Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File: WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier: o7+2GnDtpaj04pP957hxPiJewD9O2GFV96+iA8xRJng=
Subject key identifier: 5E:4D:8D:BF:35:0C:0A:7C:2E:91:2B:7F:30:5A:67:79:B0:FA:78:4E
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 0195E15937DA02B485E0E756B525EF16DB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number: 06B4
Signing time: Sat 29 Mar 2025 10:01:15 +0000
Manifest this update: Sat 29 Mar 2025 10:01:15 +0000
Manifest next update: Sun 30 Mar 2025 10:01:15 +0000
Files and hashes: 1: 3QQtgp_hLxG713VpJVDxkBcKrLQ.roa (hash: zgs4StoBXNZwHgMUh0gcgmwGEv4iOGkdSV2RIbo/as0=)
2: 3quFwzbtQXLlMwPInkFxljyXrpU.roa (hash: aHmEm1YrxyrbyeHbPRYWUXnitX3r2T2VQ0K9cGALSkw=)
3: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: wtrPC9Vv6TKDcv9eM0jgNx9DLCj5K+Iaxva253uxrjA=)
4: h9aLFgY_ex-s0j8okseymFPj2D8.roa (hash: iuIODyY6gzkvQgktS5Bji1LYn/ga1qjWeiBkn1Y2NVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:37:da:02:b4:85:e0:e7:56:b5:25:ef:16:db:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Mar 29 10:01:15 2025 GMT
Not After : Mar 30 10:01:15 2025 GMT
Subject: CN=5e4d8dbf350c0a7c2e912b7f305a6779b0fa784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e2:0d:14:b0:48:fc:87:0e:59:eb:b9:e6:
a9:2e:bc:a7:9c:e6:0c:43:e5:bd:46:df:36:35:ba:
ff:fe:40:ee:e4:c2:ca:60:d3:f2:9d:4c:12:4a:d0:
05:c3:b9:e5:8e:9f:cf:4a:4f:93:1c:84:a0:04:a5:
1a:89:4e:c4:de:3e:30:09:77:14:21:98:c6:95:25:
72:a9:e8:dc:e7:7c:ad:e3:a9:ae:b9:a4:08:ac:02:
75:25:67:31:20:27:d8:70:d5:67:c7:7d:1d:41:3b:
33:68:47:f6:14:d8:33:19:e7:b6:07:ec:8b:54:0b:
fc:96:c1:2f:06:d4:68:aa:cf:17:5e:55:d8:22:68:
a0:6e:c2:ce:40:d6:a5:42:46:ed:af:f7:53:54:96:
d7:9f:8b:a3:ba:03:c6:15:cf:cc:1e:42:e6:a8:12:
d0:50:bb:3c:10:ad:03:29:fb:4a:8c:65:2a:da:dd:
3f:65:e4:1d:d2:9b:29:2d:b8:ca:d2:ec:7a:da:99:
8d:48:de:b1:a4:bb:a8:43:95:5c:08:d5:8b:3e:ee:
ef:a8:23:ac:7a:18:04:9d:75:38:4b:e1:c2:48:ac:
e8:38:bd:95:97:b9:4d:c2:5f:4e:84:49:06:63:ea:
28:45:46:51:69:fc:57:8d:2e:40:67:1f:0c:32:4c:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4D:8D:BF:35:0C:0A:7C:2E:91:2B:7F:30:5A:67:79:B0:FA:78:4E
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fd:29:8c:fb:a0:9d:47:cb:24:78:46:fb:b9:f1:92:9c:49:
1c:0c:f7:62:cd:24:22:6b:d2:04:b7:ae:99:7c:17:43:da:7c:
ea:9d:6e:7c:11:4f:90:3f:11:6b:b1:43:00:ae:3a:3f:32:fc:
ec:3f:8b:39:62:66:2a:6d:86:c4:dd:65:71:36:9f:d7:00:b3:
82:30:e6:24:85:b5:6b:a3:fe:9f:59:cd:eb:0b:a1:ee:77:d7:
17:02:d9:c7:3b:06:94:12:8c:55:74:99:e0:0c:72:7c:99:db:
98:d0:0c:16:16:86:e6:5a:10:61:bb:e6:4f:9c:ba:41:cc:78:
34:ac:db:f9:43:9f:f5:da:60:02:4f:bd:4b:1b:76:a3:df:a9:
75:f2:86:87:ef:26:fa:d7:c5:05:53:7a:e4:86:d7:db:50:c1:
90:1d:29:19:0c:f5:6b:da:7c:2c:90:bd:cf:cc:6f:d0:d4:ef:
7e:0a:1f:64:ac:dc:68:ff:50:66:3e:0b:d6:77:87:8b:6d:15:
cc:ee:c6:83:7c:e3:0c:1a:0d:8f:4c:98:56:3c:50:6b:7a:0c:
ee:46:df:b7:f7:94:82:1a:5f:f3:6e:ea:d9:7a:a4:50:bc:a6:
4a:00:55:a6:f3:c3:68:38:cc:c9:73:dd:bd:29:cc:cf:69:2b:
4f:9c:4e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWTfaArSF4OdWtSXvFtuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy
ODAxZmIwHhcNMjUwMzI5MTAwMTE1WhcNMjUwMzMwMTAwMTE1WjAzMTEwLwYDVQQD
Eyg1ZTRkOGRiZjM1MGMwYTdjMmU5MTJiN2YzMDVhNjc3OWIwZmE3ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAbiDRSwSPyHDlnrueapLrynnOYM
Q+W9Rt82Nbr//kDu5MLKYNPynUwSStAFw7nljp/PSk+THISgBKUaiU7E3j4wCXcU
IZjGlSVyqejc53yt46muuaQIrAJ1JWcxICfYcNVnx30dQTszaEf2FNgzGee2B+yL
VAv8lsEvBtRoqs8XXlXYImigbsLOQNalQkbtr/dTVJbXn4ujugPGFc/MHkLmqBLQ
ULs8EK0DKftKjGUq2t0/ZeQd0pspLbjK0ux62pmNSN6xpLuoQ5VcCNWLPu7vqCOs
ehgEnXU4S+HCSKzoOL2Vl7lNwl9OhEkGY+ooRUZRafxXjS5AZx8MMkyUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5Njb81DAp8LpErfzBaZ3mw+nhOMB8GA1UdIwQY
MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct
YjJmZDliZjA5N2Y4LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4
LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/0pjPug
nUfLJHhG+7nxkpxJHAz3Ys0kImvSBLeumXwXQ9p86p1ufBFPkD8Ra7FDAK46PzL8
7D+LOWJmKm2GxN1lcTaf1wCzgjDmJIW1a6P+n1nN6wuh7nfXFwLZxzsGlBKMVXSZ
4AxyfJnbmNAMFhaG5loQYbvmT5y6Qcx4NKzb+UOf9dpgAk+9Sxt2o9+pdfKGh+8m
+tfFBVN65IbX21DBkB0pGQz1a9p8LJC9z8xv0NTvfgofZKzcaP9QZj4L1neHi20V
zO7Gg3zjDBoNj0yYVjxQa3oM7kbft/eUghpf827q2XqkULymSgBVpvPDaDjMyXPd
vSnMz2krT5xOcg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:59 2025 by rpki-client