Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
File: W-rKvp_cy7VH7V6plEr9ed3zUZc.mft (raw, json)
Hash identifier: csXqrsFdypu38vAIo0YCcn5nMxE+MOTnsHzGjjCXfTA=
Subject key identifier: 5A:B7:63:4E:CE:CD:7D:60:C4:A4:8B:26:FE:36:A3:01:BB:77:0F:FF
Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
Certificate issuer: /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Certificate serial: 0195E0B45FD76AF098B1A7DE57EC2E77B04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
Manifest number: 0885
Signing time: Sat 29 Mar 2025 07:01:12 +0000
Manifest this update: Sat 29 Mar 2025 07:01:12 +0000
Manifest next update: Sun 30 Mar 2025 07:01:12 +0000
Files and hashes: 1: Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa (hash: DyvJm1MsNLqanW4GtBFAMBVCCMC4YL7VCe+zTPcnzYg=)
2: W-rKvp_cy7VH7V6plEr9ed3zUZc.crl (hash: zGfuVTvpWZhCPQJ4vSwVdsOtB4Ulw2Yb+bEscUIJfD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:5f:d7:6a:f0:98:b1:a7:de:57:ec:2e:77:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Validity
Not Before: Mar 29 07:01:12 2025 GMT
Not After : Mar 30 07:01:12 2025 GMT
Subject: CN=5ab7634ececd7d60c4a48b26fe36a301bb770fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:e8:70:f7:9d:72:dc:f1:9e:6c:f8:2b:9a:
ce:5b:f9:78:87:34:0e:36:d7:34:22:e4:64:57:b9:
f6:9c:5d:74:6b:0a:09:6a:25:db:7c:2b:0e:c9:7d:
b0:91:5c:d3:5d:c6:42:f1:a2:21:15:11:ff:25:61:
57:66:76:80:64:1e:31:04:6a:0e:60:47:e7:d4:62:
a4:c6:1c:1d:b5:c4:83:09:f5:8e:c9:a2:27:67:74:
b4:5a:2a:86:99:e4:b2:74:63:16:c9:ce:22:58:b4:
de:9e:52:13:6f:82:c0:ed:6a:94:b6:a4:7e:85:2b:
4b:d8:6c:a9:4a:3a:53:e9:66:4a:ad:2e:39:35:bb:
3d:a4:50:2d:99:33:1a:c8:39:ba:66:ac:d7:90:29:
4f:ef:ad:05:d9:cc:87:c5:8c:c9:4e:47:7c:40:1f:
21:e9:45:2a:0e:5f:06:e4:8c:0f:0f:8b:f0:a9:5e:
ee:f8:e0:e0:81:28:05:7a:4a:9f:c7:56:e3:9a:7b:
72:a7:59:db:56:a3:3a:80:bc:21:68:2f:66:03:7b:
64:5e:55:4b:a9:81:06:94:27:a6:17:f8:53:85:53:
9b:42:99:95:9b:94:64:27:44:e0:9d:ee:45:f7:21:
d5:1b:98:6c:ce:78:f9:5c:74:30:25:4c:70:c7:7d:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:63:4E:CE:CD:7D:60:C4:A4:8B:26:FE:36:A3:01:BB:77:0F:FF
X509v3 Authority Key Identifier:
keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2a:ce:09:10:20:d2:18:54:56:db:5b:df:80:9a:73:79:23:
72:34:6c:87:4d:c2:2e:65:fa:b7:a1:c7:8e:0f:2e:44:0e:be:
7d:75:c9:c3:a7:0a:a7:5c:46:81:c6:60:4b:94:b5:0e:93:28:
89:bf:32:22:dd:35:23:14:3f:8f:fc:06:e4:06:64:7d:8a:c5:
00:be:6b:93:c2:a8:f5:bb:4e:84:94:6f:3b:20:b7:d2:b8:ed:
3a:b5:bd:14:54:d6:1f:30:54:3d:63:3f:93:ec:53:e1:0a:61:
cd:80:ec:88:ab:7a:c1:48:8c:ad:e6:25:6d:6f:36:f1:0a:61:
4b:aa:fb:b8:94:0b:fa:db:9c:d7:98:f5:9e:76:25:ac:b7:cc:
96:86:3d:82:f3:72:89:cd:4b:3b:df:1d:40:24:c6:7e:97:7b:
63:30:55:58:25:f1:22:62:f9:bd:8a:aa:9f:3d:aa:57:16:3a:
fe:24:a7:32:0a:18:fa:f8:20:8a:7c:51:64:d7:8b:eb:ba:64:
75:eb:06:f1:c0:db:b7:cc:54:c0:2f:00:c7:07:c7:4c:25:51:
51:a2:b0:23:06:7d:f8:f4:d8:c4:23:d3:6d:58:f4:aa:70:e4:
df:b9:15:77:35:89:f3:fd:d0:73:cf:ff:80:c6:c5:51:d9:40:
30:e7:48:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtF/XavCYsafeV+wud7BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWFjYWJlOWZkY2NiYjU0N2VkNWVhOTk0NGFmZDc5ZGRm
MzUxOTcwHhcNMjUwMzI5MDcwMTEyWhcNMjUwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
Eyg1YWI3NjM0ZWNlY2Q3ZDYwYzRhNDhiMjZmZTM2YTMwMWJiNzcwZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vPocPedctzxnmz4K5rOW/l4hzQO
Ntc0IuRkV7n2nF10awoJaiXbfCsOyX2wkVzTXcZC8aIhFRH/JWFXZnaAZB4xBGoO
YEfn1GKkxhwdtcSDCfWOyaInZ3S0WiqGmeSydGMWyc4iWLTenlITb4LA7WqUtqR+
hStL2GypSjpT6WZKrS45Nbs9pFAtmTMayDm6ZqzXkClP760F2cyHxYzJTkd8QB8h
6UUqDl8G5IwPD4vwqV7u+ODggSgFekqfx1bjmntyp1nbVqM6gLwhaC9mA3tkXlVL
qYEGlCemF/hThVObQpmVm5RkJ0Tgne5F9yHVG5hsznj5XHQwJUxwx31dGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFq3Y07OzX1gxKSLJv42owG7dw//MB8GA1UdIwQY
MBaAFFvqyr6f3Mu1R+1eqZRK/Xnd81GXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAt
ODEyYmJlZWM1MWRmLzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAtODEyYmJlZWM1MWRm
LzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCrOCRAg
0hhUVttb34Cac3kjcjRsh03CLmX6t6HHjg8uRA6+fXXJw6cKp1xGgcZgS5S1DpMo
ib8yIt01IxQ/j/wG5AZkfYrFAL5rk8Ko9btOhJRvOyC30rjtOrW9FFTWHzBUPWM/
k+xT4QphzYDsiKt6wUiMreYlbW828QphS6r7uJQL+tuc15j1nnYlrLfMloY9gvNy
ic1LO98dQCTGfpd7YzBVWCXxImL5vYqqnz2qVxY6/iSnMgoY+vgginxRZNeL67pk
desG8cDbt8xUwC8AxwfHTCVRUaKwIwZ9+PTYxCPTbVj0qnDk37kVdzWJ8/3Qc8//
gMbFUdlAMOdISw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:44 2025 by rpki-client