Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
File: WQrh--tOt2hwRl3ryP0GXBb4vtE.mft (raw, json)
Hash identifier: 7gUj9Op3iIHEcVyTcS75PGC68xIjg3Uqt9LM0t0FS3w=
Subject key identifier: 5B:22:5F:3A:F4:5F:A2:76:86:B7:DE:7B:8C:30:39:15:46:C5:71:31
Authority key identifier: 59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
Certificate issuer: /CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Certificate serial: 0195C9F562E0AE4E4E497737C9AD2ED7C3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
Manifest number: 0287
Signing time: Mon 24 Mar 2025 21:00:56 +0000
Manifest this update: Mon 24 Mar 2025 21:00:56 +0000
Manifest next update: Tue 25 Mar 2025 21:00:56 +0000
Files and hashes: 1: WQrh--tOt2hwRl3ryP0GXBb4vtE.crl (hash: J+OhK66pcxFWA8eJy5Z/mHcFU1tVdBXDjrkNcB5Cum0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:f5:62:e0:ae:4e:4e:49:77:37:c9:ad:2e:d7:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Validity
Not Before: Mar 24 21:00:56 2025 GMT
Not After : Mar 25 21:00:56 2025 GMT
Subject: CN=5b225f3af45fa27686b7de7b8c30391546c57131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:59:6f:dc:72:72:a3:7f:57:ff:02:e4:ba:
8e:2c:6a:c3:d1:4f:b2:06:8f:13:4d:8d:d2:68:6d:
ea:91:16:f6:ff:34:ba:0d:78:35:c8:5f:92:2b:75:
02:ac:87:3f:83:ae:25:12:dc:e2:25:41:ea:a7:73:
cd:01:83:da:9a:3e:39:c4:ee:8b:87:70:b9:4d:94:
f3:2a:b9:d9:39:2c:5d:df:73:c4:09:e2:6f:68:99:
a0:d6:51:2d:09:4c:d1:e7:d6:9d:f1:8d:37:d4:c9:
92:d8:4e:6e:02:4f:6e:fa:69:a8:f8:68:05:a4:9a:
e4:dc:96:52:48:2c:76:c0:da:54:03:a4:9e:0e:a9:
3e:e5:5d:61:b1:dc:94:8f:0a:eb:ba:83:19:14:a5:
85:51:c0:b0:f4:6c:7b:f2:cf:dd:6e:59:af:99:4f:
7c:ec:5b:c7:8b:b4:84:12:14:27:a3:9c:81:1b:d1:
c3:d7:94:ab:d1:39:0a:58:db:ef:a6:56:a7:40:d1:
b1:56:dc:86:76:cb:d9:60:8c:d8:13:62:6f:bd:9c:
b6:1f:5a:e2:ef:9e:76:22:97:21:86:62:d3:6c:ae:
32:0e:f9:d0:87:b3:6d:29:74:7a:95:30:ad:2f:e0:
b8:35:fc:39:ce:e3:3b:51:87:a9:74:e5:4a:11:86:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:5F:3A:F4:5F:A2:76:86:B7:DE:7B:8C:30:39:15:46:C5:71:31
X509v3 Authority Key Identifier:
keyid:59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:3e:58:d0:e2:12:a5:d9:df:53:ba:a3:3f:61:ec:45:15:
6d:78:3e:32:f4:2f:db:7a:8a:8c:86:ef:25:f0:fc:74:37:dc:
42:f5:1f:b1:67:ef:06:81:ef:58:ef:b3:35:fc:3e:e1:90:9e:
fe:23:bf:29:f3:c6:09:f0:6a:13:86:41:91:d7:c2:3f:4f:6a:
21:72:dc:62:54:ab:07:4f:71:7a:73:e8:29:85:79:25:06:19:
c5:e6:bd:89:35:81:1d:bb:dd:ba:1a:09:97:c6:91:7f:d9:c1:
18:b7:99:ed:82:30:63:ce:9e:b4:a9:e0:d3:e1:d0:51:23:07:
56:4b:20:8a:65:f8:c7:89:d6:8b:af:20:dc:aa:88:5f:87:4c:
c1:22:45:a9:31:85:a3:30:78:e5:79:69:d7:a6:b9:55:38:8e:
72:d1:ce:8d:4f:73:f1:a9:cb:e7:53:13:20:0d:ef:e0:80:22:
ee:6e:bf:61:f1:df:6f:38:93:76:5b:94:d4:f8:52:d6:ce:37:
68:69:a1:a9:80:f7:2e:17:8d:af:49:dd:cb:d3:6d:7a:0c:90:
4f:08:cd:8c:eb:a3:a8:7f:af:f3:81:27:26:6d:5e:1b:48:12:
17:c1:69:c7:c4:1b:1d:ea:a2:a7:c5:15:06:3c:36:fd:5c:b2:
1d:d9:9c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXJ9WLgrk5OSXc3ya0u18O0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MGFlMWZiZWI0ZWI3Njg3MDQ2NWRlYmM4ZmQwNjVjMTZm
OGJlZDEwHhcNMjUwMzI0MjEwMDU2WhcNMjUwMzI1MjEwMDU2WjAzMTEwLwYDVQQD
Eyg1YjIyNWYzYWY0NWZhMjc2ODZiN2RlN2I4YzMwMzkxNTQ2YzU3MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD9Zb9xycqN/V/8C5LqOLGrD0U+y
Bo8TTY3SaG3qkRb2/zS6DXg1yF+SK3UCrIc/g64lEtziJUHqp3PNAYPamj45xO6L
h3C5TZTzKrnZOSxd33PECeJvaJmg1lEtCUzR59ad8Y031MmS2E5uAk9u+mmo+GgF
pJrk3JZSSCx2wNpUA6SeDqk+5V1hsdyUjwrruoMZFKWFUcCw9Gx78s/dblmvmU98
7FvHi7SEEhQno5yBG9HD15Sr0TkKWNvvplanQNGxVtyGdsvZYIzYE2JvvZy2H1ri
7552IpchhmLTbK4yDvnQh7NtKXR6lTCtL+C4Nfw5zuM7UYepdOVKEYZZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsiXzr0X6J2hrfee4wwORVGxXExMB8GA1UdIwQY
MBaAFFkK4fvrTrdocEZd68j9BlwW+L7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FyaC0tdE90Mmh3UmwzcnlQMEdYQmI0dnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MzNiMDctNTQ1YS00Mzg2LWIwN2It
NTg5NjFmNTE4ZWJiLzEvV1FyaC0tdE90Mmh3UmwzcnlQMEdYQmI0dnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MzNiMDctNTQ1YS00Mzg2LWIwN2ItNTg5NjFmNTE4ZWJi
LzEvV1FyaC0tdE90Mmh3UmwzcnlQMEdYQmI0dnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2Y+WNDi
EqXZ31O6oz9h7EUVbXg+MvQv23qKjIbvJfD8dDfcQvUfsWfvBoHvWO+zNfw+4ZCe
/iO/KfPGCfBqE4ZBkdfCP09qIXLcYlSrB09xenPoKYV5JQYZxea9iTWBHbvduhoJ
l8aRf9nBGLeZ7YIwY86etKng0+HQUSMHVksgimX4x4nWi68g3KqIX4dMwSJFqTGF
ozB45Xlp16a5VTiOctHOjU9z8anL51MTIA3v4IAi7m6/YfHfbziTdluU1PhS1s43
aGmhqYD3LheNr0ndy9NtegyQTwjNjOujqH+v84EnJm1eG0gSF8Fpx8QbHeqip8UV
Bjw2/VyyHdmcoQ==
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:14:04 2025 by rpki-client on console.sobornost.net