Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.mft
File: W3D3NqSwUkpHb28b4pZK6ZtkeJ8.mft (raw, json)
Hash identifier: AmIP6KhTGXgqOBldj8lhcxCCFCH09SG7QLb8/gWVGzE=
Subject key identifier: 3E:B4:17:06:DC:61:A4:24:2B:DE:39:88:CF:A5:A9:62:15:66:49:4C
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 01910B742F5FFDBD1D8DBE5FCACC81FB393F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.mft
Manifest number: 0DCB
Signing time: Thu 01 Aug 2024 01:00:49 +0000
Manifest this update: Thu 01 Aug 2024 01:00:49 +0000
Manifest next update: Fri 02 Aug 2024 01:00:49 +0000
Files and hashes: 1: 3AOG1zwfdk7xNrMQuVWOg-anv7k.roa (hash: 4FVwD7ftCTUeA9u/JnRf9YrqIyv+XJyxT1aCMLhao3M=)
2: W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl (hash: RRM2On0LWpkcuZP7lp4BEOTIPlFLTTgqpfGqDxGSZY0=)
3: bLWj1NBOiSLtzPdpCMkEiTbGito.roa (hash: EKTeBNLF5COHHLY/p8Yq6esYcy9PuPjOr2daedZ2+UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:74:2f:5f:fd:bd:1d:8d:be:5f:ca:cc:81:fb:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Aug 1 01:00:49 2024 GMT
Not After : Aug 2 01:00:49 2024 GMT
Subject: CN=3eb41706dc61a4242bde3988cfa5a9621566494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:58:17:6d:92:ca:d4:42:e2:70:4e:85:1a:
c4:4d:37:d0:a4:f7:a4:43:04:66:c2:93:6d:a6:6a:
b6:52:d5:b8:21:7f:25:aa:92:e3:25:96:17:dd:5b:
42:0c:b3:ff:69:50:b0:b7:4c:03:a8:b6:75:4b:0b:
e2:f9:c4:d1:f2:f0:8a:fd:92:f4:3f:e7:64:c9:e4:
59:15:55:c4:8d:0f:a5:b2:e3:d0:7b:f1:84:b4:3d:
bb:5e:28:91:49:d9:a4:a3:8b:20:5e:23:f6:c6:c9:
fe:92:45:42:e8:6b:ab:0e:d6:fc:22:89:1f:ef:2b:
44:1f:21:1a:8d:76:9e:4a:c6:5f:51:be:c0:d0:7b:
b6:9c:90:d8:9f:cc:83:c4:0f:ad:f3:81:d8:e1:10:
0d:86:b7:39:d4:b0:eb:98:af:82:b8:78:8f:84:10:
b8:3b:0f:df:dc:d0:14:e6:29:e9:90:f7:d2:f9:9e:
6a:b0:a3:55:71:db:d4:e1:b0:fe:ba:32:e0:78:a2:
dd:b4:64:05:25:ad:e0:ca:bf:62:3b:c0:a3:e6:20:
d4:c0:90:49:cf:40:36:ab:c8:6c:25:dc:38:ea:a0:
85:f1:80:70:2a:aa:21:72:29:00:d9:27:fb:29:15:
50:2e:14:a6:10:3c:3f:77:53:5f:77:55:59:e0:7f:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:17:06:DC:61:A4:24:2B:DE:39:88:CF:A5:A9:62:15:66:49:4C
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:61:21:94:10:fb:f8:a5:99:d0:fb:6a:2f:57:cc:ab:5d:
b5:b6:6c:53:81:6c:18:46:ae:10:95:ef:e0:1f:24:5f:65:5b:
57:14:a7:64:7b:ba:92:88:48:49:6e:17:d5:0c:e8:93:a1:37:
10:ac:43:21:3e:14:fd:d3:ee:8f:71:a9:cf:06:43:2e:2a:cb:
40:56:de:aa:06:3d:e4:87:a5:d7:8c:32:2e:a2:89:a5:36:2a:
9c:d9:7d:98:f3:a2:1d:bd:67:55:fb:f9:a7:e4:c5:00:ce:58:
f2:f4:ba:24:aa:b1:21:ec:c5:66:11:42:ad:f2:82:06:25:3c:
e4:f8:25:f9:79:2f:da:4c:08:48:42:44:75:34:0c:c4:64:88:
de:64:42:a4:87:f1:c3:bc:99:aa:0f:f5:39:f6:91:01:26:ec:
86:2d:6a:be:dd:31:ec:ea:aa:29:8b:ab:7d:0f:7e:da:d2:4f:
19:7a:2d:e2:ff:00:05:76:eb:d6:89:11:fe:a3:67:bf:03:e6:
d1:32:c2:82:a6:5b:7f:05:d1:59:0c:04:e4:9a:ac:e6:33:61:
05:c9:65:51:66:49:2e:27:4a:cc:7a:c4:8a:57:88:cb:06:eb:
d7:5a:f6:d0:61:d9:9a:b8:33:b3:9c:c6:3b:77:84:4f:db:36:
a2:98:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:34:56 2025 by rpki-client