Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
File: WMTqejhe-jZyQZa0NDlguqR8vrc.mft (raw, json)
Hash identifier: VINWjgP/1WB8PuacGShVGZM1BsunDnnnfjzEwsUa0dg=
Subject key identifier: 79:34:6D:7F:B6:79:60:9A:C3:48:79:CB:5E:D8:18:F4:C9:F5:2B:1C
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 0194BC3C0764DE9DD348FFEC36469F2E9139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
Manifest number: 0D05
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: WMTqejhe-jZyQZa0NDlguqR8vrc.crl (hash: XscZ3Fr1fZsU3lQmT0WD2cgJsjGzsU5BGthBVVLe2Io=)
2: mFnUZao6jHrrA3z87rGBpSOdTUg.roa (hash: 1fZ4TbgHvorfr9usJsO+SOpspxtknAWHwxdZ49h/ILc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:64:de:9d:d3:48:ff:ec:36:46:9f:2e:91:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=79346d7fb679609ac34879cb5ed818f4c9f52b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:4f:bb:a4:ef:78:65:e5:40:a1:3e:e9:63:
50:b3:f0:73:37:a8:01:d3:42:5c:9b:02:17:91:ce:
30:34:ae:12:84:f6:80:fe:a7:18:dd:4b:76:cf:54:
b0:93:b5:a4:ae:03:5f:6d:19:4a:66:10:d8:c9:3e:
4f:18:4c:d3:29:1e:61:45:ed:45:4f:8a:fb:d7:f6:
d2:c4:20:f0:50:3e:04:61:dd:87:ad:85:f2:b2:e0:
49:db:9d:84:aa:8f:02:1b:52:f2:c9:52:85:54:2f:
52:90:17:96:a5:40:28:8d:0f:f5:11:e9:eb:fb:35:
92:56:8b:eb:96:b8:92:2a:cf:32:f4:5f:3d:93:1d:
cc:5d:d0:4e:99:f1:4a:1b:c9:7b:f7:51:bc:ae:34:
9f:88:5d:dd:86:c0:e2:75:4e:40:5e:43:dc:e3:4e:
3f:00:0f:72:dc:1c:22:a6:97:ce:a4:e0:9a:75:56:
98:85:80:0f:e9:83:2c:8e:23:d2:4c:27:b9:a4:e1:
1a:23:99:db:40:d4:b6:ae:a9:33:b6:58:19:f3:c2:
e0:1e:89:a7:b2:3f:66:a3:24:0a:d2:14:c1:d7:53:
37:47:e9:e8:42:a9:1e:20:c1:40:ea:f2:cc:aa:42:
ab:b4:0d:90:1c:50:8b:03:95:cb:7d:e0:fa:c0:bf:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:6D:7F:B6:79:60:9A:C3:48:79:CB:5E:D8:18:F4:C9:F5:2B:1C
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:f1:47:41:71:59:b9:6c:aa:60:56:5d:7e:8b:81:a9:d3:
ae:ac:1e:86:ca:ce:ec:df:b9:e1:08:43:61:2d:44:37:af:e8:
90:3a:d5:0a:b0:9b:bd:62:d0:98:f1:9c:7b:da:05:59:4c:f1:
5f:3f:1d:14:a5:76:fe:9c:61:4e:97:aa:58:e1:f8:fd:f4:7a:
1f:4e:88:43:d1:a1:56:f2:f0:3c:61:5e:bc:d3:6e:33:3c:7e:
31:03:e3:5f:54:37:70:4b:8a:6f:42:fc:31:d0:e2:94:d9:1c:
3c:8f:66:b4:ea:e6:c4:f7:b6:c3:86:16:fa:03:a6:bf:b7:99:
6d:2a:51:c3:4f:a0:d9:4f:d7:18:44:23:06:2d:aa:38:46:d0:
0c:7b:25:91:88:45:07:19:e7:b1:1d:2c:b6:b5:04:95:5b:c4:
a1:cd:87:1f:78:f2:dc:e1:33:49:f0:9d:0d:08:3d:69:12:31:
a9:a2:ae:43:b8:4c:08:21:62:bf:bc:38:e9:f6:06:7a:b4:eb:
4d:51:b1:14:31:17:8f:6a:55:c0:e5:58:6c:ec:1f:bb:f9:47:
23:9e:1d:33:4a:ec:73:3a:0e:90:b2:62:68:54:a1:a3:6d:87:
40:1b:e5:5d:99:30:7d:27:40:08:44:7d:c2:43:12:a5:c1:d9:
cf:c0:57:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAdk3p3TSP/sNkafLpE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YzRlYTdhMzg1ZWZhMzY3MjQxOTZiNDM0Mzk2MGJhYTQ3
Y2JlYjcwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg3OTM0NmQ3ZmI2Nzk2MDlhYzM0ODc5Y2I1ZWQ4MThmNGM5ZjUyYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HdPu6TveGXlQKE+6WNQs/BzN6gB
00JcmwIXkc4wNK4ShPaA/qcY3Ut2z1Swk7WkrgNfbRlKZhDYyT5PGEzTKR5hRe1F
T4r71/bSxCDwUD4EYd2HrYXysuBJ252Eqo8CG1LyyVKFVC9SkBeWpUAojQ/1Eenr
+zWSVovrlriSKs8y9F89kx3MXdBOmfFKG8l791G8rjSfiF3dhsDidU5AXkPc404/
AA9y3BwippfOpOCadVaYhYAP6YMsjiPSTCe5pOEaI5nbQNS2rqkztlgZ88LgHomn
sj9moyQK0hTB11M3R+noQqkeIMFA6vLMqkKrtA2QHFCLA5XLfeD6wL8Z9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk0bX+2eWCaw0h5y17YGPTJ9SscMB8GA1UdIwQY
MBaAFFjE6no4Xvo2ckGWtDQ5YLqkfL63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZmEwMDctMjllOS00ZmM3LTk1NmQt
YjBlOGMzMzA0MGZhLzEvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZmEwMDctMjllOS00ZmM3LTk1NmQtYjBlOGMzMzA0MGZh
LzEvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDPxR0Fx
WblsqmBWXX6LganTrqwehsrO7N+54QhDYS1EN6/okDrVCrCbvWLQmPGce9oFWUzx
Xz8dFKV2/pxhTpeqWOH4/fR6H06IQ9GhVvLwPGFevNNuMzx+MQPjX1Q3cEuKb0L8
MdDilNkcPI9mtOrmxPe2w4YW+gOmv7eZbSpRw0+g2U/XGEQjBi2qOEbQDHslkYhF
BxnnsR0strUElVvEoc2HH3jy3OEzSfCdDQg9aRIxqaKuQ7hMCCFiv7w46fYGerTr
TVGxFDEXj2pVwOVYbOwfu/lHI54dM0rsczoOkLJiaFSho22HQBvlXZkwfSdACER9
wkMSpcHZz8BXqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:50 2025 by rpki-client