Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: K1UrEC6Q+u6UD55ZYsymyHclYlMczHl2iFwRXpt00Jw=
Subject key identifier: 3D:34:66:85:2F:1F:44:CF:17:59:F8:FB:D8:24:E3:B2:0E:99:B4:92
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 0194BCAA2E9775DDAB3BA16048CA41AEA044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: l7tuDoFCuTv4wbi/l//I7w3JuEIko7xutYKS4KuPh2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:97:75:dd:ab:3b:a1:60:48:ca:41:ae:a0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=3d3466852f1f44cf1759f8fbd824e3b20e99b492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:9d:21:78:5e:93:e4:70:ef:fc:81:49:cf:
19:90:8f:66:c3:b4:db:53:d5:e9:04:bf:60:29:04:
27:68:92:2e:fd:2b:bf:74:80:04:57:2d:51:c5:2b:
2f:41:e9:55:9d:4e:99:7f:71:18:8a:ec:96:65:6a:
7f:17:6f:6b:35:82:b7:19:48:86:f9:49:4d:07:77:
11:a5:c6:48:99:ac:d3:35:0f:de:19:ff:93:1e:45:
ab:58:e3:fb:10:d5:93:22:8e:5d:dc:29:b4:c2:12:
fa:54:2e:f4:6c:66:fc:82:55:82:b6:b1:9d:22:bc:
ec:f0:44:17:4e:21:57:23:e7:a3:5a:27:b0:05:ba:
e7:c0:c2:11:25:eb:33:8b:f8:12:56:32:58:d4:99:
09:e4:68:8a:05:b7:db:ac:3e:c6:b7:d5:8b:63:fa:
e5:a1:a0:a0:db:ca:f3:ea:32:55:54:3e:89:fa:57:
ec:0f:d4:e5:14:17:db:c0:12:e3:e8:42:fb:df:66:
fe:10:f3:f8:66:05:3e:64:e3:2b:06:8b:f4:da:e0:
a4:f6:d7:b8:48:38:59:3f:53:66:88:bb:df:9b:b2:
d3:bb:21:77:e0:41:3e:07:1d:ba:6f:a1:6d:99:76:
21:06:8c:b7:cf:5b:5a:03:d6:dc:50:91:67:3d:f8:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:66:85:2F:1F:44:CF:17:59:F8:FB:D8:24:E3:B2:0E:99:B4:92
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:f3:44:46:6f:87:3a:aa:f0:3b:e0:16:56:f1:15:76:fe:
97:4d:9f:2f:9d:79:f2:94:c9:c4:3c:29:da:6e:2b:cb:ad:59:
31:1f:b5:bc:43:0b:a7:10:f0:5a:89:98:2e:2f:d6:61:c6:b5:
8e:1d:64:c8:0a:20:13:6d:fe:59:01:56:82:11:f4:6b:ed:cd:
21:ce:82:e4:ac:3d:1b:89:2b:1d:db:ac:45:63:1b:7d:e1:b6:
cc:2c:17:cf:9a:1b:2f:9d:71:41:e9:f8:10:d0:7a:00:30:db:
6e:e9:a2:ad:81:1c:39:54:cd:dc:29:8f:22:1d:bb:3f:71:8d:
6e:67:5d:16:f2:8d:d8:ed:b3:b9:dc:e7:bf:3b:f4:3e:97:82:
3c:44:32:18:88:84:dc:6f:13:b1:40:65:5b:98:93:40:a3:97:
a9:b9:7f:62:5e:a2:70:20:35:96:56:36:f7:f9:64:bc:43:0a:
83:7b:25:8f:98:5a:8d:b5:c2:25:85:7c:45:29:5d:67:f9:41:
e5:58:43:ca:bf:17:6a:75:f8:fc:63:64:62:c8:a1:e5:1a:3c:
6d:ab:2d:2f:07:d1:62:4b:46:02:95:2c:1a:fd:c7:27:a4:75:
ca:69:7f:c8:26:cb:36:f6:8b:4d:13:67:7a:49:81:ec:96:16:
1a:a2:bb:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qi6Xdd2rO6FgSMpBrqBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYjVmMDVmMTJiNTIwNzY4NjhlZWZjZDE0YWZjZWMxOTJm
ZTJjZjIwHhcNMjUwMTMxMTQwMDU3WhcNMjUwMjAxMTQwMDU3WjAzMTEwLwYDVQQD
EygzZDM0NjY4NTJmMWY0NGNmMTc1OWY4ZmJkODI0ZTNiMjBlOTliNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HmdIXhek+Rw7/yBSc8ZkI9mw7Tb
U9XpBL9gKQQnaJIu/Su/dIAEVy1RxSsvQelVnU6Zf3EYiuyWZWp/F29rNYK3GUiG
+UlNB3cRpcZImazTNQ/eGf+THkWrWOP7ENWTIo5d3Cm0whL6VC70bGb8glWCtrGd
Irzs8EQXTiFXI+ejWiewBbrnwMIRJeszi/gSVjJY1JkJ5GiKBbfbrD7Gt9WLY/rl
oaCg28rz6jJVVD6J+lfsD9TlFBfbwBLj6EL732b+EPP4ZgU+ZOMrBov02uCk9te4
SDhZP1NmiLvfm7LTuyF34EE+Bx26b6FtmXYhBoy3z1taA9bcUJFnPfgPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD00ZoUvH0TPF1n4+9gk47IOmbSSMB8GA1UdIwQY
MBaAFFu18F8StSB2ho7vzRSvzsGS/izyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQt
ZGI2Y2E2ZTRkNGEzLzEvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQtZGI2Y2E2ZTRkNGEz
LzEvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3PzREZv
hzqq8DvgFlbxFXb+l02fL5158pTJxDwp2m4ry61ZMR+1vEMLpxDwWomYLi/WYca1
jh1kyAogE23+WQFWghH0a+3NIc6C5Kw9G4krHdusRWMbfeG2zCwXz5obL51xQen4
ENB6ADDbbumirYEcOVTN3CmPIh27P3GNbmddFvKN2O2zudznvzv0PpeCPEQyGIiE
3G8TsUBlW5iTQKOXqbl/Yl6icCA1llY29/lkvEMKg3slj5hajbXCJYV8RSldZ/lB
5VhDyr8XanX4/GNkYsih5Ro8bastLwfRYktGApUsGv3HJ6R1yml/yCbLNvaLTRNn
ekmB7JYWGqK71Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:27 2025 by rpki-client