Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
File: 0WvbquPjCjoSaBh8YiaL0w8wtLM.mft (raw, json)
Hash identifier: 7sBCQkp5OHfkG4AaSyqqqeijWEbUUWxla5rxmGvb0LA=
Subject key identifier: B2:33:DE:BC:B3:74:6A:FC:94:1C:2A:E5:E4:FB:C5:16:AE:88:2B:AD
Authority key identifier: D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
Certificate issuer: /CN=d16bdbaae3e30a3a1268187c62268bd30f30b4b3
Certificate serial: 019503E6E3567746C148F469D5EB8E52F706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvbquPjCjoSaBh8YiaL0w8wtLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
Manifest number: 065D
Signing time: Fri 14 Feb 2025 10:00:17 +0000
Manifest this update: Fri 14 Feb 2025 10:00:17 +0000
Manifest next update: Sat 15 Feb 2025 10:00:17 +0000
Files and hashes: 1: 0WvbquPjCjoSaBh8YiaL0w8wtLM.crl (hash: l4Bd9lGtn0kqfuQmy53r9afn16Lk7S8ANZ86rapgHQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:e6:e3:56:77:46:c1:48:f4:69:d5:eb:8e:52:f7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdbaae3e30a3a1268187c62268bd30f30b4b3
Validity
Not Before: Feb 14 10:00:17 2025 GMT
Not After : Feb 15 10:00:17 2025 GMT
Subject: CN=b233debcb3746afc941c2ae5e4fbc516ae882bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:c7:bb:16:cf:0e:3f:c7:38:d1:fc:ad:65:
d8:30:a9:dc:cb:01:72:b7:76:83:f9:15:06:d3:72:
df:09:4c:d3:8b:4a:d9:3a:e0:a7:84:2f:f7:2c:3a:
54:19:05:f1:72:23:d6:18:f3:65:23:c2:ce:48:f2:
0c:77:7b:ac:c2:c0:25:d5:d6:f9:59:ca:fe:d2:3f:
ad:78:82:33:be:63:3a:30:de:67:42:ac:d8:f2:a9:
8e:c4:c2:3b:8b:9c:5a:23:e4:52:c1:c4:94:02:95:
72:92:a8:2f:1b:63:72:71:05:73:cf:2b:46:6e:2b:
97:c9:31:4d:ce:a7:0e:64:4a:79:b7:c4:7c:e2:03:
ac:79:86:f5:1b:d6:e0:e7:65:95:2c:f1:fd:92:7f:
4c:10:a3:b8:15:ea:4c:cd:a6:ca:90:44:65:6e:33:
0d:7e:2c:bd:0e:ec:ef:18:32:b9:42:8c:f8:14:41:
80:85:19:a0:49:29:3e:b8:ef:6a:c6:c1:8b:4c:0b:
e3:fc:12:34:4e:7c:7b:c6:73:e9:1d:37:84:56:dc:
0d:ab:0a:95:fd:45:02:28:55:a3:32:17:35:df:42:
aa:da:35:0c:d5:4c:b1:a6:fa:62:b2:74:0d:11:9a:
ab:10:5f:dc:14:64:73:d1:00:af:4b:cf:37:47:3d:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:DE:BC:B3:74:6A:FC:94:1C:2A:E5:E4:FB:C5:16:AE:88:2B:AD
X509v3 Authority Key Identifier:
keyid:D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvbquPjCjoSaBh8YiaL0w8wtLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:00:0d:88:e6:08:08:2e:28:f2:20:94:f2:41:49:d5:cb:4c:
d6:1a:30:e6:53:54:62:e9:9d:41:0c:ce:d7:73:6e:9a:6c:f5:
eb:e9:eb:24:84:c6:cb:08:b1:1f:eb:12:b3:2c:45:6d:83:0b:
0d:b4:4e:b0:55:19:5a:37:f2:51:d2:94:00:e9:37:11:f8:3d:
34:5b:3a:3c:aa:75:05:f3:6d:ab:04:12:82:29:22:1c:0f:f4:
d8:e8:c4:5d:bc:66:ba:da:88:33:98:92:dd:28:ac:8c:71:13:
74:f0:ef:ff:11:3a:17:7b:57:cc:bf:3b:31:eb:3f:b6:69:08:
bd:00:11:6a:e9:af:ed:08:a4:6f:63:ac:d9:b6:95:f4:0d:31:
b8:6c:bd:f9:d9:5d:45:dc:72:19:dd:9d:47:98:ef:aa:83:61:
22:d9:49:55:c7:70:69:16:4c:78:52:6c:e0:9a:44:eb:24:e4:
22:55:bc:08:82:f1:b6:bc:17:8c:9b:43:b6:fa:cb:e0:ff:25:
a2:e3:5a:7a:81:36:18:1b:cd:09:6d:90:37:23:4b:4f:30:a1:
12:b8:01:2f:f3:d1:1d:49:c7:51:84:86:9a:c1:15:45:a6:b3:
f2:8d:0e:63:ed:c6:84:5f:96:7c:ea:83:03:71:23:01:0d:39:
7f:5f:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:19:11 2025 by rpki-client