Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: 44w1RWi+4DBxYLA8v5znSYVRQcjVC93YXFhYQb8TIcM=
Subject key identifier: 59:89:4E:E3:8A:CB:B8:94:49:10:5D:F1:74:42:E4:88:C4:22:DF:8D
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 0195E15972548429F0FEE6B572DC8AA5517D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 04E8
Signing time: Sat 29 Mar 2025 10:01:30 +0000
Manifest this update: Sat 29 Mar 2025 10:01:30 +0000
Manifest next update: Sun 30 Mar 2025 10:01:30 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: 81e7pY1VcgLbx0tXjdGoQKPTJ5EP9xuqcIpDAW6wxD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:72:54:84:29:f0:fe:e6:b5:72:dc:8a:a5:51:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Mar 29 10:01:30 2025 GMT
Not After : Mar 30 10:01:30 2025 GMT
Subject: CN=59894ee38acbb89449105df17442e488c422df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:54:a4:ac:62:c3:c5:f5:c4:b2:06:4e:5f:
66:c2:34:f0:d2:f1:95:73:26:6a:99:71:1d:ab:66:
3a:8d:ae:3f:f6:89:15:ba:2b:08:92:e9:32:bb:57:
a8:42:f6:a4:ca:8a:36:ef:bb:35:f3:3c:53:fb:97:
51:2d:68:e1:71:8e:58:04:37:09:53:7c:a8:ef:e6:
ef:33:04:f6:c1:ce:7d:1d:41:90:65:d4:7c:ef:c1:
6f:4d:fb:5b:c2:5f:19:33:93:43:91:1d:b9:55:5c:
37:7a:4d:f2:8e:b9:9b:4d:a2:03:83:ac:b0:c4:3a:
3d:1a:63:15:2b:62:c3:34:21:3b:c8:79:5c:21:2c:
84:ab:d9:c6:19:a9:5e:fb:71:c3:65:9e:e6:db:33:
15:98:9a:e1:05:b4:ae:0e:f0:00:91:09:70:c7:82:
57:81:80:bc:f7:74:a6:66:06:71:66:2e:f2:f9:f7:
63:21:85:a3:ee:21:c9:35:dc:a8:4d:1f:ec:ee:81:
85:37:c8:0a:cd:b1:97:52:12:84:a6:66:8f:43:31:
10:b9:9f:81:31:b7:22:02:a3:5e:27:8a:1f:a3:64:
d6:eb:a4:65:30:81:09:23:f2:13:b1:ff:45:20:84:
ad:3f:f8:46:1f:82:28:d8:ba:6d:98:aa:87:39:f3:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:4E:E3:8A:CB:B8:94:49:10:5D:F1:74:42:E4:88:C4:22:DF:8D
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3b:fc:ce:47:a2:ea:5a:f2:d6:c2:7c:29:8b:af:4b:a4:44:
34:67:49:94:0e:e3:48:49:14:a2:bc:1f:09:29:bb:5a:12:5f:
4e:86:d0:b8:12:09:64:7a:b3:dd:d4:70:47:7e:02:91:00:72:
ae:b6:a5:34:76:69:97:46:1c:10:56:b6:1c:c8:fa:4a:45:72:
93:21:46:00:4f:b3:fa:6f:f8:e5:dd:de:c5:f1:7c:8d:55:18:
43:4a:1a:81:58:eb:db:22:fd:bd:5c:18:af:2f:2f:50:fd:73:
b8:69:3f:16:af:f2:3b:2f:bb:fb:49:ae:b5:25:ba:d1:f1:5c:
e9:9f:eb:78:e9:d9:b4:c2:76:7a:27:3b:3a:cc:ec:5c:97:ad:
68:f8:67:23:16:f3:d4:1a:da:e1:cc:53:d8:92:c4:2e:00:b2:
65:e8:92:70:d7:d2:f2:f9:03:be:c8:31:83:4c:63:67:2a:63:
0a:c8:ef:36:50:8e:de:bc:4e:5f:b3:f4:77:f3:9c:ba:e0:e0:
17:ba:27:26:b4:09:c2:87:0d:b6:f1:a4:a7:9b:4a:7c:3d:11:
45:e7:4f:73:7a:0c:45:f6:d7:58:35:52:80:b7:bc:75:23:6a:
f9:57:02:e9:ee:61:98:ac:db:14:70:f0:39:d0:28:56:3e:62:
35:4b:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:31 2025 by rpki-client