Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: Tdv62FE/9hDryw5Tfvg+rdM6wq6QAkZ+k9J6e8VogQA=
Subject key identifier: EB:72:91:30:C1:86:D8:80:0B:DF:B4:34:91:3C:44:94:D2:8B:42:71
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 0194BC72F84B86EBE2CD58EC7831F0536B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: bMEOBwrz8XnCL/UpYJVagiyqkdWSMZcLyHywQta2Dyc=)
2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:4b:86:eb:e2:cd:58:ec:78:31:f0:53:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=eb729130c186d8800bdfb434913c4494d28b4271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:52:7c:70:c6:ab:cb:8b:f8:64:3c:47:51:
10:ae:fb:1f:ae:34:71:a5:aa:0a:ce:74:72:94:2a:
fa:de:32:6f:df:b6:38:70:be:f3:f3:60:e0:a9:cf:
f7:be:2c:b7:d4:74:ad:f5:6f:e5:8a:fb:84:82:83:
75:86:bc:86:42:a2:90:5d:80:28:e8:65:5f:6e:a1:
7d:20:c0:f9:18:54:7c:a8:7c:5b:07:2d:ae:eb:69:
ef:76:89:f7:d0:64:16:3e:7a:4f:85:29:3f:90:13:
62:eb:86:c3:6a:3f:a7:de:36:d5:b5:61:f8:6c:95:
87:3f:bd:eb:11:1c:0e:b5:e4:d4:f3:b7:21:54:bc:
e0:26:d0:91:d2:65:22:30:01:b7:a2:52:ea:e4:1a:
2f:08:ed:59:44:49:00:42:9f:1f:8f:c6:fd:c2:ca:
5e:d2:b6:24:c5:8c:02:48:f1:d5:76:98:b6:25:ac:
1f:9f:9d:cb:50:17:60:28:1d:b0:6b:07:62:e0:7d:
70:66:6d:5b:24:00:e5:d8:4b:f2:4a:6e:96:40:45:
98:fe:64:c9:29:7f:74:ee:f6:66:dd:ea:23:d3:59:
92:0e:cb:5a:58:0c:6f:eb:f2:ad:22:78:74:cd:fb:
1d:8c:06:49:3a:dd:01:09:c1:1e:2c:55:be:b7:bc:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:91:30:C1:86:D8:80:0B:DF:B4:34:91:3C:44:94:D2:8B:42:71
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1b:f6:23:12:0d:08:8a:1c:b2:45:87:69:6d:40:a4:c3:f4:
5f:df:73:7b:75:eb:36:94:7a:47:ca:d5:94:d8:84:35:cb:8a:
b1:2b:3f:10:55:64:66:d6:4f:d5:8b:d1:c5:4b:b2:0f:94:ad:
a3:c0:3c:00:cc:82:e8:a4:20:54:eb:a3:ae:f8:98:67:ab:12:
94:fd:34:db:80:a3:d6:03:0a:d8:76:55:8f:b1:69:f3:f3:c1:
3a:1e:82:9a:ea:a3:8a:49:32:06:2a:89:7c:b1:66:a4:dd:6a:
6f:81:da:8c:63:c0:d4:35:a9:26:d2:84:54:e8:9a:e2:0e:49:
d8:32:c4:b1:82:e0:20:2e:0e:5d:d2:75:0e:36:69:61:31:e8:
03:36:ca:86:af:e9:63:e8:ef:c7:ba:13:f7:97:e8:91:de:0a:
4e:b5:ad:da:f4:b9:08:4c:89:1f:ef:b6:26:9e:1f:4f:93:20:
c9:7d:1d:44:78:fe:f0:a6:ec:4a:fc:69:19:c1:ef:7c:80:76:
52:b6:5c:a9:e1:b3:5f:13:c9:ef:62:9d:fd:6f:8b:e1:88:a1:
84:85:69:74:9f:bd:27:f5:7b:cd:b1:b1:0d:bf:60:6e:49:17:
7a:aa:52:2f:3e:80:21:dc:c1:bb:78:d8:d8:7c:e0:75:24:35:
76:93:e7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvhLhuvizVjseDHwU2toMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjUwMTMxMTMwMDM4WhcNMjUwMjAxMTMwMDM4WjAzMTEwLwYDVQQD
EyhlYjcyOTEzMGMxODZkODgwMGJkZmI0MzQ5MTNjNDQ5NGQyOGI0MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnltSfHDGq8uL+GQ8R1EQrvsfrjRx
paoKznRylCr63jJv37Y4cL7z82Dgqc/3viy31HSt9W/livuEgoN1hryGQqKQXYAo
6GVfbqF9IMD5GFR8qHxbBy2u62nvdon30GQWPnpPhSk/kBNi64bDaj+n3jbVtWH4
bJWHP73rERwOteTU87chVLzgJtCR0mUiMAG3olLq5BovCO1ZREkAQp8fj8b9wspe
0rYkxYwCSPHVdpi2Jawfn53LUBdgKB2wawdi4H1wZm1bJADl2EvySm6WQEWY/mTJ
KX907vZm3eoj01mSDstaWAxv6/KtInh0zfsdjAZJOt0BCcEeLFW+t7z82QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtykTDBhtiAC9+0NJE8RJTSi0JxMB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRv2IxIN
CIocskWHaW1ApMP0X99ze3XrNpR6R8rVlNiENcuKsSs/EFVkZtZP1YvRxUuyD5St
o8A8AMyC6KQgVOujrviYZ6sSlP0024Cj1gMK2HZVj7Fp8/PBOh6CmuqjikkyBiqJ
fLFmpN1qb4HajGPA1DWpJtKEVOia4g5J2DLEsYLgIC4OXdJ1DjZpYTHoAzbKhq/p
Y+jvx7oT95fokd4KTrWt2vS5CEyJH++2Jp4fT5MgyX0dRHj+8KbsSvxpGcHvfIB2
UrZcqeGzXxPJ72Kd/W+L4YihhIVpdJ+9J/V7zbGxDb9gbkkXeqpSLz6AIdzBu3jY
2HzgdSQ1dpPnIw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:59 2025 by rpki-client