Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: xcAk2b9a9kv3lhz5bRmxXZbZ4tmRUXED0AmVcDS8HzE=
Subject key identifier: 11:77:DC:23:CA:31:06:0D:0F:A4:DB:29:AF:C1:A6:87:19:47:6F:1E
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0195E0467372DB972F195DC61032F38BAD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0D03
Signing time: Sat 29 Mar 2025 05:01:08 +0000
Manifest this update: Sat 29 Mar 2025 05:01:08 +0000
Manifest next update: Sun 30 Mar 2025 05:01:08 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: R1FK5bsA8Q5YPUG+PX7IClz+lfvC1064qZklrx036aY=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:73:72:db:97:2f:19:5d:c6:10:32:f3:8b:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Mar 29 05:01:08 2025 GMT
Not After : Mar 30 05:01:08 2025 GMT
Subject: CN=1177dc23ca31060d0fa4db29afc1a68719476f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:30:bb:93:32:a5:e3:c4:49:0e:35:62:29:
48:37:2c:ec:72:97:52:0f:a2:c7:60:eb:9c:d2:5d:
5c:bf:d9:70:04:8c:1d:3d:0c:8b:2f:1f:f5:af:52:
49:13:e1:97:a7:ce:3a:33:67:e6:9e:b4:78:db:71:
98:c7:29:8b:87:f8:48:f8:a4:6a:02:cf:e3:83:8c:
8d:00:38:44:fd:e5:11:e3:67:81:eb:0c:aa:7d:5d:
ff:d5:b3:cd:fd:d3:81:2e:cd:da:28:0b:a5:18:2a:
14:6a:df:6f:df:be:dc:55:1f:95:d4:16:b5:a9:bb:
ba:3a:d4:e0:f8:3e:8d:35:c2:57:53:29:e8:3f:9b:
0b:2b:e8:4e:a9:e1:e4:fe:73:fc:dc:70:1c:87:9e:
94:77:7d:09:2a:51:fe:04:45:ba:15:d2:20:30:78:
3b:e7:bd:73:18:48:6b:34:b3:e2:67:fd:c7:4b:a3:
93:6d:98:ea:97:c6:31:ef:08:eb:68:f6:bf:bc:ee:
d0:4d:c9:e2:a2:7c:51:50:a6:6b:c2:f4:c8:4d:81:
0d:26:af:6a:a9:67:57:74:5d:5c:95:6e:2d:c3:60:
7d:86:c9:9c:d0:9c:c8:c3:4b:cc:e9:1f:cb:33:a6:
5f:1a:df:f3:df:7d:1e:2c:f1:26:b8:e9:76:ef:7b:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:DC:23:CA:31:06:0D:0F:A4:DB:29:AF:C1:A6:87:19:47:6F:1E
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3b:37:83:93:cf:b1:1d:2e:a9:a5:28:8b:14:cc:53:97:8b:
73:56:ce:42:a5:7c:8d:ea:35:4f:81:11:72:cc:e7:6c:09:c1:
e6:a2:b8:6b:d9:90:ec:ef:f0:3d:67:7f:2c:3c:b6:2a:9c:5f:
d9:17:91:0a:94:12:93:eb:70:72:09:ec:49:54:35:c2:08:ba:
de:1d:25:1d:fb:21:70:45:e6:52:73:81:7f:a8:ea:29:65:f4:
21:88:7c:51:1b:fd:0b:4f:52:e2:82:4c:cf:6c:4f:4e:00:f5:
78:e0:50:7b:40:55:05:a1:05:29:42:65:17:00:d5:dd:85:b6:
14:e9:8d:a2:87:30:f8:3e:7d:db:fc:25:eb:0e:04:fe:96:63:
ac:f5:12:5d:18:98:11:89:5e:aa:4b:d3:ed:7d:43:75:e5:26:
b5:ee:a9:78:e7:60:31:51:6a:7d:68:ed:46:15:16:42:fd:b5:
ec:5e:46:0e:f4:d3:1a:d6:08:bc:0b:a2:3f:d5:76:b8:a7:13:
f6:44:4d:ea:c3:b2:55:79:02:71:00:42:73:91:89:37:d5:70:
4e:d9:2a:be:d7:cd:bb:29:da:9b:dc:c9:b6:b4:e9:d3:f7:bc:
c4:87:51:b0:41:3f:20:aa:43:28:ca:d1:b7:35:ad:76:54:b4:
5d:f5:ad:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRnNy25cvGV3GEDLzi60yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjZlMDVkMTUyNzUwZGZhYWRlNWZhZjc5MWJhZDM5MWRj
NmQyZDQwHhcNMjUwMzI5MDUwMTA4WhcNMjUwMzMwMDUwMTA4WjAzMTEwLwYDVQQD
EygxMTc3ZGMyM2NhMzEwNjBkMGZhNGRiMjlhZmMxYTY4NzE5NDc2ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkAwu5MypePESQ41YilINyzscpdS
D6LHYOuc0l1cv9lwBIwdPQyLLx/1r1JJE+GXp846M2fmnrR423GYxymLh/hI+KRq
As/jg4yNADhE/eUR42eB6wyqfV3/1bPN/dOBLs3aKAulGCoUat9v377cVR+V1Ba1
qbu6OtTg+D6NNcJXUynoP5sLK+hOqeHk/nP83HAch56Ud30JKlH+BEW6FdIgMHg7
571zGEhrNLPiZ/3HS6OTbZjql8Yx7wjraPa/vO7QTcnionxRUKZrwvTITYENJq9q
qWdXdF1clW4tw2B9hsmc0JzIw0vM6R/LM6ZfGt/z330eLPEmuOl273teXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF33CPKMQYND6TbKa/BpocZR28eMB8GA1UdIwQY
MBaAFAlm4F0VJ1Dfqt5fr3kbrTkdxtLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMt
NzIxYmI0ZmM4YzE2LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMtNzIxYmI0ZmM4YzE2
LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1zs3g5PP
sR0uqaUoixTMU5eLc1bOQqV8jeo1T4ERcsznbAnB5qK4a9mQ7O/wPWd/LDy2Kpxf
2ReRCpQSk+twcgnsSVQ1wgi63h0lHfshcEXmUnOBf6jqKWX0IYh8URv9C09S4oJM
z2xPTgD1eOBQe0BVBaEFKUJlFwDV3YW2FOmNoocw+D592/wl6w4E/pZjrPUSXRiY
EYleqkvT7X1DdeUmte6peOdgMVFqfWjtRhUWQv217F5GDvTTGtYIvAuiP9V2uKcT
9kRN6sOyVXkCcQBCc5GJN9VwTtkqvtfNuynam9zJtrTp0/e8xIdRsEE/IKpDKMrR
tzWtdlS0XfWt+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:35 2025 by rpki-client