Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: EkXtPMT5p5lkOu96Yrq7S/bx4r73ZFBwa+NgpvBYBOA=
Subject key identifier: 45:AB:B4:4B:FA:A6:29:CF:D0:F9:A6:AA:07:3D:3C:81:F9:41:B8:F8
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0194BC7280DB9C150E939BDA5EEAF01EF5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 0EF9
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: SVSrouyb1Px2eJiRYY2BnOwi2Stt+AB08RSBzg1ELZA=)
2: xBWezcOjf0HLBQBmbtDyglq06CU.roa (hash: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:db:9c:15:0e:93:9b:da:5e:ea:f0:1e:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=45abb44bfaa629cfd0f9a6aa073d3c81f941b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bd:4c:7f:73:4e:99:0c:37:00:42:b6:a2:0c:
da:48:a9:96:f2:e3:48:5d:96:8b:d2:9c:b3:67:1d:
c8:70:ed:46:30:e6:bb:8a:f0:62:f5:25:3e:9c:84:
fb:34:cb:df:8f:3a:6c:0c:4b:48:f6:7f:9e:36:1c:
fc:65:cf:91:25:62:56:a2:6a:30:b5:53:a5:98:5e:
f2:b6:b6:04:eb:9d:56:a5:6f:63:58:28:e0:5e:16:
b6:40:d9:ed:1b:35:7a:d8:a4:06:a1:ad:cf:d9:09:
65:75:37:46:db:9e:2a:b4:81:5a:42:cb:e1:5d:3e:
86:13:7a:4d:71:ef:f7:71:21:de:bb:7f:94:c5:2e:
c1:00:37:3d:9e:ca:70:6c:e1:5e:91:9e:30:38:9d:
0d:78:41:44:bf:44:db:c5:5f:b9:63:31:b4:31:52:
31:b7:b0:8c:e5:c1:67:a2:24:d0:0b:18:67:52:89:
79:1a:39:a9:f4:a3:19:be:5a:54:a5:f7:58:82:d7:
3c:40:04:10:30:98:9c:31:40:bd:d4:a5:fe:14:61:
99:7d:92:9c:eb:35:6e:3d:14:00:db:96:5a:ab:e7:
55:5e:0b:d1:32:e1:4b:11:54:e4:a9:d0:32:bb:1c:
0b:bd:cd:25:12:4c:9f:4e:43:54:c2:16:4a:fb:1c:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:B4:4B:FA:A6:29:CF:D0:F9:A6:AA:07:3D:3C:81:F9:41:B8:F8
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b5:9b:af:6b:2a:82:46:cb:69:3f:33:7a:7d:0c:31:45:63:
24:91:c3:14:c1:0e:0f:43:71:34:d8:5d:55:4e:00:ad:dc:4d:
6d:20:54:7b:67:5b:15:28:af:4d:50:57:b3:be:16:6a:e7:55:
f5:48:c3:9e:fe:4a:89:33:0e:1d:8f:8f:d6:f4:5f:93:0a:fb:
31:76:d5:34:b3:5f:6b:2f:48:86:91:cb:6b:5b:24:a8:5b:2a:
89:21:b8:45:82:53:70:a3:7a:1b:74:d8:ec:c1:bf:9a:3c:00:
c2:4d:e1:07:02:f4:9c:01:f8:73:0c:95:57:83:80:66:08:17:
fd:6c:4b:cf:59:c0:de:69:1a:50:7b:14:f4:85:c3:2b:75:d5:
c9:ff:90:3e:3c:aa:1d:25:01:50:a3:b7:81:60:03:80:84:56:
5c:2e:42:16:cc:f7:cc:df:b8:32:99:62:4c:37:9f:99:68:4a:
35:23:84:4f:46:8b:52:62:ab:65:62:cf:2f:0e:76:ee:a6:48:
7c:84:e4:15:3c:34:21:45:f6:78:86:28:86:80:95:70:9c:2a:
ad:89:b0:91:fa:45:2b:8a:16:6b:a4:56:66:5e:6f:76:98:b1:
45:46:a8:18:05:90:0b:df:35:ec:de:27:00:c1:06:e3:46:5e:
0e:dd:89:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coDbnBUOk5vaXurwHvXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTU4ZTczMmEwZjcxZjRmMDEzMDJkNjIxNjcxNzNiZDli
MTdjYzEwHhcNMjUwMTMxMTMwMDA3WhcNMjUwMjAxMTMwMDA3WjAzMTEwLwYDVQQD
Eyg0NWFiYjQ0YmZhYTYyOWNmZDBmOWE2YWEwNzNkM2M4MWY5NDFiOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b1Mf3NOmQw3AEK2ogzaSKmW8uNI
XZaL0pyzZx3IcO1GMOa7ivBi9SU+nIT7NMvfjzpsDEtI9n+eNhz8Zc+RJWJWomow
tVOlmF7ytrYE651WpW9jWCjgXha2QNntGzV62KQGoa3P2QlldTdG254qtIFaQsvh
XT6GE3pNce/3cSHeu3+UxS7BADc9nspwbOFekZ4wOJ0NeEFEv0TbxV+5YzG0MVIx
t7CM5cFnoiTQCxhnUol5Gjmp9KMZvlpUpfdYgtc8QAQQMJicMUC91KX+FGGZfZKc
6zVuPRQA25Zaq+dVXgvRMuFLEVTkqdAyuxwLvc0lEkyfTkNUwhZK+xyQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWrtEv6pinP0Pmmqgc9PIH5Qbj4MB8GA1UdIwQY
MBaAFF/ljnMqD3H08BMC1iFnFzvZsXzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt
YjZlNThmOWM4MmUxLzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx
LzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbWbr2sq
gkbLaT8zen0MMUVjJJHDFMEOD0NxNNhdVU4ArdxNbSBUe2dbFSivTVBXs74WaudV
9UjDnv5KiTMOHY+P1vRfkwr7MXbVNLNfay9IhpHLa1skqFsqiSG4RYJTcKN6G3TY
7MG/mjwAwk3hBwL0nAH4cwyVV4OAZggX/WxLz1nA3mkaUHsU9IXDK3XVyf+QPjyq
HSUBUKO3gWADgIRWXC5CFsz3zN+4MpliTDefmWhKNSOET0aLUmKrZWLPLw527qZI
fITkFTw0IUX2eIYohoCVcJwqrYmwkfpFK4oWa6RWZl5vdpixRUaoGAWQC9817N4n
AMEG40ZeDt2Jvw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:01 2025 by rpki-client