Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: F8A0oKz+O+9Otj0BqHylJJidUQblOLG8Z+9yNYDKlYU=
Subject key identifier: E1:14:A5:D0:F1:09:5E:C3:45:77:E1:0D:04:86:36:AA:4C:E0:4D:2C
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 0194BBCDF6C65D49968FB396FE1A37A56C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 0364
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: guUGlP3nahPuwFfJX50eAYTKypLPm/0R8nyFwGqBr/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f6:c6:5d:49:96:8f:b3:96:fe:1a:37:a5:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=e114a5d0f1095ec34577e10d048636aa4ce04d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:c1:9b:ed:e1:d7:fd:81:1f:c5:cd:55:7f:
68:76:3a:4c:49:da:45:52:ac:d2:72:37:cd:2d:c9:
48:c7:43:8a:91:df:94:f2:77:87:97:d0:2d:18:44:
9f:b1:cc:09:09:35:0e:d1:5d:69:49:f9:df:01:25:
7d:dd:d0:f3:ba:6e:e8:4e:7d:3f:b4:e9:06:bb:af:
39:bd:09:55:78:90:f0:e6:7b:9e:be:20:52:06:fb:
2b:44:b7:2e:99:0f:de:b4:52:e7:5b:6b:cb:35:94:
e4:2b:ba:ec:c6:05:fd:70:83:e8:2f:3c:d7:38:45:
08:6a:81:2e:54:f6:73:c2:48:c0:40:61:65:a7:86:
ee:8c:9a:96:69:07:da:a7:9c:ff:d9:e3:3e:81:9b:
62:7c:23:5a:93:da:47:6b:72:36:53:6f:d1:ed:d6:
8a:fa:b8:da:0d:bf:dc:2f:84:8e:34:1e:a6:7f:da:
fa:13:46:3e:59:27:a3:78:1d:79:a9:13:c4:ab:f3:
e9:fb:bf:93:ff:aa:76:e9:7e:74:ea:ae:f2:66:0b:
18:27:7a:ce:04:41:f7:d6:c6:b4:01:8f:b6:63:76:
80:d9:69:1b:5b:fe:aa:7c:92:68:09:c7:01:7e:c9:
70:d4:a7:82:c8:20:44:9c:18:c1:58:a5:c7:66:70:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:A5:D0:F1:09:5E:C3:45:77:E1:0D:04:86:36:AA:4C:E0:4D:2C
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:8c:df:3b:03:b1:d0:7e:77:e6:40:ea:0f:d5:78:b3:d1:
14:97:14:ca:d4:c4:70:11:b4:8e:68:55:c6:55:d1:f5:e9:24:
5d:b3:0a:3a:8a:db:05:72:fc:1d:0a:c6:8a:a1:df:85:29:32:
fa:b6:c7:e5:ba:3b:40:12:64:1c:bd:32:db:db:ef:7c:ff:6b:
ab:07:e6:bd:31:f2:01:69:22:57:cb:96:21:c4:af:cf:fc:9c:
5d:71:64:08:57:d5:ea:f8:7e:87:6d:5f:75:a1:c9:fa:7b:f3:
f3:47:9d:25:0a:27:e2:59:a3:83:29:a9:b0:fa:0c:10:51:0b:
f4:22:4b:3f:41:47:2a:82:58:f4:09:23:c2:74:7b:aa:2d:91:
72:39:8e:d7:64:c4:d2:31:75:82:ba:42:e9:50:f1:ad:86:e8:
91:49:7e:03:22:31:14:ef:f6:5d:85:88:20:30:52:b7:74:4b:
21:65:f3:97:4a:fc:e6:a2:d0:f9:20:d8:4f:0d:69:e1:54:ed:
07:b7:e7:6e:25:07:43:86:a5:d4:4f:f2:87:61:78:c4:f4:5e:
ee:71:83:02:d3:68:90:33:f9:e1:c4:d3:20:68:fb:d6:9b:0c:
ac:88:45:05:cb:44:ad:6c:a4:7a:3f:42:e8:04:31:f0:98:91:
18:be:a9:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfbGXUmWj7OW/ho3pWxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWEyOTliMWU1ZmExZDUxMjZkZmFkNzVkZmQ0YTliYWU0
NDNhMTcwHhcNMjUwMTMxMTAwMDI0WhcNMjUwMjAxMTAwMDI0WjAzMTEwLwYDVQQD
EyhlMTE0YTVkMGYxMDk1ZWMzNDU3N2UxMGQwNDg2MzZhYTRjZTA0ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zBm+3h1/2BH8XNVX9odjpMSdpF
UqzScjfNLclIx0OKkd+U8neHl9AtGESfscwJCTUO0V1pSfnfASV93dDzum7oTn0/
tOkGu685vQlVeJDw5nueviBSBvsrRLcumQ/etFLnW2vLNZTkK7rsxgX9cIPoLzzX
OEUIaoEuVPZzwkjAQGFlp4bujJqWaQfap5z/2eM+gZtifCNak9pHa3I2U2/R7daK
+rjaDb/cL4SONB6mf9r6E0Y+WSejeB15qRPEq/Pp+7+T/6p26X506q7yZgsYJ3rO
BEH31sa0AY+2Y3aA2WkbW/6qfJJoCccBfslw1KeCyCBEnBjBWKXHZnC/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEUpdDxCV7DRXfhDQSGNqpM4E0sMB8GA1UdIwQY
MBaAFMCqKZseX6HVEm361139SpuuRDoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzct
NzA0YTk5NWUzZGI2LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzctNzA0YTk5NWUzZGI2
LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeCM3zsD
sdB+d+ZA6g/VeLPRFJcUytTEcBG0jmhVxlXR9ekkXbMKOorbBXL8HQrGiqHfhSky
+rbH5bo7QBJkHL0y29vvfP9rqwfmvTHyAWkiV8uWIcSvz/ycXXFkCFfV6vh+h21f
daHJ+nvz80edJQon4lmjgympsPoMEFEL9CJLP0FHKoJY9AkjwnR7qi2RcjmO12TE
0jF1grpC6VDxrYbokUl+AyIxFO/2XYWIIDBSt3RLIWXzl0r85qLQ+SDYTw1p4VTt
B7fnbiUHQ4al1E/yh2F4xPRe7nGDAtNokDP54cTTIGj71psMrIhFBctErWykej9C
6AQx8JiRGL6ptA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:30 2025 by rpki-client