Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: Mw5WYyXSXTFBiXbcdCvVc5E1f5GSZIJSoGpLQWAgac4=
Subject key identifier: 2B:24:83:E6:5E:86:A1:C6:32:92:AA:92:42:8B:42:18:A2:B1:67:E0
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0195E1221AE8B13E93A45C0A60D1D62333B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 0FAC
Signing time: Sat 29 Mar 2025 09:01:03 +0000
Manifest this update: Sat 29 Mar 2025 09:01:03 +0000
Manifest next update: Sun 30 Mar 2025 09:01:03 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: SiKMThtFNh0Xi+WHNnHI3/CHjbs4KTPmN1q2UkaNkOg=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:1a:e8:b1:3e:93:a4:5c:0a:60:d1:d6:23:33:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Mar 29 09:01:03 2025 GMT
Not After : Mar 30 09:01:03 2025 GMT
Subject: CN=2b2483e65e86a1c63292aa92428b4218a2b167e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:a8:7f:69:b1:e0:19:d6:a6:ed:17:6c:09:
f6:11:dc:37:ab:87:82:63:fe:1b:6a:f6:ca:c2:f6:
3b:3b:5b:e7:54:4c:cb:72:f9:f7:e5:36:94:53:da:
c9:81:b2:cc:cb:72:69:90:c6:75:74:98:85:94:f6:
03:21:d2:d4:04:73:21:42:a7:d6:ec:cb:76:40:93:
1b:86:bb:8e:82:cf:5f:48:7d:f2:24:97:27:be:c3:
48:42:14:4e:2d:40:16:e5:f6:f6:83:d9:d7:b3:92:
f2:83:6d:81:04:bd:65:b6:a0:e6:20:80:2b:a0:5a:
9e:a0:d9:d3:7d:27:a4:39:2b:db:7f:65:dc:28:6c:
3c:e9:3a:86:b9:03:21:74:4b:64:67:4f:10:8b:6d:
93:20:4d:48:00:07:c7:2c:67:89:85:4b:87:5f:f4:
7c:df:45:62:25:c4:0b:82:ea:dc:c8:a2:27:b2:0b:
36:e5:db:c7:7d:8f:59:90:9b:af:b9:4f:9e:a1:80:
75:66:a7:43:dd:ea:87:71:39:34:30:c1:4e:c2:e0:
b5:b7:ca:fc:09:d3:ad:37:61:92:2e:05:b7:46:82:
08:60:f9:ef:17:16:ad:ba:98:d5:3a:6b:68:0f:98:
ec:3c:58:28:0c:fb:2b:de:73:9a:63:9b:ba:97:6a:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:83:E6:5E:86:A1:C6:32:92:AA:92:42:8B:42:18:A2:B1:67:E0
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:a2:5c:97:a3:77:f0:d4:5b:46:29:ee:83:6d:7a:da:1e:
b8:24:00:b5:8f:94:45:ca:f0:d7:ce:76:e9:28:2c:f5:fb:f5:
82:43:e9:ad:f0:c5:0e:a9:2a:d1:43:3a:31:1c:86:44:51:d4:
1a:d4:1e:ca:b7:fd:8d:e2:88:f0:88:cf:27:22:34:51:01:c9:
fd:53:f7:46:ff:12:04:4b:d5:db:d0:ef:ec:d9:78:f6:1d:ad:
d5:d9:ac:ec:f8:2c:bd:0a:cc:ef:0a:98:e8:08:02:04:4d:13:
25:21:70:ed:33:9b:6a:aa:2c:5c:33:60:3b:12:bd:b9:4e:3e:
5b:78:b5:00:41:bb:1f:16:c7:02:3b:21:68:a9:5a:63:a4:a5:
e2:f0:9c:d9:97:3a:41:c3:cc:79:fa:c7:9b:3d:c1:6a:b0:e4:
a1:5c:9e:4b:fd:75:8e:5a:f0:dd:bb:3a:61:a2:b2:0b:7e:57:
a3:4e:20:91:52:d7:0c:50:8d:d4:d5:ad:43:a0:5a:81:88:e8:
31:f4:43:a1:26:29:e5:64:b4:37:fb:fb:f0:d1:ad:a8:41:85:
16:16:73:b5:c3:f7:2f:5a:57:dc:76:aa:64:53:2b:56:69:a1:
43:51:b8:51:08:5b:88:2c:1f:6b:df:a2:05:0b:61:24:37:62:
1c:34:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:00:28 2025 by rpki-client