Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
File: o8_wuehy-XXMo7I7IJEc9nj_9L4.mft (raw, json)
Hash identifier: BIxuSHj25xgqgEVxsFMFHFPrCyO2KhsFSW1jmSbWQ4M=
Subject key identifier: 02:17:8E:CC:67:51:52:BE:A6:A7:80:40:6F:EC:9D:78:C3:24:28:A6
Authority key identifier: A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
Certificate issuer: /CN=a3cff0b9e872f975cca3b23b20911cf678fff4be
Certificate serial: 0195AD35F8215FEA4BFCD6C3EFF438F42B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
Manifest number: D0
Signing time: Wed 19 Mar 2025 07:02:30 +0000
Manifest this update: Wed 19 Mar 2025 07:02:30 +0000
Manifest next update: Thu 20 Mar 2025 07:02:30 +0000
Files and hashes: 1: U5Sf8EIwweiyj9hzrhIGMqactzI.roa (hash: CZTXsy5CHfC3TM0twqbE3UTsU0jwuA9uX3y0Y/QOrU4=)
2: o8_wuehy-XXMo7I7IJEc9nj_9L4.crl (hash: aQ7zW5wWj2QDtMKdXQ4LlJtK3deUQpWEDf1pVzNq2UM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:35:f8:21:5f:ea:4b:fc:d6:c3:ef:f4:38:f4:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cff0b9e872f975cca3b23b20911cf678fff4be
Validity
Not Before: Mar 19 07:02:30 2025 GMT
Not After : Mar 20 07:02:30 2025 GMT
Subject: CN=02178ecc675152bea6a780406fec9d78c32428a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:4a:30:f0:67:22:06:32:64:42:f6:e1:e9:
ea:93:a1:54:a2:d2:0f:79:25:68:9f:a9:f5:11:96:
b0:65:13:df:a3:eb:d9:03:42:ab:7a:f5:e3:33:ed:
12:84:cc:e0:4f:06:d6:51:b2:ed:63:18:b5:22:42:
ad:91:4a:4a:8a:8b:95:e0:15:5e:2a:e4:83:ad:aa:
46:26:46:c5:cf:fb:80:0f:ad:32:3f:da:ba:77:3f:
60:7d:b0:ea:a5:30:dc:b8:cb:0f:a7:eb:25:60:36:
d8:2a:f3:3b:2c:0b:4a:f1:5b:47:47:87:07:19:06:
48:18:08:e7:51:4c:6e:c4:6d:cc:04:06:d6:7c:b6:
84:a2:10:20:ae:c3:00:0b:72:ff:31:50:45:6d:9c:
ec:06:1e:f5:5b:d8:6f:f0:09:69:f3:60:ad:2e:af:
f8:d1:9a:70:54:dd:2f:8a:39:e3:40:c0:12:88:03:
fb:33:dd:b6:a4:df:1a:ca:19:61:82:46:f2:22:32:
57:61:3a:0d:e4:2c:23:59:2c:fd:1d:59:90:b2:a4:
ce:30:e7:68:fb:1e:8b:8d:02:8e:4b:ab:71:db:63:
53:88:9d:c9:d4:f9:e3:34:17:57:ac:d1:11:99:57:
9c:e9:e1:30:d8:01:07:d3:25:0d:3b:70:a4:33:3b:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:17:8E:CC:67:51:52:BE:A6:A7:80:40:6F:EC:9D:78:C3:24:28:A6
X509v3 Authority Key Identifier:
keyid:A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:c2:39:66:21:50:8e:36:6d:a5:80:80:68:33:ec:ae:81:
0b:3d:74:56:a1:cc:a8:ec:1a:f3:5e:dd:a0:54:3f:fa:df:57:
8d:a9:14:da:56:eb:eb:1f:7a:b3:d2:6d:38:9d:81:63:fc:dc:
0c:db:27:74:ee:f6:f4:b0:2e:76:e7:ae:78:5a:a0:83:05:a2:
9c:34:bb:cb:48:e4:57:b0:02:ca:24:d2:18:b4:fc:b6:bb:48:
cd:f9:93:60:10:95:1b:33:41:c6:ae:47:3e:22:8d:11:66:af:
cf:82:3d:8e:7e:dd:17:51:f1:72:b6:56:1b:e8:15:3a:a3:ea:
54:a6:be:e4:21:50:7c:f8:ee:a5:fd:bb:58:d3:f2:13:06:b6:
22:15:c7:66:d4:bf:a2:3a:22:d6:c8:f2:ad:23:ed:7f:cb:e9:
e3:f9:5f:e9:9a:85:1f:39:e4:ef:91:74:44:3f:7c:52:01:a4:
d5:b9:ad:50:bf:e9:94:a9:8b:f4:8d:20:29:3d:2d:4d:23:69:
a1:ab:01:5b:ac:10:8a:a0:7e:b0:45:af:5a:15:8a:c4:e2:8f:
85:de:1f:4e:48:d5:d0:36:c0:3c:7c:6a:85:29:1f:a3:d8:9b:
d3:c5:3f:02:76:84:df:fd:26:d6:60:01:3b:2a:6b:c6:7e:4b:
d2:75:d0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWtNfghX+pL/NbD7/Q49CsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2ZmMGI5ZTg3MmY5NzVjY2EzYjIzYjIwOTExY2Y2Nzhm
ZmY0YmUwHhcNMjUwMzE5MDcwMjMwWhcNMjUwMzIwMDcwMjMwWjAzMTEwLwYDVQQD
EygwMjE3OGVjYzY3NTE1MmJlYTZhNzgwNDA2ZmVjOWQ3OGMzMjQyOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgRKMPBnIgYyZEL24enqk6FUotIP
eSVon6n1EZawZRPfo+vZA0KrevXjM+0ShMzgTwbWUbLtYxi1IkKtkUpKiouV4BVe
KuSDrapGJkbFz/uAD60yP9q6dz9gfbDqpTDcuMsPp+slYDbYKvM7LAtK8VtHR4cH
GQZIGAjnUUxuxG3MBAbWfLaEohAgrsMAC3L/MVBFbZzsBh71W9hv8Alp82CtLq/4
0ZpwVN0vijnjQMASiAP7M922pN8ayhlhgkbyIjJXYToN5CwjWSz9HVmQsqTOMOdo
+x6LjQKOS6tx22NTiJ3J1PnjNBdXrNERmVec6eEw2AEH0yUNO3CkMztYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIXjsxnUVK+pqeAQG/snXjDJCimMB8GA1UdIwQY
MBaAFKPP8Lnocvl1zKOyOyCRHPZ4//S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhfd3VlaHktWFhNbzdJN0lKRWM5bmpfOUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hMWMxNWYtODk5My00NzhkLWE2NmQt
MTI4MTgyMzQyMmU4LzEvbzhfd3VlaHktWFhNbzdJN0lKRWM5bmpfOUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9hMWMxNWYtODk5My00NzhkLWE2NmQtMTI4MTgyMzQyMmU4
LzEvbzhfd3VlaHktWFhNbzdJN0lKRWM5bmpfOUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo3COWYh
UI42baWAgGgz7K6BCz10VqHMqOwa817doFQ/+t9XjakU2lbr6x96s9JtOJ2BY/zc
DNsndO729LAudueueFqggwWinDS7y0jkV7ACyiTSGLT8trtIzfmTYBCVGzNBxq5H
PiKNEWavz4I9jn7dF1HxcrZWG+gVOqPqVKa+5CFQfPjupf27WNPyEwa2IhXHZtS/
ojoi1sjyrSPtf8vp4/lf6ZqFHznk75F0RD98UgGk1bmtUL/plKmL9I0gKT0tTSNp
oasBW6wQiqB+sEWvWhWKxOKPhd4fTkjV0DbAPHxqhSkfo9ib08U/AnaE3/0m1mAB
Oyprxn5L0nXQ6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:19 2025 by rpki-client