Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
File: 0WltJzHhTVxCuzV0l7ddo6rOIIU.mft (raw, json)
Hash identifier: Mww94TFOmly3NuEgD3o65xCqd5YgyUGVPFuCVAufH0k=
Subject key identifier: 05:0A:C5:CD:62:34:37:A4:80:F3:4C:97:3C:12:84:B3:AB:A8:3D:E0
Authority key identifier: D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
Certificate issuer: /CN=d1696d2731e14d5c42bb357497b75da3aace2085
Certificate serial: 018ABC8D62626E55750593FD9A0F5CEFB00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WltJzHhTVxCuzV0l7ddo6rOIIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
Manifest number: 02C2
Signing time: Fri 22 Sep 2023 11:01:36 +0000
Manifest this update: Fri 22 Sep 2023 11:01:36 +0000
Manifest next update: Sat 23 Sep 2023 11:01:36 +0000
Files and hashes: 1: 0WltJzHhTVxCuzV0l7ddo6rOIIU.crl (hash: 0b+yRSLsUuzmEUQV1t/prm+UTLf5Yj7wMc61+Hk3i2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:8d:62:62:6e:55:75:05:93:fd:9a:0f:5c:ef:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1696d2731e14d5c42bb357497b75da3aace2085
Validity
Not Before: Sep 22 11:01:36 2023 GMT
Not After : Sep 23 11:01:36 2023 GMT
Subject: CN=050ac5cd623437a480f34c973c1284b3aba83de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:8f:80:67:72:46:4e:42:3c:07:c4:4e:08:
b8:10:07:68:18:b3:72:e6:37:c8:91:42:25:60:10:
03:70:7f:fa:c0:f4:6f:51:2b:08:0f:93:65:da:2d:
a1:b5:ae:88:37:70:be:db:59:b0:50:d3:39:d6:c2:
5f:4d:6e:87:65:42:74:35:83:00:50:54:4c:a2:48:
d6:c7:76:3e:48:2e:34:e3:8e:48:8c:00:e8:43:36:
aa:7d:d2:da:28:4d:32:40:e4:a2:3a:83:f9:33:ea:
c7:99:21:d1:a9:7c:f4:20:76:7f:d2:d9:4a:0e:ae:
ef:8d:33:99:f4:67:f3:76:a9:7c:68:a7:09:d7:f0:
62:b1:88:c9:ee:23:04:e6:e9:37:70:47:6c:e6:1c:
b7:55:1d:17:1c:48:be:f0:0a:1f:86:05:88:47:32:
d9:67:2b:11:79:3c:14:4c:f0:0e:56:66:5b:be:31:
7c:34:8c:c6:80:e0:bc:9c:82:40:41:b8:94:6d:68:
90:ee:23:83:6f:0b:16:f8:9e:42:a1:0e:70:0b:c3:
f0:53:ea:2d:45:8c:d0:4d:ce:76:21:fe:9d:0e:f4:
5b:2e:2c:06:5f:21:8a:db:71:20:d7:be:89:8e:03:
40:6d:e8:b5:ce:fd:ab:6e:aa:c2:df:94:2c:fc:7a:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:C5:CD:62:34:37:A4:80:F3:4C:97:3C:12:84:B3:AB:A8:3D:E0
X509v3 Authority Key Identifier:
keyid:D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WltJzHhTVxCuzV0l7ddo6rOIIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:8f:5f:ce:cc:3f:ff:ab:fe:28:2d:5a:df:c1:ec:28:a9:
4c:e8:c2:40:ce:52:ad:ac:dc:5a:a5:db:cb:0f:0a:5a:ef:5b:
f6:58:36:29:d5:f8:2c:a2:ce:e6:1e:f0:30:7f:71:e5:dd:ff:
f7:c7:0f:76:0f:0d:ae:be:17:0c:db:9e:a5:72:62:ff:38:b0:
6d:1b:a8:94:ee:c2:6c:86:4a:3b:48:ad:21:54:e6:6a:55:3c:
55:70:8f:8a:5d:b4:90:8a:64:81:5f:63:b7:cf:fb:21:44:5e:
93:98:ef:4f:a0:77:32:e0:bd:0e:c1:93:d2:b2:1b:ed:b7:d6:
e2:e8:f9:37:65:8f:8e:8d:18:15:38:ab:b5:8f:3c:03:8a:c5:
68:42:0c:de:cd:94:02:62:74:75:a7:01:1e:5c:98:40:14:56:
45:40:77:f6:d7:2f:d0:13:1f:8d:6a:40:8e:e7:30:b7:e7:91:
11:06:c0:8a:05:55:d7:95:82:a6:ca:fd:e1:de:c4:d3:8f:39:
87:31:db:da:da:69:95:6f:c1:b0:10:5c:02:8c:16:92:65:90:
8d:e2:ba:ff:70:3b:0f:92:5b:10:fe:0b:03:59:52:66:b9:f0:
98:f7:e7:84:7e:15:be:5b:87:c4:7f:d8:cd:70:be:08:03:7c:
bb:3d:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:06:45 2025 by rpki-client