Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: MriRivH+fS8LsQhPvRi2qWchjJbcW5FRAdbHrBYoSas=
Subject key identifier: B2:C5:4B:E0:03:F2:ED:A7:28:9F:69:21:D7:4D:8D:E0:82:C5:C7:C6
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 0194BD4EAED2B94D7F3B36BDC0415C8BBD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 12E0
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: fGZPlGh5+YZh0yHm1Qi/g2cUhz+Tl/6xug1E7M9R06I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:d2:b9:4d:7f:3b:36:bd:c0:41:5c:8b:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=b2c54be003f2eda7289f6921d74d8de082c5c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:91:14:97:af:3e:54:ec:2f:ce:5d:c8:e9:
99:47:f1:05:df:40:11:55:7e:22:9d:ef:36:62:b9:
81:af:07:6e:70:b6:ca:df:f2:5f:97:69:37:05:df:
06:92:ab:cf:a7:20:68:91:ba:73:2a:b0:62:27:46:
d8:56:fa:5d:ec:28:13:3b:6d:e1:f2:21:92:4b:a4:
2c:23:2a:8b:43:e4:39:ed:40:3e:88:41:39:a3:0e:
e3:0c:11:b7:dd:30:07:08:32:d7:78:8e:9b:67:47:
bb:54:71:e8:4e:9f:2d:89:a3:5c:ae:9d:ff:75:ae:
22:e4:98:f4:62:05:17:bd:97:b3:f0:25:e2:e2:80:
48:53:87:e4:3d:f5:ee:b4:48:9f:25:90:d3:fa:fc:
36:05:c1:d7:15:2a:1c:2d:a9:43:d8:f2:48:5c:a0:
79:f7:1a:8a:33:21:3d:36:73:d4:b4:c0:eb:d4:dc:
2e:c2:7e:e9:ce:4b:4f:34:55:62:b8:04:78:69:7f:
e4:ef:b3:01:93:56:a6:13:0d:08:c9:93:2c:df:f1:
a7:d9:3a:ca:a8:0e:a9:af:70:ff:be:44:88:b8:19:
c1:14:84:50:0a:52:26:32:aa:71:fd:58:4f:50:29:
62:f0:81:b8:fb:6b:9d:82:17:08:97:22:f0:c8:29:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:4B:E0:03:F2:ED:A7:28:9F:69:21:D7:4D:8D:E0:82:C5:C7:C6
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c6:e4:4a:e5:d2:ba:85:c9:0c:22:55:f1:10:62:7a:b0:f9:
34:5b:e9:52:34:84:b2:85:c5:c0:60:71:a1:95:92:89:7d:bf:
5e:ca:3a:2d:f2:fc:bf:52:6b:81:72:ee:87:8f:c7:87:fd:ab:
2e:4f:f3:56:c2:0c:10:13:a6:4f:6f:e7:2f:29:6b:b1:83:22:
f5:a0:0e:8d:9c:6b:b8:cc:42:44:cf:ac:ea:86:a1:6c:d4:cb:
17:8a:d3:35:56:32:37:c8:59:9a:65:af:bf:22:8b:63:e9:73:
5c:f4:16:28:03:ca:32:27:71:60:8a:d3:49:13:4b:3e:b0:a6:
25:4b:6f:c0:2a:ce:9f:27:df:26:bc:ed:1a:95:ef:c1:d7:6d:
8a:e1:ad:be:26:a6:1e:cb:6f:03:f3:77:5a:7d:55:38:b8:12:
24:ff:d4:75:33:8b:ee:8c:b3:fc:1e:80:06:45:f2:66:e2:9b:
39:ef:20:f4:82:09:4e:0d:92:58:51:fa:7c:8e:6b:38:17:45:
e1:34:1c:3e:6f:78:e8:4c:68:1a:51:b0:c3:3c:12:6e:f4:35:
2a:b5:c3:5b:90:01:a8:d6:44:08:cb:c0:ab:ff:fd:e4:f0:06:
f1:0a:47:df:6f:e2:08:a7:b1:a3:b6:47:54:86:51:09:87:a3:
44:ce:53:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tq7SuU1/Oza9wEFci71VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjUwMTMxMTcwMDM3WhcNMjUwMjAxMTcwMDM3WjAzMTEwLwYDVQQD
EyhiMmM1NGJlMDAzZjJlZGE3Mjg5ZjY5MjFkNzRkOGRlMDgyYzVjN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFyRFJevPlTsL85dyOmZR/EF30AR
VX4ine82YrmBrwducLbK3/Jfl2k3Bd8GkqvPpyBokbpzKrBiJ0bYVvpd7CgTO23h
8iGSS6QsIyqLQ+Q57UA+iEE5ow7jDBG33TAHCDLXeI6bZ0e7VHHoTp8tiaNcrp3/
da4i5Jj0YgUXvZez8CXi4oBIU4fkPfXutEifJZDT+vw2BcHXFSocLalD2PJIXKB5
9xqKMyE9NnPUtMDr1Nwuwn7pzktPNFViuAR4aX/k77MBk1amEw0IyZMs3/Gn2TrK
qA6pr3D/vkSIuBnBFIRQClImMqpx/VhPUCli8IG4+2udghcIlyLwyClonwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLFS+AD8u2nKJ9pIddNjeCCxcfGMB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsbkSuXS
uoXJDCJV8RBierD5NFvpUjSEsoXFwGBxoZWSiX2/Xso6LfL8v1JrgXLuh4/Hh/2r
Lk/zVsIMEBOmT2/nLylrsYMi9aAOjZxruMxCRM+s6oahbNTLF4rTNVYyN8hZmmWv
vyKLY+lzXPQWKAPKMidxYIrTSRNLPrCmJUtvwCrOnyffJrztGpXvwddtiuGtviam
HstvA/N3Wn1VOLgSJP/UdTOL7oyz/B6ABkXyZuKbOe8g9IIJTg2SWFH6fI5rOBdF
4TQcPm946ExoGlGwwzwSbvQ1KrXDW5ABqNZECMvAq//95PAG8QpH32/iCKexo7ZH
VIZRCYejRM5ThQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client