Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier: IfFI8axNOLh/r1Fmbb3GS55/YBo6+swCY22wm3E32vY=
Subject key identifier: 9C:C3:47:24:6C:34:E8:9B:4B:8A:3E:9F:C9:B2:22:F5:3B:7D:D5:DE
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 0194BCE0BD5BEC9CAC3C5F1CBFB944BE53CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: opXG39lfWembc2NJ9PJshRqmXAZTsbujEFFtXdG/D1Q=)
2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:5b:ec:9c:ac:3c:5f:1c:bf:b9:44:be:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=9cc347246c34e89b4b8a3e9fc9b222f53b7dd5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:f1:b0:d6:03:5f:6c:10:cd:73:41:40:b7:
d1:ca:b7:f2:5b:52:2a:d8:91:03:fe:47:27:fe:e7:
32:f1:72:2e:74:0e:86:09:18:60:46:d4:b5:cf:d9:
87:ea:a5:4c:95:d6:85:e4:f5:b7:61:33:1f:03:48:
50:59:dd:ac:1e:64:ac:7f:2a:85:7e:8c:d8:d2:9d:
2b:cb:7d:5d:18:45:af:37:7b:e8:8d:0f:da:dc:f5:
c3:69:62:2a:84:29:59:de:53:4a:a5:b2:03:20:4e:
29:ba:09:33:32:15:55:f1:95:6e:d3:c6:4c:6b:e7:
cf:5f:0f:4f:dd:f1:11:b4:78:d5:5d:50:99:b0:89:
33:88:c5:3c:a2:46:0d:be:43:10:6b:62:0a:be:82:
8b:b3:8c:48:58:9f:99:b1:d4:41:27:04:34:3c:bc:
a3:21:db:2e:ab:ba:4f:a3:46:b4:fc:45:00:0f:86:
ee:e2:82:9c:09:f2:a4:e3:ca:e0:8d:36:4e:5a:a1:
ab:da:0d:a5:e1:c3:80:e6:24:de:de:ae:75:d0:5f:
fd:82:f0:4a:2f:ab:99:b9:1d:c3:a7:0f:22:d2:a8:
6a:21:7f:56:2d:43:73:39:9c:64:04:7c:a0:10:6b:
0a:c6:74:1e:0c:e5:a6:02:47:33:3a:ed:38:c2:ca:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:47:24:6C:34:E8:9B:4B:8A:3E:9F:C9:B2:22:F5:3B:7D:D5:DE
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:d7:8d:e3:58:be:c6:18:8c:04:d3:51:36:93:f9:b9:6d:
24:bd:78:09:1d:58:19:79:a4:29:e9:08:32:4e:52:0d:b5:f2:
ee:14:59:dc:bb:02:a6:4b:63:c4:dd:e5:02:8c:06:9e:72:8c:
9a:2c:b3:55:53:ef:49:a2:7b:78:10:a3:d1:ab:64:dd:c4:b7:
e2:2a:c9:f8:cf:d1:ee:a7:99:e4:96:57:cb:18:c1:f3:c8:51:
24:bc:6f:3e:33:74:0c:8a:27:bb:cc:45:84:cc:1c:87:b6:0f:
fb:b4:3d:82:64:06:a4:62:30:59:83:ac:2a:bf:6f:40:f4:8e:
a9:5b:6d:01:47:85:be:72:d0:fb:14:42:2e:c4:e6:e6:b2:62:
85:fd:b5:1d:02:91:92:61:9d:d0:86:6a:95:03:63:32:cf:91:
3d:26:8e:04:62:a0:a3:38:9e:8d:9c:f5:db:1d:ba:03:38:87:
e9:cd:c7:19:8e:71:4a:85:4e:fd:a5:70:28:22:b0:8d:50:7f:
e6:b9:60:d3:60:0c:e8:a7:30:9c:b3:bc:6e:33:cc:cc:82:eb:
df:16:ec:63:d5:37:55:81:d2:90:da:35:7a:63:8b:da:48:fd:
43:fa:db:c2:92:dc:ba:c9:db:cc:2c:32:5e:eb:b9:2d:62:e2:
eb:97:b4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L1b7JysPF8cv7lEvlPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDNlODQ4YzU4YTY0NTFjYTg3NGNkY2ZjMzdlOWJjMGY1
ZDlhYzcwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
Eyg5Y2MzNDcyNDZjMzRlODliNGI4YTNlOWZjOWIyMjJmNTNiN2RkNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZTxsNYDX2wQzXNBQLfRyrfyW1Iq
2JED/kcn/ucy8XIudA6GCRhgRtS1z9mH6qVMldaF5PW3YTMfA0hQWd2sHmSsfyqF
fozY0p0ry31dGEWvN3vojQ/a3PXDaWIqhClZ3lNKpbIDIE4pugkzMhVV8ZVu08ZM
a+fPXw9P3fERtHjVXVCZsIkziMU8okYNvkMQa2IKvoKLs4xIWJ+ZsdRBJwQ0PLyj
Idsuq7pPo0a0/EUAD4bu4oKcCfKk48rgjTZOWqGr2g2l4cOA5iTe3q510F/9gvBK
L6uZuR3Dpw8i0qhqIX9WLUNzOZxkBHygEGsKxnQeDOWmAkczOu04wsp2/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzDRyRsNOibS4o+n8myIvU7fdXeMB8GA1UdIwQY
MBaAFFvT6EjFimRRyodM3Pw36bwPXZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAt
NDg0ZDQ1ODZlZTdiLzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAtNDg0ZDQ1ODZlZTdi
LzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl3XjeNY
vsYYjATTUTaT+bltJL14CR1YGXmkKekIMk5SDbXy7hRZ3LsCpktjxN3lAowGnnKM
miyzVVPvSaJ7eBCj0atk3cS34irJ+M/R7qeZ5JZXyxjB88hRJLxvPjN0DIonu8xF
hMwch7YP+7Q9gmQGpGIwWYOsKr9vQPSOqVttAUeFvnLQ+xRCLsTm5rJihf21HQKR
kmGd0IZqlQNjMs+RPSaOBGKgoziejZz12x26AziH6c3HGY5xSoVO/aVwKCKwjVB/
5rlg02AM6KcwnLO8bjPMzILr3xbsY9U3VYHSkNo1emOL2kj9Q/rbwpLcusnbzCwy
Xuu5LWLi65e01Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:45 2025 by rpki-client