Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier: j61DhBiESSFTIRmgUaZ3toNAuubUmsTWV2WXmpuG7nA=
Subject key identifier: F3:C5:42:8C:76:1E:63:08:20:62:62:B9:68:85:66:01:3A:C9:E8:74
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial: 0195E00FBDB0A21FD25492F52C267C408D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number: 047A
Signing time: Sat 29 Mar 2025 04:01:22 +0000
Manifest this update: Sat 29 Mar 2025 04:01:22 +0000
Manifest next update: Sun 30 Mar 2025 04:01:22 +0000
Files and hashes: 1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: lbOSr0+U5KTbuSzWH8IksyCgpmLx5I7atLnWGR3OX/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:bd:b0:a2:1f:d2:54:92:f5:2c:26:7c:40:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Validity
Not Before: Mar 29 04:01:22 2025 GMT
Not After : Mar 30 04:01:22 2025 GMT
Subject: CN=f3c5428c761e6308206262b9688566013ac9e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:ce:c9:27:2b:b2:85:8e:d0:b2:b7:91:41:
5a:13:2b:dc:e9:fb:26:f6:eb:32:36:9e:5c:ed:c6:
7c:ab:2c:19:39:ee:cf:b4:d0:fc:4a:ee:e4:aa:6a:
aa:f9:71:dd:bb:86:7f:5b:bb:4b:b4:80:45:ce:b4:
4b:d0:99:9c:aa:24:21:58:be:f5:18:1a:ab:23:ec:
0e:f3:22:a0:dc:96:97:2a:ba:d7:e5:bf:a7:60:6d:
5c:95:37:65:b7:4e:48:b7:ce:38:69:ff:5f:59:ae:
ab:d2:fa:cc:f7:ca:3e:4f:7b:91:6c:eb:42:3d:b9:
a7:ed:0e:8f:ac:f3:9e:e2:8e:64:a4:18:be:e8:1c:
65:16:47:25:3f:28:d5:f7:fc:71:99:2d:7c:66:ee:
04:31:e2:d5:6f:0f:69:47:f0:83:8b:00:00:8f:a3:
d5:ac:9e:ef:43:d9:41:05:44:bb:a9:ed:db:1d:11:
75:34:dc:2c:1f:db:8d:ab:65:aa:f7:95:f1:bf:0e:
2f:3a:00:22:a8:24:30:07:7a:c5:39:c3:e6:dc:ed:
51:73:67:c6:fd:66:b4:fa:f7:b6:1c:5e:ef:a5:36:
03:ff:fc:79:09:52:ae:82:58:29:aa:43:93:32:64:
d0:03:ef:eb:f7:00:c7:4f:cd:a3:29:c0:d3:dd:cc:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:42:8C:76:1E:63:08:20:62:62:B9:68:85:66:01:3A:C9:E8:74
X509v3 Authority Key Identifier:
keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:d1:0c:3e:dc:a1:cc:d3:63:60:a4:97:88:70:5c:87:a6:
64:75:08:6b:c1:e0:ae:03:35:bd:33:71:31:ff:9c:9c:ac:d9:
7f:33:2d:9c:d6:26:bd:13:50:14:e1:0c:5c:5b:39:c6:7a:a7:
f2:4e:52:45:5f:67:d7:9b:2a:eb:a6:14:cd:b1:f0:d4:40:2d:
80:3d:1a:6c:70:9f:f2:a9:7d:19:46:62:66:3c:a9:77:2f:84:
45:09:3d:d9:8b:6b:42:8c:ca:a6:bf:9c:ed:ce:6f:48:89:ef:
f1:ef:02:11:7a:99:07:be:c2:7f:38:bf:f3:78:f5:7b:84:08:
82:dd:99:fe:01:24:54:91:3d:10:f3:c7:1c:bf:21:cc:1d:70:
1b:68:d5:6f:62:bd:92:98:ea:5c:9a:34:94:e5:4d:a6:dd:5e:
1d:07:aa:b9:11:aa:4e:68:e4:dd:d4:9a:6b:c8:28:08:09:49:
e2:5e:d1:51:70:3f:73:14:20:d9:1c:e8:1b:35:3a:25:ab:b6:
47:96:42:79:c1:89:67:54:69:f8:4b:48:d7:d3:0a:5e:03:07:
b3:90:5a:09:59:ca:d0:db:e8:58:6b:db:59:0e:11:d1:50:a2:
c1:c5:af:e7:77:76:a8:f7:53:04:d0:d1:44:e7:dd:79:69:b7:
34:69:db:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD72woh/SVJL1LCZ8QI1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGIwNDFhZmFiZmQ4YzExZjBiMTBiNTIzNzk5YjY1Y2Zk
ZTM5MDgwHhcNMjUwMzI5MDQwMTIyWhcNMjUwMzMwMDQwMTIyWjAzMTEwLwYDVQQD
EyhmM2M1NDI4Yzc2MWU2MzA4MjA2MjYyYjk2ODg1NjYwMTNhYzllODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkvOyScrsoWO0LK3kUFaEyvc6fsm
9usyNp5c7cZ8qywZOe7PtND8Su7kqmqq+XHdu4Z/W7tLtIBFzrRL0JmcqiQhWL71
GBqrI+wO8yKg3JaXKrrX5b+nYG1clTdlt05It844af9fWa6r0vrM98o+T3uRbOtC
Pbmn7Q6PrPOe4o5kpBi+6BxlFkclPyjV9/xxmS18Zu4EMeLVbw9pR/CDiwAAj6PV
rJ7vQ9lBBUS7qe3bHRF1NNwsH9uNq2Wq95Xxvw4vOgAiqCQwB3rFOcPm3O1Rc2fG
/Wa0+ve2HF7vpTYD//x5CVKuglgpqkOTMmTQA+/r9wDHT82jKcDT3cwWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPFQox2HmMIIGJiuWiFZgE6yeh0MB8GA1UdIwQY
MBaAFMHbBBr6v9jBHwsQtSN5m2XP3jkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAt
MmZiMDk0NGI1MTk0LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAtMmZiMDk0NGI1MTk0
LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPnRDD7c
oczTY2Ckl4hwXIemZHUIa8HgrgM1vTNxMf+cnKzZfzMtnNYmvRNQFOEMXFs5xnqn
8k5SRV9n15sq66YUzbHw1EAtgD0abHCf8ql9GUZiZjypdy+ERQk92YtrQozKpr+c
7c5vSInv8e8CEXqZB77Cfzi/83j1e4QIgt2Z/gEkVJE9EPPHHL8hzB1wG2jVb2K9
kpjqXJo0lOVNpt1eHQequRGqTmjk3dSaa8goCAlJ4l7RUXA/cxQg2RzoGzU6Jau2
R5ZCecGJZ1Rp+EtI19MKXgMHs5BaCVnK0NvoWGvbWQ4R0VCiwcWv53d2qPdTBNDR
ROfdeWm3NGnbsA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:54 2025 by rpki-client