Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: IQ2FGs1jrPjHpvecGW7Gf5xBuNV8i8vD+D2xXWl5Oms=
Subject key identifier: 09:F3:77:E4:66:C3:A1:43:88:5D:1F:AB:79:2E:27:16:CE:76:A8:B4
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 0194BBCE35785779F39AF7F08E7B14D9D53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: q+7Vjr+KpGCp4ELx61N4ELynrrvt19qu8QsYb9kqAPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:78:57:79:f3:9a:f7:f0:8e:7b:14:d9:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=09f377e466c3a143885d1fab792e2716ce76a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:9f:b1:b3:2e:e0:0c:8e:8b:25:68:a3:db:
92:91:c6:c2:e8:a7:77:40:11:92:d9:8d:ae:32:89:
16:23:5c:ee:99:35:06:f0:ca:cb:3f:a6:ea:b1:8c:
56:61:ca:8e:4b:24:4e:ed:3c:28:85:dd:a3:56:19:
04:69:59:b7:8f:93:f7:98:57:5b:40:70:c9:d4:98:
1d:ab:d0:db:d3:d9:56:5d:84:93:c9:fe:d6:8f:c8:
ab:68:8f:7b:9e:58:1b:bf:3b:4d:f5:8a:5e:33:95:
d3:b4:1a:bc:18:54:bf:0b:a3:35:fb:2b:35:14:de:
46:2a:57:25:70:ed:65:f0:0c:dc:79:10:e9:d7:8b:
cd:fa:70:54:5a:4a:41:03:6d:87:04:d6:03:9c:46:
9a:3a:fb:f4:39:97:2a:0e:56:dc:65:05:1f:c2:cc:
3c:b2:33:b5:f7:85:76:a7:b7:95:d1:f4:1f:55:6d:
77:b2:82:9f:bd:5a:6a:0f:6e:35:41:f5:d6:89:bf:
13:ad:fd:9e:73:2e:57:9d:4d:f6:ba:8a:78:12:98:
99:00:34:65:b8:a2:a6:1b:1a:0b:0e:f2:b4:9d:5d:
79:59:a6:d4:89:fc:92:82:90:9d:c6:4a:92:9b:e1:
6d:2a:e1:ef:7c:ca:9a:4c:d5:59:24:d4:cb:75:dd:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:77:E4:66:C3:A1:43:88:5D:1F:AB:79:2E:27:16:CE:76:A8:B4
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:9b:b3:d8:0f:e6:9c:06:b7:bb:fd:f0:fe:fa:59:4e:49:
5e:f5:ec:27:28:02:0d:5c:19:0a:9c:c6:3b:50:db:b1:70:95:
f1:98:f8:6c:10:91:9e:64:ec:b0:f7:f7:fb:8d:21:cc:a5:86:
32:64:c2:db:4e:29:f4:1c:03:43:a6:07:6c:4d:5c:39:7f:fa:
51:d3:2e:e8:aa:c2:16:0b:9f:44:ed:85:26:61:46:d2:c2:50:
a5:70:7f:b9:c7:23:e4:24:6c:1a:3a:65:ef:fc:71:23:0a:1d:
3a:e0:1d:f6:1d:01:4e:f0:e0:15:54:38:a3:fa:1a:8c:4e:eb:
39:9b:2e:94:87:48:cb:30:05:da:14:33:6f:80:1e:cf:7b:89:
17:d1:61:01:6d:1f:c9:42:b4:8d:9b:04:3a:e2:46:e6:f4:32:
16:43:84:c9:b8:9b:e5:7a:e1:a9:98:42:c0:64:81:ec:b4:80:
62:8f:c5:6e:69:18:49:b4:8d:97:8a:b8:43:1a:fa:98:c1:d2:
96:0c:af:6e:a3:2b:7e:82:b6:a7:e4:15:66:81:b3:af:f9:fd:
99:50:72:fd:7a:22:3a:23:39:a6:aa:38:05:67:af:7e:10:b5:
90:2c:84:b0:04:45:e7:a6:3e:1d:d2:ce:62:3e:a4:ca:66:2b:
d7:dd:fb:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjV4V3nzmvfwjnsU2dU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EygwOWYzNzdlNDY2YzNhMTQzODg1ZDFmYWI3OTJlMjcxNmNlNzZhOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEOfsbMu4AyOiyVoo9uSkcbC6Kd3
QBGS2Y2uMokWI1zumTUG8MrLP6bqsYxWYcqOSyRO7Twohd2jVhkEaVm3j5P3mFdb
QHDJ1Jgdq9Db09lWXYSTyf7Wj8iraI97nlgbvztN9YpeM5XTtBq8GFS/C6M1+ys1
FN5GKlclcO1l8AzceRDp14vN+nBUWkpBA22HBNYDnEaaOvv0OZcqDlbcZQUfwsw8
sjO194V2p7eV0fQfVW13soKfvVpqD241QfXWib8Trf2ecy5XnU32uop4EpiZADRl
uKKmGxoLDvK0nV15WabUifySgpCdxkqSm+FtKuHvfMqaTNVZJNTLdd3fBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnzd+Rmw6FDiF0fq3kuJxbOdqi0MB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS+bs9gP
5pwGt7v98P76WU5JXvXsJygCDVwZCpzGO1DbsXCV8Zj4bBCRnmTssPf3+40hzKWG
MmTC204p9BwDQ6YHbE1cOX/6UdMu6KrCFgufRO2FJmFG0sJQpXB/uccj5CRsGjpl
7/xxIwodOuAd9h0BTvDgFVQ4o/oajE7rOZsulIdIyzAF2hQzb4Aez3uJF9FhAW0f
yUK0jZsEOuJG5vQyFkOEybib5XrhqZhCwGSB7LSAYo/FbmkYSbSNl4q4Qxr6mMHS
lgyvbqMrfoK2p+QVZoGzr/n9mVBy/XoiOiM5pqo4BWevfhC1kCyEsARF56Y+HdLO
Yj6kymYr1937mw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:39 2025 by rpki-client