Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: RpMIfANuQq9t7v9rZODlCv79DMJB1jINXRqR/oCJzTM=
Subject key identifier: 51:6C:11:16:8E:F8:A7:5B:92:A7:74:DB:AA:52:AE:8D:F1:36:A0:46
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 0195E1906B78F337B1ECB64E34B0099C5020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 0755
Signing time: Sat 29 Mar 2025 11:01:33 +0000
Manifest this update: Sat 29 Mar 2025 11:01:33 +0000
Manifest next update: Sun 30 Mar 2025 11:01:33 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: bVouzAbgEIKRZNa5i6JW4YkI9TCBBsU+nBsGVMividY=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:6b:78:f3:37:b1:ec:b6:4e:34:b0:09:9c:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Mar 29 11:01:33 2025 GMT
Not After : Mar 30 11:01:33 2025 GMT
Subject: CN=516c11168ef8a75b92a774dbaa52ae8df136a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:6d:c0:fb:d4:70:07:f1:74:3c:da:13:48:
27:37:52:ce:56:9d:bb:d8:41:71:e3:ff:57:42:cc:
c1:84:b3:8c:43:10:4b:a3:c3:cf:01:75:9c:51:d7:
2c:60:03:f9:1e:47:7d:93:5c:2e:d1:1c:80:f4:0b:
07:11:5c:8b:4c:68:ae:99:bc:66:55:2a:0a:cb:73:
f8:e7:9f:97:f9:cf:11:39:aa:46:37:03:54:33:8b:
54:84:e1:70:f8:b2:d5:d7:c1:f1:54:78:1b:eb:ed:
3c:c5:69:a3:51:62:47:0b:f4:e2:ea:f9:0f:58:ef:
4a:3b:27:88:ee:ef:a0:7d:f6:1b:91:35:6c:c9:30:
58:2d:fa:9f:29:bc:59:de:86:a8:59:5d:ed:fc:75:
da:48:4f:b6:7d:c1:34:11:c1:ee:ad:e0:f4:00:68:
ec:1b:d0:a8:ca:bf:f0:b9:3e:e1:99:f6:50:04:6f:
79:5f:6f:34:14:d0:f1:3a:54:4c:9d:bb:0d:bb:15:
c2:87:12:2e:cb:64:94:04:b8:40:51:b2:1c:9a:94:
5c:78:e9:9e:6e:d7:d2:81:d2:c4:39:30:2a:fa:3d:
43:37:6b:4b:db:36:40:2c:df:eb:b9:5c:33:ca:e1:
46:9b:01:b5:bc:4f:d8:57:c9:d2:c3:7d:e7:8a:7f:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:11:16:8E:F8:A7:5B:92:A7:74:DB:AA:52:AE:8D:F1:36:A0:46
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:02:36:be:8d:fb:35:2c:b1:d8:62:5a:9d:8d:2c:ab:d5:
a2:db:27:45:e8:07:14:d1:ee:b0:11:51:d6:2a:2e:b2:ea:81:
2a:91:e7:5b:75:48:07:48:0c:75:2b:08:8e:9b:16:94:aa:e0:
ed:2c:7d:c8:ea:20:39:8b:03:9f:58:a8:e9:9f:0b:77:ec:a2:
e4:f3:7f:a0:bd:a1:b5:3a:32:f4:03:69:c4:52:89:f9:75:e7:
6d:a1:5f:bd:a7:ef:5d:02:d4:6c:15:48:d6:0f:e8:48:18:df:
f1:8e:ba:a0:81:2a:13:cd:43:9e:5f:02:f9:8f:ac:66:eb:14:
cf:df:d7:8c:7d:a8:c3:8d:29:d0:95:a7:ca:1a:d3:a7:fc:c7:
d6:f1:33:0f:99:45:46:f0:7a:6a:42:b5:bd:c1:a9:1e:7a:5c:
05:16:a7:d4:56:63:50:49:b7:9f:d3:63:df:9b:f6:ce:ca:5a:
ad:eb:da:63:97:12:57:4c:48:ef:29:4a:07:1b:48:d5:96:49:
98:f3:10:01:cd:05:50:e5:b2:17:1b:de:4a:9e:75:1d:ed:5c:
fa:d6:af:3a:bf:d1:29:60:ca:b7:e2:06:9f:6d:bc:cd:15:82:
68:a6:13:45:87:4e:82:b1:e3:44:a3:a8:8c:6b:0e:59:25:16:
1b:7e:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:53 2025 by rpki-client