Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5710dc-c6b8-4d3d-b459-1c0e84724b2d/1/3wagDypzCwYdeZ043Z5DttU-tkk.mft
File: 3wagDypzCwYdeZ043Z5DttU-tkk.mft (raw, json)
Hash identifier: wJKksNZL6sn12dLqRFPr/hgV1XuWwYr17KSbGPMchJ8=
Subject key identifier: 86:64:F7:9C:55:B7:21:FB:23:BC:82:11:FD:C9:4A:10:B5:05:9F:0F
Authority key identifier: DF:06:A0:0F:2A:73:0B:06:1D:79:9D:38:DD:9E:43:B6:D5:3E:B6:49
Certificate issuer: /CN=df06a00f2a730b061d799d38dd9e43b6d53eb649
Certificate serial: 01967009D9333E67ED85BFCAB3A65913EC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wagDypzCwYdeZ043Z5DttU-tkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5710dc-c6b8-4d3d-b459-1c0e84724b2d/1/3wagDypzCwYdeZ043Z5DttU-tkk.mft
Manifest number: 02
Signing time: Sat 26 Apr 2025 03:00:15 +0000
Manifest this update: Sat 26 Apr 2025 03:00:15 +0000
Manifest next update: Sun 27 Apr 2025 03:00:15 +0000
Files and hashes: 1: 3wagDypzCwYdeZ043Z5DttU-tkk.crl (hash: ekejQpq8LGmwiAPV88orAa8mM13abezc2K64pXqqo9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:09:d9:33:3e:67:ed:85:bf:ca:b3:a6:59:13:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df06a00f2a730b061d799d38dd9e43b6d53eb649
Validity
Not Before: Apr 26 03:00:15 2025 GMT
Not After : Apr 27 03:00:15 2025 GMT
Subject: CN=8664f79c55b721fb23bc8211fdc94a10b5059f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:0b:b9:b7:5a:38:76:d4:f1:27:65:a0:2b:
00:e3:04:91:38:cf:1b:36:4f:d5:53:6e:78:87:a0:
05:af:f0:85:85:41:6f:28:bb:2d:c3:4c:3e:2e:2e:
f9:4f:ed:38:16:04:04:ff:39:e6:95:16:88:9f:b1:
28:47:f1:28:f7:92:c0:39:e1:dc:65:63:d6:2c:a9:
a8:db:6a:4b:83:12:7c:d8:64:58:1b:f7:58:f9:99:
a6:a9:54:15:69:f8:42:cb:ca:dd:cc:f1:e8:01:aa:
a1:d2:2e:4f:ed:59:c7:1a:e7:08:ea:7a:12:ad:7b:
0b:bf:d4:8d:9c:f8:79:17:81:72:96:ad:32:2e:3a:
a2:c0:05:98:dd:45:59:d5:19:c1:65:e7:10:93:77:
d3:2e:9b:fa:67:f0:3c:f1:98:c3:a3:c5:3f:0c:14:
e6:c1:90:7a:4d:10:95:ca:74:6d:f7:c1:0e:da:c1:
f6:2d:18:39:3c:59:cc:2e:aa:1d:25:6c:06:e6:5a:
d2:92:f5:89:0b:3d:3d:11:93:bd:75:10:7a:5f:09:
d6:23:51:10:fb:95:d2:10:47:08:95:a3:87:3b:33:
a2:ba:2d:d5:24:f8:7d:e2:c6:16:87:5a:6b:af:c0:
d7:3a:a3:05:a4:d6:12:45:a7:a2:e6:54:4f:60:09:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:F7:9C:55:B7:21:FB:23:BC:82:11:FD:C9:4A:10:B5:05:9F:0F
X509v3 Authority Key Identifier:
keyid:DF:06:A0:0F:2A:73:0B:06:1D:79:9D:38:DD:9E:43:B6:D5:3E:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wagDypzCwYdeZ043Z5DttU-tkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5710dc-c6b8-4d3d-b459-1c0e84724b2d/1/3wagDypzCwYdeZ043Z5DttU-tkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5710dc-c6b8-4d3d-b459-1c0e84724b2d/1/3wagDypzCwYdeZ043Z5DttU-tkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:b0:69:0b:bf:16:3e:a0:77:33:03:fb:8c:36:5f:7a:61:
af:00:c4:ef:64:0e:77:12:66:d1:38:cf:b4:68:03:78:d8:67:
99:fe:8b:d5:0b:2e:8c:ec:b2:64:6d:ab:44:e2:c8:5d:b7:ae:
60:39:89:d2:2a:4e:cb:7e:68:e3:79:75:d6:23:1c:36:6e:37:
ba:d5:81:16:f6:18:a5:6f:52:cb:27:71:89:2d:4b:94:4c:b7:
32:ae:d5:07:b3:90:9e:4f:d7:e9:91:8f:6c:e3:27:a2:46:9a:
fe:68:62:07:a5:c9:ad:ac:6f:89:cb:5f:9e:a2:72:d6:9d:f1:
cf:40:3e:0f:10:dc:e5:68:6c:51:03:59:4a:c2:c0:25:91:f2:
d2:60:19:ee:d4:3f:08:d6:40:1d:4b:5e:4b:50:19:d0:40:30:
54:76:51:9d:bd:66:df:5d:7f:6b:73:82:71:5e:80:aa:99:94:
1e:b2:5b:fc:6c:7b:7e:81:2f:d1:5e:7e:c2:77:3c:2f:5c:67:
1a:79:02:6a:6e:23:75:95:4e:a3:f7:e3:48:cf:6c:fc:cd:cc:
d5:de:12:7a:89:be:d9:a6:c6:33:98:d7:c0:38:82:13:90:12:
46:8b:ae:54:d9:f2:29:9e:29:ef:bd:22:01:86:aa:83:51:89:
b0:7b:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:24:10 2025 by rpki-client