Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: 5o6YMisPqc/BqJI9scPyFhsqHjetWABnG7Km0S1d0lI=
Subject key identifier: 0F:E0:A1:D3:2D:1D:B9:52:6B:25:73:B7:D1:84:42:96:21:11:17:13
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 0195E0464E1E4D7AFD7562076F392C8864C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 033E
Signing time: Sat 29 Mar 2025 05:00:58 +0000
Manifest this update: Sat 29 Mar 2025 05:00:58 +0000
Manifest next update: Sun 30 Mar 2025 05:00:58 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: OYWWNq71lc9OkiU9mMeSM0gXv1iDni9lj2GgSZ38L0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:4e:1e:4d:7a:fd:75:62:07:6f:39:2c:88:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Mar 29 05:00:58 2025 GMT
Not After : Mar 30 05:00:58 2025 GMT
Subject: CN=0fe0a1d32d1db9526b2573b7d184429621111713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:2e:cb:17:e1:10:88:93:42:b7:ca:2c:63:
a2:89:81:e0:fe:54:5c:07:34:87:bb:2f:cc:05:33:
9e:2a:b9:d5:f1:0b:e7:c1:10:47:a8:93:37:55:60:
b5:66:d7:71:a9:c3:e7:24:90:97:0e:72:36:91:fb:
8d:85:b8:29:88:b4:ba:ba:17:b9:64:96:bb:1f:12:
77:1e:a4:98:97:9b:d4:7a:6e:c6:de:a8:db:64:a1:
b0:43:24:83:1f:1d:27:24:a9:4c:8f:72:59:6f:5f:
54:df:7a:40:9e:c5:be:04:83:54:ea:09:49:59:37:
bd:50:03:fd:f5:70:c2:55:a5:cd:c6:4b:4a:46:c5:
36:7b:b8:4b:ff:e7:34:76:47:f8:c3:56:7f:1a:9c:
d5:f3:8b:75:c9:53:eb:a7:b6:0d:d2:ba:31:73:df:
1f:d4:1e:12:31:ac:b1:5e:9d:79:20:c1:0f:69:e1:
db:af:ed:5f:7d:5c:66:f6:32:cf:50:bb:94:60:6c:
f0:2b:b9:54:28:ff:ba:96:12:81:62:d7:45:06:95:
1b:8d:4f:59:ad:2c:a2:5a:92:95:b2:f4:03:e4:0d:
1a:b3:79:53:f3:67:61:e7:02:4e:64:68:6c:2b:e1:
d2:58:53:f4:6e:bf:11:0b:ed:57:89:b5:d7:db:49:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:A1:D3:2D:1D:B9:52:6B:25:73:B7:D1:84:42:96:21:11:17:13
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:8a:64:2a:65:72:bd:36:d2:bd:d4:e0:c2:3f:4f:52:8f:
e4:a3:38:89:3f:8a:a6:13:91:63:52:fc:10:79:39:ad:72:b8:
b6:2a:59:56:3a:68:40:85:f2:fa:8f:bf:d7:4a:61:b6:21:2c:
40:c3:37:d6:ea:7f:7d:e4:f0:55:88:fa:cf:d4:d1:9f:c1:f9:
83:95:6b:0d:26:ef:eb:bb:1b:a8:a3:b8:ae:90:4a:83:75:8a:
e5:72:b0:fd:9f:19:1c:75:da:9d:f3:0b:7c:06:fa:a0:b9:8e:
3c:5e:93:ef:af:d9:c8:f0:60:d8:e4:74:04:c1:82:a9:3e:81:
b1:e4:fe:ea:b7:44:5b:57:67:ca:97:63:94:92:31:6e:d6:a1:
93:43:9e:46:f6:92:1c:7b:4b:fe:18:59:44:a2:53:db:9a:7c:
1a:b8:d4:2d:79:62:59:1b:1a:e7:75:cd:0f:0b:a0:fa:48:3d:
d6:c3:64:3c:aa:0a:8f:da:63:0b:f8:d1:9e:d2:c4:0c:9a:74:
ea:cf:2f:e6:84:63:44:c0:52:96:c7:f3:9a:91:11:02:8a:06:
f3:4e:8b:1d:bd:ca:ac:d3:95:41:ce:00:b7:2b:a0:62:ff:7e:
28:18:ae:41:a6:67:4c:0d:7a:eb:b5:b1:74:23:fe:83:e5:e8:
3d:55:5f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRk4eTXr9dWIHbzksiGTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5
MGIyNzYwHhcNMjUwMzI5MDUwMDU4WhcNMjUwMzMwMDUwMDU4WjAzMTEwLwYDVQQD
EygwZmUwYTFkMzJkMWRiOTUyNmIyNTczYjdkMTg0NDI5NjIxMTExNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LwuyxfhEIiTQrfKLGOiiYHg/lRc
BzSHuy/MBTOeKrnV8QvnwRBHqJM3VWC1ZtdxqcPnJJCXDnI2kfuNhbgpiLS6uhe5
ZJa7HxJ3HqSYl5vUem7G3qjbZKGwQySDHx0nJKlMj3JZb19U33pAnsW+BINU6glJ
WTe9UAP99XDCVaXNxktKRsU2e7hL/+c0dkf4w1Z/GpzV84t1yVPrp7YN0roxc98f
1B4SMayxXp15IMEPaeHbr+1ffVxm9jLPULuUYGzwK7lUKP+6lhKBYtdFBpUbjU9Z
rSyiWpKVsvQD5A0as3lT82dh5wJOZGhsK+HSWFP0br8RC+1XibXX20m6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/godMtHblSayVzt9GEQpYhERcTMB8GA1UdIwQY
MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt
OTBlZjdiZGExZGMzLzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz
LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOCKZCpl
cr020r3U4MI/T1KP5KM4iT+KphORY1L8EHk5rXK4tipZVjpoQIXy+o+/10phtiEs
QMM31up/feTwVYj6z9TRn8H5g5VrDSbv67sbqKO4rpBKg3WK5XKw/Z8ZHHXanfML
fAb6oLmOPF6T76/ZyPBg2OR0BMGCqT6BseT+6rdEW1dnypdjlJIxbtahk0OeRvaS
HHtL/hhZRKJT25p8GrjULXliWRsa53XNDwug+kg91sNkPKoKj9pjC/jRntLEDJp0
6s8v5oRjRMBSlsfzmpERAooG806LHb3KrNOVQc4AtyugYv9+KBiuQaZnTA1667Wx
dCP+g+XoPVVfVA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:32 2025 by rpki-client