Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File: w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier: b7J/T3rOD6AYn96yxZQrzdVqUURdNOrlfm1rd/X0G9Q=
Subject key identifier: 9D:C8:7B:F0:63:A3:BD:A8:3E:D5:93:98:0B:0A:0A:56:FB:FF:4C:08
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial: 0195E00FD439D315BA1C8D99A42657BC367D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number: 0D86
Signing time: Sat 29 Mar 2025 04:01:28 +0000
Manifest this update: Sat 29 Mar 2025 04:01:28 +0000
Manifest next update: Sun 30 Mar 2025 04:01:28 +0000
Files and hashes: 1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: 8XxXA3o6lzqbONpFeJZej3vdLp78ApE+bxJCXpBUr+U=)
2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:d4:39:d3:15:ba:1c:8d:99:a4:26:57:bc:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Validity
Not Before: Mar 29 04:01:28 2025 GMT
Not After : Mar 30 04:01:28 2025 GMT
Subject: CN=9dc87bf063a3bda83ed593980b0a0a56fbff4c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:98:64:26:58:68:33:04:1f:08:31:db:bb:
e0:ef:7d:92:9d:87:2c:c1:c0:85:32:be:2f:87:5b:
05:6d:66:60:9d:cd:4a:42:18:d1:a8:e6:6f:e5:e0:
7e:93:6e:dd:10:ae:67:ac:f3:d6:87:2e:76:cb:61:
26:93:98:24:1e:b5:d0:3d:9f:a3:1d:c5:c4:9d:a5:
d6:50:b4:88:b7:43:26:4e:2f:1e:94:0f:d9:01:9c:
fe:69:8c:b4:8b:75:92:9d:96:9e:71:5a:a5:2a:90:
2d:c9:36:6d:3a:9c:66:cc:b3:26:84:16:c6:de:79:
9a:e3:4a:0d:8d:0e:0a:a2:62:0d:e1:8f:98:f9:cd:
70:2b:64:16:2c:94:46:c8:7c:67:e2:24:75:25:a2:
f2:67:99:f4:0e:9d:bd:60:64:b0:ef:93:fe:bc:a8:
8e:09:51:d9:8a:d2:c6:c2:42:12:18:de:2d:43:b0:
ea:e7:36:33:57:ea:e4:17:76:5e:95:31:82:5d:57:
fa:1c:ad:7f:1a:7e:92:57:ef:fe:cd:a7:10:2f:16:
f8:48:67:91:ed:82:a0:90:47:e6:35:02:18:47:f6:
9d:96:cb:3d:8e:1b:a9:81:39:0e:8b:d0:7f:40:34:
7b:25:58:9d:fc:1f:90:2c:db:5f:c1:eb:c3:13:d8:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C8:7B:F0:63:A3:BD:A8:3E:D5:93:98:0B:0A:0A:56:FB:FF:4C:08
X509v3 Authority Key Identifier:
keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:90:ea:8e:68:51:62:cc:04:a1:51:fd:9d:3c:51:3a:52:
3b:f9:a7:84:c8:f2:7d:3a:8b:56:81:94:0c:bc:62:1a:86:24:
07:33:86:39:59:00:74:74:00:be:83:fc:89:7e:0c:c3:ff:f5:
0e:73:32:13:d9:97:22:c6:4e:79:79:26:6c:2e:ec:5b:cd:9a:
fa:c1:45:fa:50:24:5b:25:b6:50:26:a3:3b:2a:68:39:92:5c:
5e:f2:68:d3:df:53:6a:c9:c7:e4:85:cf:e0:75:31:f7:f7:89:
99:be:82:e6:58:cb:fc:90:0d:82:da:08:89:bf:0e:d5:ec:e5:
58:f7:c3:08:64:5b:94:92:48:cd:32:f2:43:5f:1d:94:ae:a8:
a7:86:c0:66:70:fa:a7:71:26:8d:d9:30:3e:42:32:33:e3:3f:
01:5d:0c:15:ee:d5:39:2c:83:31:c4:a6:70:40:98:82:45:69:
fc:13:e6:ba:79:ad:23:71:43:e2:4e:1f:db:87:42:7a:e4:df:
6d:7b:de:db:2f:10:1b:45:c5:66:24:90:86:93:c5:5a:20:56:
60:a6:52:9a:64:71:4f:bd:97:4a:f4:97:a3:12:37:a2:b6:c3:
d4:04:05:24:99:81:9c:f8:5f:af:4e:6d:e4:b5:6f:0f:8e:31:
d7:1e:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:18:21 2025 by rpki-client