Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: X+sEYP7M3IMtarZufs+Y1nl8psXwq18jI1yUoWtJPNQ=
Subject key identifier: D6:34:20:CB:28:59:4C:AF:E1:8F:07:F1:47:52:B2:87:93:6D:DC:14
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 0195E00FDA77766DE4079D796778B1F3A7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 06A0
Signing time: Sat 29 Mar 2025 04:01:30 +0000
Manifest this update: Sat 29 Mar 2025 04:01:30 +0000
Manifest next update: Sun 30 Mar 2025 04:01:30 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: 0FzHDdzFL1Ygm4NeV63alTnIJ7/+hmWnHQtJTz3CmTs=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:da:77:76:6d:e4:07:9d:79:67:78:b1:f3:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Mar 29 04:01:30 2025 GMT
Not After : Mar 30 04:01:30 2025 GMT
Subject: CN=d63420cb28594cafe18f07f14752b287936ddc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:26:f4:2a:9c:59:4d:86:49:55:be:13:bd:
f1:7a:ae:e4:e2:11:8f:75:5b:b3:b0:6a:79:b5:36:
9e:86:91:d1:2f:c3:d1:37:54:2e:7d:5f:3d:04:17:
ba:5d:26:72:32:26:bd:63:43:6b:8f:96:83:4e:95:
ac:b2:59:c1:8f:d0:69:d8:f8:3f:1a:7c:41:7e:38:
0c:94:a4:91:9b:8e:e8:3e:ef:9f:15:a9:78:4c:30:
9b:af:16:ea:45:b1:32:63:b0:b9:8a:04:7e:44:28:
c1:60:63:f9:1e:5a:7b:ce:80:1f:65:7a:e5:ad:c8:
cc:0f:b9:42:3e:3f:4f:8b:45:91:a7:b1:3a:15:3e:
6b:39:00:4a:05:2c:aa:c3:dc:bc:a6:25:d4:79:af:
97:5b:4e:c6:40:20:98:dd:0c:6b:9a:b5:9f:78:4b:
05:55:99:23:db:06:df:da:1b:d9:33:b4:10:6a:f3:
c4:18:61:bf:d0:53:23:a8:35:56:29:93:f1:29:84:
30:d1:65:df:7b:2d:3f:af:ef:93:5f:e8:ff:34:d1:
68:55:6b:d3:ab:bd:2a:77:cf:48:11:80:36:7e:82:
ad:5c:c7:71:40:de:07:c6:0b:7c:b6:dc:70:30:71:
c2:83:40:6f:31:9e:ce:7f:c1:06:a8:0e:b1:5b:74:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:20:CB:28:59:4C:AF:E1:8F:07:F1:47:52:B2:87:93:6D:DC:14
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:10:fb:93:ce:e2:0f:c4:6a:4e:20:9b:9d:be:56:ec:6f:
32:13:e8:c0:60:f1:e4:5a:2b:ec:5a:51:98:63:a9:f3:32:92:
8d:7f:d8:f0:1a:ff:2d:ce:dc:0a:21:69:3e:7f:0e:73:4d:13:
49:bb:e6:a7:5b:2f:b4:25:3d:fc:54:7a:d2:54:70:3f:bd:bf:
ff:fe:77:74:52:91:50:f8:8c:89:f5:67:cd:dd:76:8f:2e:e8:
96:2d:20:40:22:07:64:7b:5a:cd:bf:81:b8:86:1b:18:08:cd:
d5:d2:4e:e5:55:c2:b4:b1:14:ed:5a:27:a8:31:6c:7b:48:74:
27:29:9c:ab:1f:d1:2d:0a:fe:bd:be:6a:4b:a7:37:22:40:dd:
05:18:fb:57:2b:fa:79:5c:20:e8:a0:e2:2f:45:e1:8f:30:fc:
90:9a:72:28:bc:fb:3a:cd:05:1e:e4:b7:74:b2:da:d8:4a:9f:
3b:40:27:31:1f:a5:a0:b3:64:03:92:5d:69:70:eb:8e:64:bd:
23:9c:30:23:26:dc:1c:ab:ca:e2:65:af:b9:c1:0f:6b:e8:ab:
6e:b7:5f:90:80:ca:1d:a6:fb:2c:99:b9:62:5b:39:d5:3b:9d:
7e:1c:e3:60:e1:81:48:04:1d:3c:0d:28:4e:8a:ac:00:eb:2c:
a3:b0:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:54 2025 by rpki-client