ba:21:f5:6b:42:47:a4:4e:0d:2e:4f:c7:23:
d9:77:76:b2:81:1d:fb:8e:5b:1b:3e:f0:73:46:03:
f5:e7:4f:d6:45:b8:ba:37:51:06:53:de:b6:b2:88:
4f:8b:a9:0d:2d:b3:68:f1:5c:78:c7:fe:a4:14:e7:
89:fe:9f:78:99:68:32:bf:8b:91:16:6c:45:8f:65:
05:d5:72:36:e1:41:1f:68:d4:fc:fe:ce:31:bb:b0:
9e:02:f2:9c:16:21:4c:2e:f8:9a:09:ce:9d:f5:f5:
db:d8:de:1f:d6:1a:2f:92:82:19:76:4a:c0:9a:62:
8a:09:3c:94:f4:9c:e0:48:27:96:6a:eb:b2:cd:43:
df:b2:15:cc:6a:35:1e:52:99:91:95:2f:c2:25:9d:
2c:78:60:53:f4:d8:4f:b5:89:51:4d:27:37:61:ef:
4b:f8:4f:26:0e:76:ec:41:58:fb:7e:4b:41:f7:d4:
26:a8:5a:f7:c6:71:96:15:92:30:cd:46:61:5e:ca:
e4:dd:72:64:69:b5:9e:83:82:b9:63:e9:45:e2:d4:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:06:E7:15:9B:DE:1E:67:B8:BA:ED:DB:59:4A:30:C9:AE:D1:89
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:ed:f2:7b:6c:61:e0:1a:86:4e:47:36:69:17:8b:25:d9:
a2:17:fa:ca:ea:60:85:15:e5:19:76:82:b3:bf:de:dd:77:e5:
e1:0c:da:b6:e0:ce:35:af:38:a8:e4:cb:67:f0:8b:38:ed:8f:
f5:46:fd:bd:ec:a9:78:20:75:ec:ad:d8:4a:38:4c:a6:f1:cc:
5b:1d:00:45:a6:14:fc:7b:8b:8d:dd:f6:c7:f7:e7:b1:da:95:
a4:eb:03:0a:d4:6a:12:87:19:b0:7b:a9:08:97:c7:f9:90:e3:
92:80:cb:f2:30:15:43:ca:8e:7d:2d:00:8d:d1:c6:ff:35:bd:
13:2b:96:1e:72:be:ed:5c:f5:3f:9c:4e:8e:55:96:f9:0e:93:
37:a6:49:3d:a5:14:ad:85:9d:17:15:08:a8:76:2f:59:4e:f8:
78:55:76:e7:89:eb:ea:1f:7d:c5:04:9e:bb:67:5c:fb:20:1f:
ed:d5:35:68:d7:f8:61:70:3e:e8:75:57:fb:03:53:70:4b:ba:
cc:74:59:9d:23:53:b3:a5:94:96:6d:43:54:18:ab:4e:ec:55:
b3:3a:98:38:9f:22:34:fc:3c:9e:77:75:d6:05:3c:b3:83:84:
59:04:98:10:2d:19:38:43:bf:fd:c9:a7:cc:3a:31:fc:7a:de:
65:12:3f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtFkFmLleLS2IuVBYNWG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjUwMzI5MDcwMTEwWhcNMjUwMzMwMDcwMTEwWjAzMTEwLwYDVQQD
EygyZWMzMDZlNzE1OWJkZTFlNjdiOGJhZWRkYjU5NGEzMGM5YWVkMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorUgdMXZDqhNNI0NC/uSfmjx/Pot
uOFnNZCmkS514s8pwtZcw1ADHv4GhLWC2roh9WtCR6RODS5PxyPZd3aygR37jlsb
PvBzRgP150/WRbi6N1EGU962sohPi6kNLbNo8Vx4x/6kFOeJ/p94mWgyv4uRFmxF
j2UF1XI24UEfaNT8/s4xu7CeAvKcFiFMLviaCc6d9fXb2N4f1hovkoIZdkrAmmKK
CTyU9JzgSCeWauuyzUPfshXMajUeUpmRlS/CJZ0seGBT9NhPtYlRTSc3Ye9L+E8m
DnbsQVj7fktB99QmqFr3xnGWFZIwzUZhXsrk3XJkabWeg4K5Y+lF4tQvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7DBucVm94eZ7i67dtZSjDJrtGJMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPPt8nts
YeAahk5HNmkXiyXZohf6yupghRXlGXaCs7/e3Xfl4QzatuDONa84qOTLZ/CLOO2P
9Ub9veypeCB17K3YSjhMpvHMWx0ARaYU/HuLjd32x/fnsdqVpOsDCtRqEocZsHup
CJfH+ZDjkoDL8jAVQ8qOfS0AjdHG/zW9EyuWHnK+7Vz1P5xOjlWW+Q6TN6ZJPaUU
rYWdFxUIqHYvWU74eFV254nr6h99xQSeu2dc+yAf7dU1aNf4YXA+6HVX+wNTcEu6
zHRZnSNTs6WUlm1DVBirTuxVszqYOJ8iNPw8nnd11gU8s4OEWQSYEC0ZOEO//cmn
zDox/HreZRI/Eg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:05 2025 by rpki-client