Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: UcASJmwJofF4TqhCfCOKM8OlmPUn3zcIA1o1pDCYEnk=
Subject key identifier: FE:6C:5D:69:64:22:7C:A5:9A:1C:CD:AE:42:6F:C1:CF:67:9B:64:CB
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 0194BCAA09141F3648F1E9235D83E4718610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: A2
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: PFwguTAzw+CwxVP4VpLiYCZB5lDhtMVtbB8BKj7yeSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:14:1f:36:48:f1:e9:23:5d:83:e4:71:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=fe6c5d6964227ca59a1ccdae426fc1cf679b64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:12:39:a3:63:05:fb:f7:64:e3:c9:c3:38:
c9:f8:85:15:d0:9a:5c:82:34:fd:6b:da:d4:d6:78:
2b:3d:2e:1b:75:e6:1c:30:89:80:c5:c2:c6:e9:48:
a3:70:c4:e5:d3:50:47:d0:85:92:3b:f1:ac:f0:93:
c8:a8:7d:45:9c:e7:34:e8:09:48:b0:90:84:b5:44:
16:71:95:d4:1f:f9:9c:68:fb:03:e1:4b:35:db:46:
98:e8:67:da:a6:b1:51:30:bc:71:46:94:d8:21:75:
60:cc:0b:a0:a6:99:70:ec:5e:b3:85:46:7a:cd:66:
65:bd:12:b0:34:b2:24:8e:75:59:e6:c9:35:e2:77:
21:9e:cc:28:c6:ac:9b:19:33:ea:a2:6d:0a:2a:81:
7c:6d:27:ba:fd:b5:a1:ec:02:6f:6a:8e:ce:66:53:
23:d1:12:76:49:4c:73:9f:07:c9:94:91:e5:b3:d7:
0f:fe:8e:78:99:5b:d8:27:ca:ee:07:29:cf:ad:8b:
26:aa:1c:5a:ea:fc:39:d4:c7:8c:61:2a:19:e4:49:
d4:c9:3e:e7:19:91:34:6d:18:09:f9:c6:7f:af:12:
8b:53:65:3c:74:17:84:d4:81:5b:ae:78:e3:18:68:
30:72:73:52:59:83:49:00:35:28:08:dc:d0:11:d2:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:5D:69:64:22:7C:A5:9A:1C:CD:AE:42:6F:C1:CF:67:9B:64:CB
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:31:2d:e0:74:8a:cc:25:7d:8d:39:ff:9e:30:66:ca:d4:
a8:70:ea:5f:ea:1a:61:3e:f0:98:91:2e:7e:a6:6d:cb:b9:1c:
0a:63:99:d4:80:e2:cf:9f:3f:91:59:d5:f4:c0:f2:a2:f5:cc:
5e:8a:10:cf:65:08:47:3e:7b:c8:18:91:cf:f6:50:cd:e0:b8:
83:ea:57:d5:e1:f2:d5:19:01:a9:69:bd:45:cd:52:b7:62:14:
67:9b:5b:13:a9:cd:9b:ab:39:7a:fd:70:19:3c:74:60:90:3a:
09:23:2f:ea:c9:59:4e:71:24:79:c4:af:b8:08:92:08:33:4e:
59:4d:41:99:14:d4:34:d8:ff:b7:fe:36:6b:cf:09:85:d3:24:
f9:bf:33:7a:50:40:fd:3e:f7:fc:b8:cc:0f:bb:bd:f0:ce:60:
88:8c:6a:43:83:b2:6e:9c:ec:c6:c5:b2:af:ca:87:cc:ed:07:
e2:5d:1c:48:57:58:0e:8b:10:f9:e0:eb:02:6a:b4:ba:ac:9f:
70:fd:6c:2a:76:36:63:8f:b9:8c:0c:e6:06:db:7c:d5:8c:b3:
cf:8c:17:12:d2:87:1d:82:cd:56:da:ef:aa:18:a8:6c:7c:b0:
dc:bd:2f:ee:f6:93:71:cc:04:71:ff:17:c3:12:4d:66:47:1e:
1b:f8:a7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgkUHzZI8ekjXYPkcYYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw
ODAyMzQwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhmZTZjNWQ2OTY0MjI3Y2E1OWExY2NkYWU0MjZmYzFjZjY3OWI2NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXMSOaNjBfv3ZOPJwzjJ+IUV0Jpc
gjT9a9rU1ngrPS4bdeYcMImAxcLG6UijcMTl01BH0IWSO/Gs8JPIqH1FnOc06AlI
sJCEtUQWcZXUH/mcaPsD4Us120aY6GfaprFRMLxxRpTYIXVgzAugpplw7F6zhUZ6
zWZlvRKwNLIkjnVZ5sk14nchnswoxqybGTPqom0KKoF8bSe6/bWh7AJvao7OZlMj
0RJ2SUxznwfJlJHls9cP/o54mVvYJ8ruBynPrYsmqhxa6vw51MeMYSoZ5EnUyT7n
GZE0bRgJ+cZ/rxKLU2U8dBeE1IFbrnjjGGgwcnNSWYNJADUoCNzQEdLaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5sXWlkInylmhzNrkJvwc9nm2TLMB8GA1UdIwQY
MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt
NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0
LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj74xLeB0
iswlfY05/54wZsrUqHDqX+oaYT7wmJEufqZty7kcCmOZ1IDiz58/kVnV9MDyovXM
XooQz2UIRz57yBiRz/ZQzeC4g+pX1eHy1RkBqWm9Rc1St2IUZ5tbE6nNm6s5ev1w
GTx0YJA6CSMv6slZTnEkecSvuAiSCDNOWU1BmRTUNNj/t/42a88JhdMk+b8zelBA
/T73/LjMD7u98M5giIxqQ4OybpzsxsWyr8qHzO0H4l0cSFdYDosQ+eDrAmq0uqyf
cP1sKnY2Y4+5jAzmBtt81Yyzz4wXEtKHHYLNVtrvqhiobHyw3L0v7vaTccwEcf8X
wxJNZkceG/inxQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client