Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: mG+N6NTeT+qFZG8D7+Lm00gMC3XkRvCDdx5t2kt5mAE=
Subject key identifier: 10:FE:56:80:C6:2A:DB:BC:5B:ED:FF:0E:CF:E9:9F:EE:0D:7F:62:CF
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0194BCA96901E50EBCA3D82D27A2A37BC8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 0FCF
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: j40nz2Gi/D5FJ3SuvniYA9Vp+NGB0KSbNPwbibPjhnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:69:01:e5:0e:bc:a3:d8:2d:27:a2:a3:7b:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=10fe5680c62adbbc5bedff0ecfe99fee0d7f62cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:39:da:37:c7:fd:2a:4f:f7:b1:9e:79:a8:
d5:03:b1:1a:41:d7:ef:c5:68:49:ad:6a:9e:6f:5c:
42:fa:4c:7d:06:4d:82:46:f8:ca:d1:bf:d2:81:00:
55:41:a1:c3:ac:41:e5:ef:2f:9b:9e:2b:86:1b:71:
00:2f:82:19:9e:e0:78:e0:85:46:4b:ff:9d:81:01:
a6:4a:bf:7c:8f:fe:ee:e9:19:f7:91:e0:51:d6:ca:
4a:40:08:c8:14:e5:9b:e5:18:82:1a:f6:4f:56:b9:
39:b6:7c:18:7a:4d:2c:b3:2a:1f:fc:dc:3f:d6:7e:
96:6d:82:b9:bf:f3:86:17:e3:8e:1b:7d:aa:45:79:
f9:52:4b:65:fb:1e:7f:d4:dc:bf:93:95:b4:f9:78:
f8:ca:a4:eb:61:b3:c1:32:58:35:c0:37:e7:83:e8:
44:6f:c5:43:e2:7a:2b:27:48:79:e0:68:86:66:7a:
2e:c3:87:10:9b:c6:e0:07:fd:22:8a:29:aa:71:98:
07:12:bf:be:88:5c:1b:d5:a6:b5:fc:b7:80:d7:cb:
f9:fa:66:de:dd:90:69:92:0b:ac:00:db:a6:b7:51:
ca:2e:59:fd:0c:1d:f3:a9:2b:e1:76:1a:23:77:ae:
3b:e6:d2:88:51:97:55:8d:35:b4:0f:d7:45:7c:de:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FE:56:80:C6:2A:DB:BC:5B:ED:FF:0E:CF:E9:9F:EE:0D:7F:62:CF
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:f1:55:2c:f9:83:ed:7f:6f:a4:84:93:3e:0a:84:eb:22:
44:7a:ef:31:0f:6d:00:c6:e2:8e:ad:68:d8:05:6c:d2:b8:8f:
6a:7b:93:0d:39:8f:bc:e2:9d:29:7c:ec:29:ad:ec:63:bd:f6:
9d:e2:56:e0:fe:3e:9a:93:70:81:8d:a9:79:35:8e:0f:2a:4f:
bb:9d:2b:22:c6:2a:d2:a2:b5:b9:47:c3:58:65:0f:16:20:ab:
df:57:04:9d:18:92:1c:8d:21:31:5c:9e:4f:62:2e:07:1a:ec:
0d:3c:a3:98:9c:35:cc:3c:7f:1c:7d:bc:d7:4f:90:fd:0d:c0:
71:d1:26:63:f5:c7:71:7a:c0:84:95:c7:cd:df:2e:58:4a:0a:
b2:eb:42:dd:a2:b9:04:e5:96:98:e0:c2:fe:2d:6c:bb:50:48:
2c:4a:bf:91:11:c5:e7:1f:0b:fc:65:6a:88:67:8b:b4:a7:0c:
42:48:ff:f9:39:75:cb:d6:e0:3a:79:9e:77:96:54:24:31:1a:
86:dc:67:76:87:74:dd:8b:ba:1f:33:9d:e8:ea:96:7a:f2:d0:
3a:84:9e:16:ab:36:50:b8:9b:2c:57:23:8d:64:6a:a6:41:9b:
69:a4:9a:09:62:bf:26:7e:4c:61:b2:0a:af:e9:73:66:94:65:
28:5e:fe:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qWkB5Q68o9gtJ6Kje8jPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDRiOGJmYzBhMzRmNDcwNDY0NTJhOTIxYmYwMWI5ODE2
MzZhMjkwHhcNMjUwMTMxMTQwMDA2WhcNMjUwMjAxMTQwMDA2WjAzMTEwLwYDVQQD
EygxMGZlNTY4MGM2MmFkYmJjNWJlZGZmMGVjZmU5OWZlZTBkN2Y2MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r852jfH/SpP97GeeajVA7EaQdfv
xWhJrWqeb1xC+kx9Bk2CRvjK0b/SgQBVQaHDrEHl7y+bniuGG3EAL4IZnuB44IVG
S/+dgQGmSr98j/7u6Rn3keBR1spKQAjIFOWb5RiCGvZPVrk5tnwYek0ssyof/Nw/
1n6WbYK5v/OGF+OOG32qRXn5Uktl+x5/1Ny/k5W0+Xj4yqTrYbPBMlg1wDfng+hE
b8VD4norJ0h54GiGZnouw4cQm8bgB/0iiimqcZgHEr++iFwb1aa1/LeA18v5+mbe
3ZBpkgusANumt1HKLln9DB3zqSvhdhojd6475tKIUZdVjTW0D9dFfN42ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD+VoDGKtu8W+3/Ds/pn+4Nf2LPMB8GA1UdIwQY
MBaAFMNEuL/Ao09HBGRSqSG/AbmBY2opMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQt
YTA0MzcwODc0ZDE2LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQtYTA0MzcwODc0ZDE2
LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4zxVSz5
g+1/b6SEkz4KhOsiRHrvMQ9tAMbijq1o2AVs0riPanuTDTmPvOKdKXzsKa3sY732
neJW4P4+mpNwgY2peTWODypPu50rIsYq0qK1uUfDWGUPFiCr31cEnRiSHI0hMVye
T2IuBxrsDTyjmJw1zDx/HH2810+Q/Q3AcdEmY/XHcXrAhJXHzd8uWEoKsutC3aK5
BOWWmODC/i1su1BILEq/kRHF5x8L/GVqiGeLtKcMQkj/+Tl1y9bgOnmed5ZUJDEa
htxndod03Yu6HzOd6OqWevLQOoSeFqs2ULibLFcjjWRqpkGbaaSaCWK/Jn5MYbIK
r+lzZpRlKF7+eQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:02 2025 by rpki-client