Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: DnvVpwTNBU4HEDA2DWnsbkhpsTGBI90jlrJYxnwfoiw=
Subject key identifier: B3:3E:36:83:A5:FA:55:FD:48:71:7B:45:DA:EB:E1:34:EE:58:9E:76
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 0195E0B437CA72D65D370747040E764867C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 053D
Signing time: Sat 29 Mar 2025 07:01:01 +0000
Manifest this update: Sat 29 Mar 2025 07:01:01 +0000
Manifest next update: Sun 30 Mar 2025 07:01:01 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: 4uDX5tvNo4ku9VCLI9H8AXOaEYVMpZp6ctFUz2741eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:37:ca:72:d6:5d:37:07:47:04:0e:76:48:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Mar 29 07:01:01 2025 GMT
Not After : Mar 30 07:01:01 2025 GMT
Subject: CN=b33e3683a5fa55fd48717b45daebe134ee589e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:93:66:d9:4f:43:9c:f8:35:1b:46:ca:93:
85:12:ef:1a:28:e2:58:60:9a:1d:3b:03:69:ae:48:
2a:b4:6f:8c:29:56:20:6c:52:2a:d6:17:f6:2f:b2:
6b:ca:8f:a8:b5:97:6f:9f:d6:2e:31:a6:d3:1a:b1:
8c:16:a3:04:84:00:8f:36:6b:a2:62:07:e0:f0:ce:
68:71:74:05:76:15:2d:ca:74:13:6e:88:61:ff:da:
db:20:6f:dc:cf:49:76:11:7e:7f:dd:c7:13:f5:f3:
cd:b4:16:01:fc:50:58:5d:18:3b:be:5f:c5:88:20:
53:24:65:bb:f5:a4:d6:54:91:c1:84:3b:81:a2:00:
3e:24:1d:01:39:a1:23:b4:be:38:ab:06:a7:48:c7:
00:e0:96:0f:d4:9e:a2:94:c9:ba:66:25:2b:34:37:
3f:7d:5e:02:95:a8:a8:7d:8c:1d:3b:5c:fa:b6:45:
d8:8c:0e:4b:3a:36:d2:44:e2:22:df:4d:64:9a:6c:
0a:91:5a:9f:eb:83:fd:57:52:6c:50:b9:a3:39:b8:
df:9d:db:91:fb:0b:33:72:23:40:e4:6c:93:23:75:
92:35:22:fd:53:81:43:37:a5:f7:dc:ca:1a:4f:ff:
1f:6f:5c:13:99:8e:35:64:a6:44:a4:d8:c4:5d:e0:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:36:83:A5:FA:55:FD:48:71:7B:45:DA:EB:E1:34:EE:58:9E:76
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:57:41:3c:da:8c:af:44:5f:2b:d2:c1:e7:51:af:cf:7f:
23:af:47:8a:9e:2b:5e:58:76:ff:f3:e6:cc:aa:c4:de:52:3c:
6d:ef:b4:ca:23:6f:45:91:01:fd:2d:d6:65:e0:00:dc:88:41:
7a:2d:4c:2e:bb:b6:31:04:ac:5e:18:a3:30:53:6e:17:4f:e7:
91:56:3c:57:3e:b6:f0:69:85:b1:a5:00:d4:31:8a:0e:c9:e1:
52:43:63:20:ef:14:ee:04:82:7a:5c:71:1d:f3:a7:f5:74:ec:
8e:16:52:25:ae:73:ba:b8:4e:e1:2f:8e:ab:ae:23:b6:f0:23:
21:90:eb:0f:17:3c:11:84:e9:10:7c:b1:d8:2e:21:b0:b3:bd:
26:1a:4b:12:e8:13:1f:db:66:2c:04:86:71:42:3f:d2:22:3a:
88:50:df:3b:42:aa:b2:3d:23:fb:69:e0:a2:b3:4e:e4:de:f4:
9a:a4:f8:59:9c:3c:e7:93:d9:02:05:9d:45:d0:18:ba:71:10:
15:38:c6:fa:25:d8:41:7d:cb:31:24:9c:56:ef:a2:87:28:b9:
18:06:35:2b:7f:74:df:41:64:50:be:d9:eb:99:ee:2d:f1:e0:
e7:f5:6f:41:a8:c9:be:be:0d:2e:af:94:d0:78:eb:be:97:50:
46:58:a4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtDfKctZdNwdHBA52SGfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl
NjAxODkwHhcNMjUwMzI5MDcwMTAxWhcNMjUwMzMwMDcwMTAxWjAzMTEwLwYDVQQD
EyhiMzNlMzY4M2E1ZmE1NWZkNDg3MTdiNDVkYWViZTEzNGVlNTg5ZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnyTZtlPQ5z4NRtGypOFEu8aKOJY
YJodOwNprkgqtG+MKVYgbFIq1hf2L7Jryo+otZdvn9YuMabTGrGMFqMEhACPNmui
Ygfg8M5ocXQFdhUtynQTbohh/9rbIG/cz0l2EX5/3ccT9fPNtBYB/FBYXRg7vl/F
iCBTJGW79aTWVJHBhDuBogA+JB0BOaEjtL44qwanSMcA4JYP1J6ilMm6ZiUrNDc/
fV4ClaiofYwdO1z6tkXYjA5LOjbSROIi301kmmwKkVqf64P9V1JsULmjObjfnduR
+wszciNA5GyTI3WSNSL9U4FDN6X33MoaT/8fb1wTmY41ZKZEpNjEXeCXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM+NoOl+lX9SHF7Rdrr4TTuWJ52MB8GA1UdIwQY
MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt
OTJiOWRhYTAwMzc5LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5
LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS5XQTza
jK9EXyvSwedRr89/I69Hip4rXlh2//PmzKrE3lI8be+0yiNvRZEB/S3WZeAA3IhB
ei1MLru2MQSsXhijMFNuF0/nkVY8Vz628GmFsaUA1DGKDsnhUkNjIO8U7gSCelxx
HfOn9XTsjhZSJa5zurhO4S+Oq64jtvAjIZDrDxc8EYTpEHyx2C4hsLO9JhpLEugT
H9tmLASGcUI/0iI6iFDfO0Kqsj0j+2ngorNO5N70mqT4WZw855PZAgWdRdAYunEQ
FTjG+iXYQX3LMSScVu+ihyi5GAY1K39030FkUL7Z65nuLfHg5/VvQajJvr4NLq+U
0HjrvpdQRlikcA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:16 2025 by rpki-client