Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: PUwz70Dmq8FR8mfD8In3oX6GhX7cEUfVnwL//A4Qe6Y=
Subject key identifier: 77:80:76:77:5A:9C:16:26:CC:64:70:8A:DC:18:03:C8:D0:F5:F9:0F
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 0194BD85A3FB5854B144619DBEE77CA11B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 023F
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: 6aM7i7tOnDHYKJZsLkm6rWRJaRIJZxbMsXdh06svabk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a3:fb:58:54:b1:44:61:9d:be:e7:7c:a1:1b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=778076775a9c1626cc64708adc1803c8d0f5f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:f8:95:6c:ae:84:c8:ba:94:cf:ef:3b:08:
58:a7:0e:2b:d0:5f:a8:39:c5:b9:bd:10:70:72:c0:
3d:68:e3:40:bb:27:fe:b0:b7:82:06:b0:e1:65:48:
cb:36:4c:d0:9f:f9:c3:5b:34:53:e7:3b:2e:7b:91:
f8:fa:b8:96:aa:a7:c1:3f:5f:79:74:d2:59:21:d0:
fa:a0:ad:34:67:c8:d7:b8:2b:a9:a3:9e:13:89:0e:
10:36:c4:bf:65:f7:a9:c5:18:0f:d4:83:f5:06:77:
c0:7d:dd:df:9d:94:41:87:45:61:02:72:a0:c6:5a:
21:1a:d4:05:25:98:c8:cf:84:f7:53:4b:f1:a2:11:
74:d2:73:d1:0b:30:c5:2f:39:89:36:4d:31:3b:d9:
c0:6b:5e:cf:fe:3c:80:af:19:90:e9:00:02:29:36:
02:35:39:fe:a2:3c:92:7a:ed:5b:e8:5f:61:e7:68:
2f:30:fa:d4:22:ec:08:45:1d:11:f0:56:36:99:29:
e9:20:79:e3:c5:06:ee:6f:66:17:44:df:ba:63:07:
bf:2d:9a:a5:6b:c3:28:12:1b:0d:d9:1c:2a:82:fa:
92:ee:13:85:e9:d9:d1:0d:d6:81:d9:be:bb:e8:8c:
ed:1c:17:a4:af:40:2f:06:c4:33:61:b4:fa:7a:0a:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:76:77:5A:9C:16:26:CC:64:70:8A:DC:18:03:C8:D0:F5:F9:0F
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:26:02:af:1e:8e:58:22:cb:d3:11:9e:11:14:ff:0c:15:
fc:fd:5c:7b:b5:16:8c:43:32:2b:6d:b5:77:07:cb:dd:27:4f:
d3:1e:a4:bf:0e:fd:dd:d3:bb:41:43:09:df:b5:a8:f5:13:17:
1c:ce:e1:c1:f2:85:2c:4b:30:75:0e:a7:1c:a6:ed:70:7d:8d:
45:68:38:4d:1d:41:24:68:11:11:a8:60:af:76:3e:23:e8:f2:
1e:4a:16:55:3b:33:6c:87:f7:e3:b4:66:13:da:61:33:63:4c:
c2:67:3f:15:5e:76:39:88:cd:ae:2e:95:a6:df:e9:35:68:1e:
54:39:d1:22:bd:e3:3f:d4:dd:be:eb:59:d6:fa:2e:d5:11:22:
58:43:1b:12:ef:57:37:4b:79:c6:96:c2:d5:10:3a:54:04:4a:
cf:3f:06:87:59:6c:65:97:52:bc:80:e0:8d:99:cd:d0:51:16:
d1:5a:24:09:47:30:d8:8a:6a:71:a8:50:30:07:50:f0:6c:98:
ba:c6:93:ab:69:19:e8:3a:62:77:17:7d:3f:56:29:13:48:c9:
45:c1:86:25:c5:8c:75:9b:00:3e:7a:de:b6:6f:01:60:b3:fa:
34:b8:f6:70:e5:a6:8e:e2:ec:a1:8f:4d:55:b6:d4:43:6f:0e:
c8:74:d2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haP7WFSxRGGdvud8oRtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
Eyg3NzgwNzY3NzVhOWMxNjI2Y2M2NDcwOGFkYzE4MDNjOGQwZjVmOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn74lWyuhMi6lM/vOwhYpw4r0F+o
OcW5vRBwcsA9aONAuyf+sLeCBrDhZUjLNkzQn/nDWzRT5zsue5H4+riWqqfBP195
dNJZIdD6oK00Z8jXuCupo54TiQ4QNsS/ZfepxRgP1IP1BnfAfd3fnZRBh0VhAnKg
xlohGtQFJZjIz4T3U0vxohF00nPRCzDFLzmJNk0xO9nAa17P/jyArxmQ6QACKTYC
NTn+ojySeu1b6F9h52gvMPrUIuwIRR0R8FY2mSnpIHnjxQbub2YXRN+6Ywe/LZql
a8MoEhsN2RwqgvqS7hOF6dnRDdaB2b676IztHBekr0AvBsQzYbT6egrDDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeAdndanBYmzGRwitwYA8jQ9fkPMB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWAmAq8e
jlgiy9MRnhEU/wwV/P1ce7UWjEMyK221dwfL3SdP0x6kvw793dO7QUMJ37Wo9RMX
HM7hwfKFLEswdQ6nHKbtcH2NRWg4TR1BJGgREahgr3Y+I+jyHkoWVTszbIf347Rm
E9phM2NMwmc/FV52OYjNri6Vpt/pNWgeVDnRIr3jP9TdvutZ1vou1REiWEMbEu9X
N0t5xpbC1RA6VARKzz8Gh1lsZZdSvIDgjZnN0FEW0VokCUcw2IpqcahQMAdQ8GyY
usaTq2kZ6Dpidxd9P1YpE0jJRcGGJcWMdZsAPnretm8BYLP6NLj2cOWmjuLsoY9N
VbbUQ28OyHTS3w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:00 2025 by rpki-client