Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: rwrj0TdYnsCK3KoWMdPsu45U94je9w6PzSiFF3dQjD0=
Subject key identifier: 62:2E:49:BB:7E:B8:13:C5:2B:09:9B:E9:18:C0:CC:1C:69:AE:66:1E
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 0194BC04BAAFF67DE7126DED2E9204875329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 07B3
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: 78lidCI0WZwQjFrmEzUzjyN9jthzYKXSDFSBUGRfTm4=)
2: zKInD_uJ0MzVuNFZ1nxujfzo5eE.roa (hash: ywKe3EUqcRYUSRMVsCEquUk7tolOVlQ1ahf+CyiEesM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:af:f6:7d:e7:12:6d:ed:2e:92:04:87:53:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=622e49bb7eb813c52b099be918c0cc1c69ae661e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:c8:b2:7c:cb:b2:d7:f9:92:5b:24:34:bb:
d1:aa:af:a1:b9:c5:d0:74:38:32:8d:bc:4d:15:73:
a2:0f:74:fe:61:8a:a4:4a:17:20:aa:dc:96:7f:6f:
38:74:db:51:19:d0:90:e0:b3:84:a0:3c:26:bd:c4:
38:ff:c9:fe:b0:55:c7:97:9e:16:70:9e:9b:5a:2d:
69:11:35:13:c6:e7:a8:db:6f:a6:fa:fe:e3:04:53:
af:0b:b5:a6:70:a2:df:1f:73:45:de:36:83:ff:81:
d8:3e:2a:4e:be:5a:80:6c:20:f1:dd:62:c4:57:21:
9b:48:f0:2e:20:dc:74:1f:57:d0:b7:93:5c:61:06:
55:27:9d:a7:32:8e:7a:ae:3f:3c:db:0e:76:58:52:
fe:4c:4a:8e:b7:48:ea:0f:ac:46:70:dc:0c:af:70:
1b:63:30:85:70:fa:3f:2c:56:ef:a4:b1:17:fe:4e:
b6:5d:a8:64:3f:6d:94:60:4c:87:d7:d7:78:f9:db:
b7:93:6f:b5:cb:b2:40:9e:8d:bc:99:4a:02:33:00:
91:de:7a:48:39:4e:09:8d:b5:e9:86:00:44:05:bd:
87:91:08:d6:ed:47:eb:8d:a1:5f:cb:bf:97:21:61:
ed:d4:ae:93:10:9b:a0:a6:b6:44:36:4a:83:3c:74:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:49:BB:7E:B8:13:C5:2B:09:9B:E9:18:C0:CC:1C:69:AE:66:1E
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:fb:20:97:01:f0:4b:fe:d6:55:2e:03:81:b0:b8:4a:02:
f5:09:7d:b4:a0:06:2d:70:5b:24:d5:08:09:5e:23:1c:97:fb:
a4:5f:1d:a6:d4:b3:ad:04:1e:a1:bd:4a:f4:8c:60:35:1c:e9:
95:0f:e5:ed:28:1f:31:ea:af:bf:3e:17:5d:6f:25:e7:05:3b:
ea:81:7d:83:93:b0:c4:db:e1:c2:b8:e6:47:6b:e7:62:a6:d8:
0d:e3:3a:a6:d2:cf:c8:f9:8a:5a:f0:44:d6:15:f5:9e:19:8d:
7f:2d:69:48:98:4d:a4:f2:57:d7:2d:07:25:e3:28:9a:78:69:
63:61:c4:31:5f:2b:ac:8c:1a:ec:85:31:d8:1d:13:20:4c:77:
37:c7:c2:be:e2:f3:58:42:26:8d:98:a6:ba:79:15:3b:7d:8c:
cb:ba:ff:29:12:ba:8d:ce:f9:69:64:90:7a:92:e3:e7:02:cc:
5f:ad:b6:f3:99:b6:4a:ba:ba:6c:18:b8:34:23:bd:50:99:48:
d9:93:db:73:81:59:b2:02:49:78:be:8e:7f:7f:c8:7a:63:85:
5d:71:14:4c:1d:bc:f4:bd:43:a1:cc:5a:74:b1:62:6c:73:ca:
ad:5e:3d:29:bd:ff:ed:78:b3:dc:7f:5b:ec:61:68:5c:2f:9e:
ff:9d:7a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLqv9n3nEm3tLpIEh1MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NDdmMWY0ZjZiY2IyYTQ3NThhYzhhOTk3YmMxMDgwMDBl
NDE4ZDEwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
Eyg2MjJlNDliYjdlYjgxM2M1MmIwOTliZTkxOGMwY2MxYzY5YWU2NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvujIsnzLstf5klskNLvRqq+hucXQ
dDgyjbxNFXOiD3T+YYqkShcgqtyWf284dNtRGdCQ4LOEoDwmvcQ4/8n+sFXHl54W
cJ6bWi1pETUTxueo22+m+v7jBFOvC7WmcKLfH3NF3jaD/4HYPipOvlqAbCDx3WLE
VyGbSPAuINx0H1fQt5NcYQZVJ52nMo56rj882w52WFL+TEqOt0jqD6xGcNwMr3Ab
YzCFcPo/LFbvpLEX/k62XahkP22UYEyH19d4+du3k2+1y7JAno28mUoCMwCR3npI
OU4JjbXphgBEBb2HkQjW7UfrjaFfy7+XIWHt1K6TEJugprZENkqDPHRtGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIuSbt+uBPFKwmb6RjAzBxprmYeMB8GA1UdIwQY
MBaAFFhH8fT2vLKkdYrIqZe8EIAA5BjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYt
MDY1YmMyOGMyYTUyLzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYtMDY1YmMyOGMyYTUy
LzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbj7IJcB
8Ev+1lUuA4GwuEoC9Ql9tKAGLXBbJNUICV4jHJf7pF8dptSzrQQeob1K9IxgNRzp
lQ/l7SgfMeqvvz4XXW8l5wU76oF9g5OwxNvhwrjmR2vnYqbYDeM6ptLPyPmKWvBE
1hX1nhmNfy1pSJhNpPJX1y0HJeMomnhpY2HEMV8rrIwa7IUx2B0TIEx3N8fCvuLz
WEImjZimunkVO32My7r/KRK6jc75aWSQepLj5wLMX62285m2Srq6bBi4NCO9UJlI
2ZPbc4FZsgJJeL6Of3/IemOFXXEUTB289L1DocxadLFibHPKrV49Kb3/7Xiz3H9b
7GFoXC+e/516lA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:30 2025 by rpki-client