Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: L3VG24GHXAJGlnVtw3F7bbqrmCJwStmQ5pf39hNZUYM=
Subject key identifier: 0A:6B:7A:8B:88:C4:0C:D9:11:DD:2A:D3:CC:84:1E:C4:CB:DB:8B:74
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 0195E046A3FEFD180150F8E966112C3218E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 0DC2
Signing time: Sat 29 Mar 2025 05:01:20 +0000
Manifest this update: Sat 29 Mar 2025 05:01:20 +0000
Manifest next update: Sun 30 Mar 2025 05:01:20 +0000
Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: PejvHp8kHzafwV6ozeaK3sdYxWFnd5PUvePRG5SgtBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a3:fe:fd:18:01:50:f8:e9:66:11:2c:32:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Mar 29 05:01:20 2025 GMT
Not After : Mar 30 05:01:20 2025 GMT
Subject: CN=0a6b7a8b88c40cd911dd2ad3cc841ec4cbdb8b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:a1:b4:ba:a3:74:88:41:19:30:ed:1e:1c:
2f:b3:f0:3d:a8:2c:9f:02:6d:af:02:13:44:7e:0b:
27:2e:91:42:b0:5e:bb:ca:77:f7:ce:56:7d:cd:b6:
ce:84:b4:16:86:d9:12:a0:ec:91:6e:6e:54:b4:ca:
fe:ae:48:5c:ce:8a:51:f4:a6:67:c2:53:34:40:a8:
a4:87:13:9f:eb:0a:72:0f:10:08:bf:c0:b8:98:ea:
bb:37:ea:67:d2:f2:76:90:57:42:5a:47:72:13:d4:
52:96:77:9e:b3:a2:a0:89:c4:26:89:1f:f9:77:2e:
ad:0c:63:5d:03:41:35:b4:b9:24:c6:db:2b:9e:e9:
06:95:9a:46:bc:16:63:11:31:37:da:8c:6f:fd:d7:
71:0c:7e:25:1c:e0:b7:91:bf:89:9c:67:27:1d:78:
04:ea:2f:bf:0d:b3:59:48:28:6f:67:d5:9c:58:74:
3f:f9:bb:d7:78:d5:c3:c0:12:f8:c6:18:de:61:46:
db:8c:4b:6d:ae:c2:80:b6:45:ae:c0:95:3b:98:33:
46:94:12:54:e3:5e:1e:69:34:e0:74:8d:84:8a:13:
10:cd:52:33:e1:f5:db:6c:b8:ae:73:93:9d:1e:10:
36:1f:f9:7a:0a:6d:13:da:49:b3:8d:fa:d8:89:2b:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:7A:8B:88:C4:0C:D9:11:DD:2A:D3:CC:84:1E:C4:CB:DB:8B:74
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:a9:35:35:01:5d:b9:9d:2d:22:ea:a0:70:67:fd:23:14:
c2:84:27:c0:b6:95:ec:20:7a:10:fd:7a:e2:1a:5c:77:8a:30:
95:e5:9e:8e:4e:a9:de:3d:18:a4:d1:2b:dc:86:c5:fc:bd:cc:
2c:f0:02:8d:80:81:94:27:4d:31:09:0e:a2:83:01:49:77:d6:
23:4d:1c:8f:0f:73:82:09:84:1c:fd:0d:34:d5:d3:c3:43:a2:
a0:ee:70:0c:a1:7f:b9:92:25:6c:7e:4a:85:c5:b1:da:6e:2c:
35:f7:02:3e:19:68:57:a1:ff:9a:29:a7:85:9c:4d:9c:02:fd:
5f:32:9d:57:dd:49:64:eb:6e:03:62:ea:af:fe:34:bd:df:0e:
34:4e:ab:10:0f:a7:5b:1f:a3:2d:bd:c4:55:81:70:38:2f:19:
1d:6b:10:7c:78:83:7c:5f:28:9d:6c:9b:a7:15:29:80:b8:bb:
be:49:e2:28:a6:03:a9:8c:5e:b9:3d:02:f6:bc:8c:97:c6:c2:
36:95:1d:1e:bb:3f:2c:f7:de:a6:b3:22:aa:1f:a3:f3:09:d2:
ad:8c:dc:1e:31:99:0d:ba:75:e6:9f:6d:35:c5:88:26:dc:20:
84:57:ee:9b:42:88:6d:a8:a0:0b:bd:87:87:7c:1b:78:2f:e0:
62:c4:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:37 2025 by rpki-client