Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
File: 0_wrb9dUv48iTSicz2XDjewnKz0.mft (raw, json)
Hash identifier: yFCGFRFX3CU6UtbFOTiVUI8JkPFzdGDC0bcLY02ujA8=
Subject key identifier: 7D:DC:05:94:D5:7B:B3:24:B7:91:2B:5B:C6:D9:B9:86:37:94:99:03
Authority key identifier: D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
Certificate issuer: /CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Certificate serial: 0194BD17E23871435E6CD18C8627576F681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 0_wrb9dUv48iTSicz2XDjewnKz0.crl (hash: mT9tC/6kQGN+TO3zRW7da6RO+vt7YQFQbnk8tUqoUO8=)
2: w4AfMToU7JP5nYDh1bQukqqPtKI.roa (hash: X6zZhIo5tq1i0IjDg9tH1V0hyW60Jjam1awx3+YUNdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:38:71:43:5e:6c:d1:8c:86:27:57:6f:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=7ddc0594d57bb324b7912b5bc6d9b98637949903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:a1:ce:d7:61:a0:05:d3:33:de:84:b8:2c:
69:9a:c9:ed:91:be:9a:0e:b8:f5:88:39:dd:34:1f:
d4:eb:aa:94:f4:4a:74:8d:71:52:d9:5d:c3:48:7f:
2a:f6:4a:6c:9f:fa:78:d6:ce:cd:8a:19:51:7d:06:
04:04:bf:cb:64:60:26:08:1c:57:06:16:e0:d2:17:
3d:98:d9:5d:8f:a7:a2:69:61:36:35:6c:67:b3:88:
79:cc:d2:20:99:be:1f:ca:2b:8e:75:07:a8:2a:b6:
b8:be:08:3d:01:3a:97:51:62:f4:59:8a:f4:2f:15:
1a:df:3b:6f:65:66:ac:36:70:40:f1:70:fd:9c:61:
bc:b5:6d:86:c3:7a:21:6a:60:55:2c:7a:58:32:15:
d9:50:c7:38:0e:45:42:37:54:78:14:64:43:46:0c:
5d:23:98:ab:33:a2:da:b4:d8:f6:28:09:fb:4c:c2:
a9:c5:c4:31:69:a6:fb:a3:37:8d:f4:0a:62:8c:ae:
ae:0c:91:ac:96:c3:c3:43:8c:d3:96:69:13:41:32:
b4:22:be:56:47:30:f0:79:d7:be:9d:25:68:62:66:
37:52:34:b2:a0:31:40:ea:71:e6:22:ea:51:13:fb:
d8:16:c4:6b:5f:76:2f:ce:a4:25:5e:15:da:f4:69:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:05:94:D5:7B:B3:24:B7:91:2B:5B:C6:D9:B9:86:37:94:99:03
X509v3 Authority Key Identifier:
keyid:D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:d1:26:c5:fe:3a:1f:03:ec:be:3e:3b:8b:41:b9:04:b8:
9a:dc:06:1c:0e:93:54:52:e1:57:86:0c:69:86:88:0b:92:0e:
cf:7e:b5:ff:38:e9:d9:b0:26:b7:5a:21:c9:7c:ce:df:94:01:
c2:af:46:bb:50:c5:ce:65:50:05:19:34:b7:77:80:51:7f:47:
fb:aa:e6:66:28:6c:d9:b5:cf:90:7e:17:be:9b:d6:11:04:64:
03:3d:c3:42:7f:a9:6b:02:fe:be:ed:d2:ec:ce:6d:cb:b9:ef:
5e:47:55:19:ff:8c:b4:e9:76:d1:9d:48:32:e3:bb:32:ea:31:
14:d1:b3:2f:ee:eb:c2:65:72:86:c4:74:cb:9e:73:95:ba:e1:
37:58:6c:04:e5:d3:e5:da:88:bf:2f:a5:19:c2:d4:49:9a:1f:
fc:80:5b:6a:3e:42:a3:c4:77:c0:f2:87:65:8e:a9:4f:f6:41:
9e:23:94:8d:0f:5a:8f:59:39:f3:52:a9:40:a6:a3:d3:5c:6d:
55:d5:bf:60:47:fd:f2:88:db:dd:d5:20:24:15:88:06:76:2c:
b8:e9:bf:3c:cb:06:b8:da:43:3e:81:8f:da:56:6b:1b:ed:24:
00:fb:99:39:7a:12:b8:94:0b:bc:e3:92:e5:5a:c9:d9:c4:cf:
04:eb:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:59 2025 by rpki-client