Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: NiglLVpNTBdby6KffLwPHmv6u9h8GY1+O1292FifvfA=
Subject key identifier: 84:0D:A0:2C:80:E1:25:01:8F:73:87:1E:1B:47:DE:8F:18:DA:54:DF
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 0194BCA9BE1773E81995435322FFCED3E568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0609
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: /T1fgCj3dZ/pMpWnGDZIO9m6VqdPc79kfIMyrZCbNrk=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:17:73:e8:19:95:43:53:22:ff:ce:d3:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=840da02c80e125018f73871e1b47de8f18da54df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:7f:a4:5e:be:a3:93:e7:8a:64:cc:fb:49:
48:60:09:32:6d:a8:a2:54:fb:59:67:a9:dc:1d:92:
25:95:e1:3a:dd:5d:55:7b:62:81:4f:b7:e9:56:c7:
0e:8e:f2:d2:6a:37:8b:fd:4b:b6:7d:35:f4:dc:f2:
a3:1d:b6:6b:c6:e5:bb:22:9d:2e:19:b6:6d:01:ab:
77:e1:72:b1:1d:f2:4c:87:1e:3f:ec:42:c8:b4:16:
5c:ef:ac:25:83:3a:02:20:32:a3:53:0e:28:22:26:
86:e7:30:68:42:82:79:90:d3:06:d8:03:c2:fa:dc:
e7:39:95:6f:0e:90:d8:f8:9e:34:6c:2a:28:18:70:
19:47:94:ea:40:b5:46:90:f0:fa:36:ca:94:4c:d9:
a2:f1:5f:bb:fd:a8:b7:91:ae:b4:4f:69:b4:a5:9b:
15:07:a0:09:a2:8d:ba:54:9b:9c:cf:23:a4:a0:95:
f1:ec:b3:6c:1e:ad:f1:3a:5e:3d:8c:b3:5c:e0:5c:
4c:54:72:aa:80:be:bc:0b:ce:4a:17:71:59:14:b1:
f9:9b:70:97:4a:71:a2:0a:36:83:97:ea:5f:15:44:
43:55:0c:32:9b:d4:77:2a:e6:e6:a8:07:2e:f4:6b:
80:5e:df:9d:05:01:39:8f:1b:ab:08:90:32:fa:dc:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:A0:2C:80:E1:25:01:8F:73:87:1E:1B:47:DE:8F:18:DA:54:DF
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:36:f0:cf:1b:9b:9c:ab:b7:16:a4:91:61:d6:e6:fd:1e:15:
00:b0:f9:f9:7e:6a:08:6d:a8:38:e9:40:4f:d3:7b:e7:a0:63:
0d:5b:ce:10:c8:f3:46:e2:51:ed:0e:58:7c:82:d5:ef:e1:9d:
49:54:cb:2e:d9:03:09:1f:0c:e1:88:17:23:ab:86:f9:c0:b1:
54:9a:09:d2:68:c2:bd:cc:f4:74:5d:48:40:52:9b:6f:da:91:
7e:95:3d:81:71:6e:07:de:76:11:23:0c:5a:73:56:7e:26:6f:
f3:5f:94:92:a6:25:cf:43:2f:59:d3:a4:49:61:8c:10:10:52:
fd:2e:80:33:76:ac:eb:76:65:9d:e4:e5:95:91:2c:cb:60:46:
19:46:c1:3e:f3:df:77:b7:ad:9e:d7:d6:3d:98:f6:41:a8:b1:
a9:5f:d3:a5:3e:c4:42:98:df:fc:b9:96:fc:10:38:07:1a:43:
f0:13:05:90:88:01:3d:5a:8c:96:92:36:58:56:77:2b:64:c7:
03:8e:d7:a5:6a:d2:f2:42:45:29:c9:9e:cf:2e:fb:18:1f:09:
4e:d0:6b:1e:b7:ca:64:8f:99:f7:36:47:52:03:d5:1d:c0:ab:
71:21:aa:5e:fd:a7:98:4c:e6:07:69:88:45:fd:1c:9c:a6:e9:
88:11:42:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qb4Xc+gZlUNTIv/O0+VoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx
ODk0MDMwHhcNMjUwMTMxMTQwMDI4WhcNMjUwMjAxMTQwMDI4WjAzMTEwLwYDVQQD
Eyg4NDBkYTAyYzgwZTEyNTAxOGY3Mzg3MWUxYjQ3ZGU4ZjE4ZGE1NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnh/pF6+o5PnimTM+0lIYAkybaii
VPtZZ6ncHZIlleE63V1Ve2KBT7fpVscOjvLSajeL/Uu2fTX03PKjHbZrxuW7Ip0u
GbZtAat34XKxHfJMhx4/7ELItBZc76wlgzoCIDKjUw4oIiaG5zBoQoJ5kNMG2APC
+tznOZVvDpDY+J40bCooGHAZR5TqQLVGkPD6NsqUTNmi8V+7/ai3ka60T2m0pZsV
B6AJoo26VJuczyOkoJXx7LNsHq3xOl49jLNc4FxMVHKqgL68C85KF3FZFLH5m3CX
SnGiCjaDl+pfFURDVQwym9R3KubmqAcu9GuAXt+dBQE5jxurCJAy+tyb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQNoCyA4SUBj3OHHhtH3o8Y2lTfMB8GA1UdIwQY
MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt
Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz
LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzbwzxub
nKu3FqSRYdbm/R4VALD5+X5qCG2oOOlAT9N756BjDVvOEMjzRuJR7Q5YfILV7+Gd
SVTLLtkDCR8M4YgXI6uG+cCxVJoJ0mjCvcz0dF1IQFKbb9qRfpU9gXFuB952ESMM
WnNWfiZv81+UkqYlz0MvWdOkSWGMEBBS/S6AM3as63ZlneTllZEsy2BGGUbBPvPf
d7etntfWPZj2QaixqV/TpT7EQpjf/LmW/BA4BxpD8BMFkIgBPVqMlpI2WFZ3K2TH
A47XpWrS8kJFKcmezy77GB8JTtBrHrfKZI+Z9zZHUgPVHcCrcSGqXv2nmEzmB2mI
Rf0cnKbpiBFCnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:54:02 2025 by rpki-client