Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: x+pjOqvMVkeQRvB9isAQ0P+Cv4nP6EpikRwzjqsW67Y=
Subject key identifier: 4C:3B:20:F4:AE:81:92:05:44:F8:56:F5:4C:F0:9E:05:12:19:01:41
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 0194BBCE3FCB42D4A449BE1D3B621A3DDB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: KasQpbtJS1LqIme6SBdlHZL+XxR3y/mPXRdT/h/mbSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3f:cb:42:d4:a4:49:be:1d:3b:62:1a:3d:db:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=4c3b20f4ae81920544f856f54cf09e0512190141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:3a:40:8b:2d:32:1e:cf:92:40:46:5d:2d:
48:01:af:86:31:e6:3c:1f:b1:6b:88:bd:c9:28:16:
74:5f:5d:93:07:ff:b3:d3:fc:fd:ba:fe:16:75:8e:
39:57:f7:78:58:95:c2:a7:38:a3:32:9e:39:e2:44:
8b:5f:84:34:59:07:f5:f4:48:cd:ea:e1:37:cb:bb:
35:fe:0d:97:18:7d:af:34:85:11:dd:d8:74:54:b3:
f6:ee:43:86:c6:2c:e7:a5:8c:a3:51:8a:83:db:47:
e1:ed:39:ea:5e:84:1c:a7:c1:26:d2:a8:c7:26:64:
eb:82:c9:99:55:21:d3:97:69:d4:e3:e0:d5:48:d8:
c2:37:37:d8:48:c6:a3:1b:62:5b:d2:37:4a:6b:4d:
9e:dd:ea:f1:af:ee:e4:6d:b1:33:38:60:0d:1c:b1:
25:7d:4a:99:8e:ec:9b:ae:72:32:2c:a9:43:7f:88:
8c:6f:c4:dd:b1:5e:31:45:f1:b4:a9:88:d3:5a:e7:
d0:b3:e6:b6:5a:ce:c2:6e:58:54:ff:04:9a:f0:c2:
2a:0d:a5:af:3a:8e:9e:e0:49:e7:45:d8:ef:a7:e2:
b5:b0:8d:fc:53:91:b5:df:9a:c7:2c:27:02:24:bd:
f6:98:d0:1b:27:e6:00:6b:08:74:14:b4:06:64:f9:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:20:F4:AE:81:92:05:44:F8:56:F5:4C:F0:9E:05:12:19:01:41
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:58:65:8e:78:16:5d:30:cd:31:5b:3d:5c:48:e4:a5:14:
58:6a:59:57:c3:86:d5:9a:a2:27:72:4c:10:1d:3d:b8:1e:b4:
ce:79:a2:99:0b:a4:c3:50:69:c7:47:d5:e8:d1:cc:36:d7:7a:
39:17:0d:b3:f5:39:53:6b:5d:1f:e7:7a:6d:dc:a8:55:21:83:
21:4f:1b:19:83:5a:bf:71:7d:c4:4a:27:17:4e:66:93:b3:92:
bf:71:89:22:9c:3b:bf:f3:ad:b0:f8:d8:54:b4:2c:76:c6:77:
76:f3:d2:aa:32:4e:03:ee:24:8a:6c:78:22:5c:37:7a:81:b6:
cb:88:44:09:83:f2:3f:d8:31:a7:83:9d:2a:84:ee:5d:d1:ed:
7f:0a:56:45:23:18:29:f0:2c:6a:30:aa:9c:5a:e1:d9:71:73:
86:6e:1d:75:96:39:b8:3a:89:85:0a:d6:ee:59:fa:b0:fb:2e:
29:4a:10:e6:74:fd:b6:bd:35:2d:53:7c:fe:58:04:00:b3:09:
f0:99:ed:9f:ff:b4:ba:99:69:af:64:6f:49:bd:26:bc:fc:a2:
48:53:e3:d6:18:5a:af:f2:c2:4c:ec:55:99:05:18:af:97:ce:
27:9a:a3:0e:8d:91:e1:74:b6:97:90:a1:31:87:65:71:55:08:
0b:35:9f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj/LQtSkSb4dO2IaPdtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDQwYjM5Y2Q5OTQ5MDlmNTUwNDEwZGM0Nzk0NWJiNWI0
OTUyZjkwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
Eyg0YzNiMjBmNGFlODE5MjA1NDRmODU2ZjU0Y2YwOWUwNTEyMTkwMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyg6QIstMh7PkkBGXS1IAa+GMeY8
H7FriL3JKBZ0X12TB/+z0/z9uv4WdY45V/d4WJXCpzijMp454kSLX4Q0WQf19EjN
6uE3y7s1/g2XGH2vNIUR3dh0VLP27kOGxiznpYyjUYqD20fh7TnqXoQcp8Em0qjH
JmTrgsmZVSHTl2nU4+DVSNjCNzfYSMajG2Jb0jdKa02e3erxr+7kbbEzOGANHLEl
fUqZjuybrnIyLKlDf4iMb8TdsV4xRfG0qYjTWufQs+a2Ws7CblhU/wSa8MIqDaWv
Oo6e4EnnRdjvp+K1sI38U5G135rHLCcCJL32mNAbJ+YAawh0FLQGZPndvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw7IPSugZIFRPhW9UzwngUSGQFBMB8GA1UdIwQY
MBaAFFsECznNmUkJ9VBBDcR5RbtbSVL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTkt
NTVlNzAyMDliZTMyLzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTktNTVlNzAyMDliZTMy
LzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1xYZY54
Fl0wzTFbPVxI5KUUWGpZV8OG1ZqiJ3JMEB09uB60znmimQukw1Bpx0fV6NHMNtd6
ORcNs/U5U2tdH+d6bdyoVSGDIU8bGYNav3F9xEonF05mk7OSv3GJIpw7v/OtsPjY
VLQsdsZ3dvPSqjJOA+4kimx4Ilw3eoG2y4hECYPyP9gxp4OdKoTuXdHtfwpWRSMY
KfAsajCqnFrh2XFzhm4ddZY5uDqJhQrW7ln6sPsuKUoQ5nT9tr01LVN8/lgEALMJ
8Jntn/+0uplpr2RvSb0mvPyiSFPj1hhar/LCTOxVmQUYr5fOJ5qjDo2R4XS2l5Ch
MYdlcVUICzWfGw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:11 2025 by rpki-client