Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8dd29-b334-4eeb-98c4-15f900b0788d/1/WO1QA7hpjidQFq42plr1_b70z2M.mft
File: WO1QA7hpjidQFq42plr1_b70z2M.mft (raw, json)
Hash identifier: CD81O5gZbmruRUeBEZNj0EErOUS7jLR0mmoXR6nUPB4=
Subject key identifier: 0D:0B:43:3F:24:9A:C9:5D:46:BD:E2:34:02:D5:5C:FF:2B:4E:55:E3
Authority key identifier: 58:ED:50:03:B8:69:8E:27:50:16:AE:36:A6:5A:F5:FD:BE:F4:CF:63
Certificate issuer: /CN=58ed5003b8698e275016ae36a65af5fdbef4cf63
Certificate serial: 018BC7EA435DBD5EF1012CF5A5C494B0FA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO1QA7hpjidQFq42plr1_b70z2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8dd29-b334-4eeb-98c4-15f900b0788d/1/WO1QA7hpjidQFq42plr1_b70z2M.mft
Manifest number: 03FD
Signing time: Mon 13 Nov 2023 09:01:40 +0000
Manifest this update: Mon 13 Nov 2023 09:01:40 +0000
Manifest next update: Tue 14 Nov 2023 09:01:40 +0000
Files and hashes: 1: WO1QA7hpjidQFq42plr1_b70z2M.crl (hash: vUXdMHYeBxhifz2G5x3e564XIDp3tq4Q3RIFV5NIZCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:ea:43:5d:bd:5e:f1:01:2c:f5:a5:c4:94:b0:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ed5003b8698e275016ae36a65af5fdbef4cf63
Validity
Not Before: Nov 13 09:01:40 2023 GMT
Not After : Nov 14 09:01:40 2023 GMT
Subject: CN=0d0b433f249ac95d46bde23402d55cff2b4e55e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:1f:d8:8c:05:cc:68:e2:66:fb:fe:a3:00:
41:e7:9a:27:e3:ef:9f:f7:31:ab:d8:cb:88:d8:34:
c5:c9:b2:5a:30:8b:85:2c:5e:73:29:e8:81:7b:50:
a6:50:ac:2a:88:a7:ac:d9:a2:81:9a:f8:b9:8d:0f:
0c:b5:b9:9b:f1:ce:b3:eb:16:68:7a:8b:34:27:ed:
1c:6c:e5:3b:3d:9b:dc:ac:b5:91:4e:ef:55:53:28:
83:d3:25:cc:14:9e:ca:23:14:ff:c3:b1:c5:bb:77:
e9:73:0b:a6:70:bb:a6:96:6b:d0:a2:19:b0:cc:79:
a7:d0:9b:4d:98:0b:92:4f:42:9a:20:62:99:cb:d5:
11:95:3d:58:f5:8c:0b:4f:15:ef:bb:71:17:97:4f:
74:82:4c:79:fc:1e:7b:91:fb:fb:fd:11:d7:2a:50:
c2:ab:0e:e7:ea:7e:19:6e:d7:34:f5:9c:c2:d2:64:
ca:14:60:17:5b:91:5a:e8:23:1f:70:75:17:27:aa:
b0:44:1e:1c:77:69:e5:7f:8f:28:ff:28:e3:6c:31:
9a:91:96:80:68:aa:ad:8a:9c:3a:a3:2a:16:a5:e7:
73:02:c3:56:48:60:c5:7e:46:e0:90:64:9a:e7:a5:
7e:73:b4:30:f8:fb:eb:ef:20:1f:34:dc:bc:ed:a1:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:43:3F:24:9A:C9:5D:46:BD:E2:34:02:D5:5C:FF:2B:4E:55:E3
X509v3 Authority Key Identifier:
keyid:58:ED:50:03:B8:69:8E:27:50:16:AE:36:A6:5A:F5:FD:BE:F4:CF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO1QA7hpjidQFq42plr1_b70z2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8dd29-b334-4eeb-98c4-15f900b0788d/1/WO1QA7hpjidQFq42plr1_b70z2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8dd29-b334-4eeb-98c4-15f900b0788d/1/WO1QA7hpjidQFq42plr1_b70z2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:dd:28:5d:b6:0c:90:f4:01:f9:63:f9:56:ad:0d:09:56:
e7:37:8f:7b:bb:dd:72:11:10:bf:7a:34:0f:ed:31:fd:18:fd:
86:3b:d4:d1:d2:f4:4b:61:d6:fe:77:41:06:22:5d:6a:d3:77:
b5:eb:f8:e6:70:f8:70:77:f2:92:6f:96:65:b6:cb:47:c8:3f:
de:5f:4d:52:e8:ce:3f:69:8a:5a:6a:d5:9a:6b:f1:8d:50:09:
70:cd:55:12:68:2e:0a:32:a8:15:03:d5:ec:75:8e:24:d1:72:
4e:ee:04:6c:f0:99:a0:b7:8b:69:8b:8c:70:e2:23:bb:72:60:
8d:f1:1e:7b:ce:e4:bb:46:45:65:d4:98:35:c0:c7:58:14:c0:
1a:10:c2:ae:71:c1:b0:d2:e8:1e:7e:2c:94:a7:6c:7c:23:e8:
2c:a5:45:d8:8a:e4:2d:e6:78:40:b5:fb:16:c9:03:17:3f:91:
36:31:c6:8c:7b:bd:9f:3a:4b:32:58:a3:67:29:1f:7c:ea:ab:
67:e2:d0:54:be:3e:70:ff:ee:b4:94:b1:71:7e:98:94:fd:66:
d2:a5:21:94:ad:56:85:d9:1b:2d:cd:9c:d2:4c:ef:fd:fa:35:
c2:24:a0:97:87:f5:20:08:65:dc:cf:da:81:e7:4f:42:f4:18:
29:e9:56:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvH6kNdvV7xASz1pcSUsPpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWQ1MDAzYjg2OThlMjc1MDE2YWUzNmE2NWFmNWZkYmVm
NGNmNjMwHhcNMjMxMTEzMDkwMTQwWhcNMjMxMTE0MDkwMTQwWjAzMTEwLwYDVQQD
EygwZDBiNDMzZjI0OWFjOTVkNDZiZGUyMzQwMmQ1NWNmZjJiNGU1NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY4f2IwFzGjiZvv+owBB55on4++f
9zGr2MuI2DTFybJaMIuFLF5zKeiBe1CmUKwqiKes2aKBmvi5jQ8Mtbmb8c6z6xZo
eos0J+0cbOU7PZvcrLWRTu9VUyiD0yXMFJ7KIxT/w7HFu3fpcwumcLumlmvQohmw
zHmn0JtNmAuST0KaIGKZy9URlT1Y9YwLTxXvu3EXl090gkx5/B57kfv7/RHXKlDC
qw7n6n4Zbtc09ZzC0mTKFGAXW5Fa6CMfcHUXJ6qwRB4cd2nlf48o/yjjbDGakZaA
aKqtipw6oyoWpedzAsNWSGDFfkbgkGSa56V+c7Qw+Pvr7yAfNNy87aEcMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0LQz8kmsldRr3iNALVXP8rTlXjMB8GA1UdIwQY
MBaAFFjtUAO4aY4nUBauNqZa9f2+9M9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV08xUUE3aHBqaWRRRnE0MnBscjFfYjcwejJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGRkMjktYjMzNC00ZWViLTk4YzQt
MTVmOTAwYjA3ODhkLzEvV08xUUE3aHBqaWRRRnE0MnBscjFfYjcwejJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGRkMjktYjMzNC00ZWViLTk4YzQtMTVmOTAwYjA3ODhk
LzEvV08xUUE3aHBqaWRRRnE0MnBscjFfYjcwejJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLTdKF22
DJD0Aflj+VatDQlW5zePe7vdchEQv3o0D+0x/Rj9hjvU0dL0S2HW/ndBBiJdatN3
tev45nD4cHfykm+WZbbLR8g/3l9NUujOP2mKWmrVmmvxjVAJcM1VEmguCjKoFQPV
7HWOJNFyTu4EbPCZoLeLaYuMcOIju3JgjfEee87ku0ZFZdSYNcDHWBTAGhDCrnHB
sNLoHn4slKdsfCPoLKVF2IrkLeZ4QLX7FskDFz+RNjHGjHu9nzpLMlijZykffOqr
Z+LQVL4+cP/utJSxcX6YlP1m0qUhlK1WhdkbLc2c0kzv/fo1wiSgl4f1IAhl3M/a
gedPQvQYKelWhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:04:50 2025 by rpki-client