Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: PWEXbVImqT6cj3/n3WTtCxJe7SnARyoRHp6CLrmcJTU=
Subject key identifier: F4:D0:73:76:80:3C:C1:F9:D5:DD:57:CB:24:22:9D:E5:94:12:CD:8F
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 0195E1904750F54FBFA7F7AB5738F937BC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 113C
Signing time: Sat 29 Mar 2025 11:01:23 +0000
Manifest this update: Sat 29 Mar 2025 11:01:23 +0000
Manifest next update: Sun 30 Mar 2025 11:01:23 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: ZVniR2CvfSCvQnRSCtrZnequoBu2KC686C2DHBdu5ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:47:50:f5:4f:bf:a7:f7:ab:57:38:f9:37:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Mar 29 11:01:23 2025 GMT
Not After : Mar 30 11:01:23 2025 GMT
Subject: CN=f4d07376803cc1f9d5dd57cb24229de59412cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:22:53:91:7a:e3:0b:43:6c:c6:a0:f0:25:
d4:56:f7:7b:cf:8a:6a:92:65:d2:e0:89:0d:2f:92:
45:4f:3b:a1:50:82:bc:b9:8c:df:38:e0:d9:bc:e3:
71:0f:46:63:2c:83:65:fd:f1:47:67:64:6f:10:6f:
d6:c1:63:49:fa:a2:34:2f:3c:d6:66:d7:09:d6:0b:
1d:71:49:40:a4:62:b5:7e:a6:e8:bb:8d:07:1d:98:
2d:2c:f2:5e:5e:2b:12:42:86:82:cb:a5:18:de:58:
5e:b7:5d:87:05:02:8e:e5:4d:29:18:29:a7:85:3b:
d1:4b:0c:d3:60:19:cc:55:d0:fe:2f:cd:bd:8f:ac:
50:b1:cf:72:cc:f3:c7:88:ea:ec:b4:e4:37:f1:9b:
ef:44:9d:f1:fd:1c:fb:46:4b:45:2d:10:82:3f:40:
9b:31:31:57:59:b1:5a:9f:6e:a7:d0:07:96:65:ac:
a9:2b:47:ee:20:50:b7:e6:92:cf:a4:e5:b3:3a:28:
69:d3:15:42:a5:a1:c9:12:d0:67:f1:82:52:30:1f:
32:c3:7f:b8:7b:bd:bf:f1:1d:59:4a:94:17:0d:92:
a9:91:98:58:be:0b:49:34:af:ae:98:91:9c:56:84:
c2:a9:19:b4:1b:40:60:4a:a7:5a:76:cb:91:4c:5f:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D0:73:76:80:3C:C1:F9:D5:DD:57:CB:24:22:9D:E5:94:12:CD:8F
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:24:be:22:53:85:fd:35:02:59:52:77:4b:a7:40:74:eb:
ed:30:2c:24:26:e1:d7:01:db:df:b5:dd:0a:3a:67:62:59:6b:
1b:03:50:a8:0f:61:0b:d4:fc:24:1d:ff:41:00:21:b5:b2:2e:
8f:79:e4:09:eb:27:42:8c:48:90:a3:4e:05:af:a2:e6:bc:a2:
9f:23:8e:8f:42:09:e7:a6:4a:25:07:bd:63:36:9a:3f:d9:50:
4a:43:dc:84:29:92:95:d4:04:49:1c:1b:30:50:49:ad:64:20:
ce:98:62:26:0d:6d:09:b3:b7:ba:b0:30:0a:b1:2b:6d:e5:87:
c0:34:a6:1a:31:1b:7e:e1:ca:02:59:fa:55:42:c2:83:d6:07:
14:29:33:a5:a3:db:0d:4b:f5:ce:19:ef:98:3b:9d:d3:61:e2:
37:a0:fe:66:70:f8:b5:5a:20:7f:c5:1a:db:55:39:2e:cd:db:
c8:da:5c:17:97:7d:a2:ba:e0:4b:ec:3f:76:bd:5f:be:f9:2f:
20:8e:c3:e3:a9:d3:9d:fb:8e:a4:1a:bf:33:7a:d5:80:de:47:
98:c3:00:17:14:70:a8:12:9f:2a:8d:c6:e5:91:c9:d5:28:2d:
7f:7b:26:98:03:44:a7:55:fb:aa:e4:69:ca:a8:f8:66:a6:15:
e7:25:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:10 2025 by rpki-client