Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File: WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier: EqrE5V+DFrFNYKP3Jpwn2pRhw7uW1SMG7ZzIt0IGjxY=
Subject key identifier: BB:33:45:F0:DD:DA:A0:AF:C0:F6:8F:E3:ED:85:60:B5:07:FD:92:99
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer: /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial: 0194BCA9C46B8CA4EC9A68D2DEA15D9D882F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: NIvA+k1Z22iDi3o32QLVuErBRoAT8ft9pt9QQNjAYO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:6b:8c:a4:ec:9a:68:d2:de:a1:5d:9d:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=bb3345f0dddaa0afc0f68fe3ed8560b507fd9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:c3:44:0d:1c:b8:da:03:a2:37:2a:67:2f:
af:1c:5d:cd:37:87:cc:71:df:09:f7:02:b8:04:fc:
e0:24:08:ef:e9:df:fd:23:b8:e7:27:c8:3f:ee:d7:
c7:20:4a:5c:1e:34:45:65:4d:e6:09:55:e9:11:e9:
2d:09:a3:c7:02:42:9e:66:ed:09:40:15:93:ef:d4:
bc:1b:7e:ce:44:cd:b3:b8:54:ea:66:11:65:56:bb:
cd:67:ca:e5:df:b2:6e:8b:dd:fa:b7:6d:72:7a:68:
27:d8:39:72:75:0d:32:31:eb:21:a8:e9:22:2d:b0:
44:e8:49:bc:76:27:71:e7:19:c2:ea:0b:02:bd:f4:
11:e8:cd:4d:1a:5d:56:f1:ae:e9:25:c6:43:37:0e:
a4:fb:7a:d8:b6:39:9e:51:cc:99:4c:be:96:99:35:
94:da:89:42:b6:15:86:25:a9:6e:a0:28:88:fe:8c:
f6:ca:33:98:a7:de:86:92:80:36:01:3a:b3:dc:70:
0c:65:19:82:f8:71:13:86:ef:00:bb:e5:df:13:23:
1a:d6:34:a4:77:4a:7b:a1:d5:32:c0:a9:1d:5b:91:
8c:4a:a4:a3:32:9a:49:15:ab:ff:29:cc:b7:98:83:
3c:f1:3d:b4:da:08:86:4e:b4:5a:2f:bc:78:1e:41:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:45:F0:DD:DA:A0:AF:C0:F6:8F:E3:ED:85:60:B5:07:FD:92:99
X509v3 Authority Key Identifier:
keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:10:a1:c8:d1:74:29:65:a5:28:9b:c0:cc:7e:83:d3:8a:cb:
ec:d4:a4:79:19:dc:6b:d7:52:d0:8c:ac:c4:93:90:5e:b2:c2:
34:49:c1:1e:20:3b:6b:b8:0e:d1:c8:34:e0:a0:f3:79:e8:c3:
41:5e:73:22:85:5b:23:6f:44:13:54:f5:58:12:c8:48:75:96:
d3:aa:18:43:60:c3:13:c4:e6:b0:d9:2f:4a:42:29:f9:09:3c:
97:b0:92:3f:89:96:f5:6f:0a:f9:ca:77:4c:66:86:1b:2c:0d:
16:00:5a:6c:c8:e1:8e:cc:81:d8:ac:03:54:28:82:81:dd:86:
70:e5:85:5c:d2:a0:33:16:d4:6d:70:a3:08:02:f3:ae:c5:a1:
b7:26:02:1e:f6:02:0c:68:d9:ab:e5:52:39:ea:52:90:57:14:
40:1c:dc:0f:fe:5b:3d:b1:ed:20:39:12:ba:d5:1d:c8:e2:3b:
35:d4:ab:54:12:4f:90:5a:1b:23:f7:d1:41:31:3c:a4:c0:d0:
21:58:4b:0c:09:6d:a3:8d:8a:35:a6:1a:95:86:34:a8:16:59:
4c:12:6e:08:a0:1f:0f:ef:3c:eb:f2:72:36:64:6a:e9:8e:38:
37:c1:be:c4:d5:18:76:d0:25:c2:78:54:69:35:f8:46:bd:05:
b2:e0:5b:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcRrjKTsmmjS3qFdnYgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNiNDQ5Y2YxMzJmZTkxYTkzMDBhNWEwZTUzNWY3OGYw
YzU2OGMwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
EyhiYjMzNDVmMGRkZGFhMGFmYzBmNjhmZTNlZDg1NjBiNTA3ZmQ5Mjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCfDRA0cuNoDojcqZy+vHF3NN4fM
cd8J9wK4BPzgJAjv6d/9I7jnJ8g/7tfHIEpcHjRFZU3mCVXpEektCaPHAkKeZu0J
QBWT79S8G37ORM2zuFTqZhFlVrvNZ8rl37Jui936t21yemgn2DlydQ0yMeshqOki
LbBE6Em8didx5xnC6gsCvfQR6M1NGl1W8a7pJcZDNw6k+3rYtjmeUcyZTL6WmTWU
2olCthWGJaluoCiI/oz2yjOYp96GkoA2ATqz3HAMZRmC+HEThu8Au+XfEyMa1jSk
d0p7odUywKkdW5GMSqSjMppJFav/Kcy3mIM88T202giGTrRaL7x4HkHhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLszRfDd2qCvwPaP4+2FYLUH/ZKZMB8GA1UdIwQY
MBaAFFnDtEnPEy/pGpMApaDlNfePDFaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQt
MmYyZDIzOTAzNjg4LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQtMmYyZDIzOTAzNjg4
LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRChyNF0
KWWlKJvAzH6D04rL7NSkeRnca9dS0IysxJOQXrLCNEnBHiA7a7gO0cg04KDzeejD
QV5zIoVbI29EE1T1WBLISHWW06oYQ2DDE8TmsNkvSkIp+Qk8l7CSP4mW9W8K+cp3
TGaGGywNFgBabMjhjsyB2KwDVCiCgd2GcOWFXNKgMxbUbXCjCALzrsWhtyYCHvYC
DGjZq+VSOepSkFcUQBzcD/5bPbHtIDkSutUdyOI7NdSrVBJPkFobI/fRQTE8pMDQ
IVhLDAlto42KNaYalYY0qBZZTBJuCKAfD+886/JyNmRq6Y44N8G+xNUYdtAlwnhU
aTX4Rr0FsuBbLw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:59:58 2025 by rpki-client