Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: CmhMcZHUxiYwd4AC+vAYrkY2RYxzOuf0NJ4wjsVwXqw=
Subject key identifier: 1D:EA:D0:81:E0:3A:52:2F:C7:1A:2D:BD:FD:64:7E:61:94:7A:A8:75
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0195E0467CA831A569E2C011F4E7652A2BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 0FB2
Signing time: Sat 29 Mar 2025 05:01:10 +0000
Manifest this update: Sat 29 Mar 2025 05:01:10 +0000
Manifest next update: Sun 30 Mar 2025 05:01:10 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: tLSCCjaNNWR3Iil66pZnsutpzDi5kDubro2eaim49cY=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:7c:a8:31:a5:69:e2:c0:11:f4:e7:65:2a:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Mar 29 05:01:10 2025 GMT
Not After : Mar 30 05:01:10 2025 GMT
Subject: CN=1dead081e03a522fc71a2dbdfd647e61947aa875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:0b:5f:a5:e1:c7:0c:29:b4:8b:c3:b9:3e:
46:cd:b1:18:90:9c:53:d5:50:0d:d1:47:56:fc:fa:
9d:ba:c6:43:97:16:7d:e9:ff:cf:61:67:b2:4e:ac:
ce:a1:ed:71:88:37:ce:5d:ff:a2:10:aa:f7:92:6b:
dc:25:c9:30:9c:72:77:8c:20:98:c2:4d:ae:56:d4:
bf:a2:17:c6:fc:df:6d:fa:56:1d:75:1d:87:cc:90:
63:67:9f:8c:00:ca:ba:c9:b2:5e:8d:a4:49:3f:38:
8d:bb:db:27:d6:0b:ff:7f:eb:6d:39:2c:6a:65:2e:
85:27:a6:e4:b6:16:14:3a:cb:d5:d6:2e:d9:31:04:
cf:65:ad:f4:08:1d:4d:20:67:c5:ee:41:fc:fd:e3:
3a:42:d4:45:83:f4:f8:11:7c:4a:c6:f6:d6:83:e2:
f8:01:57:d1:82:1c:37:a4:b4:77:56:0b:43:7b:f6:
c0:59:02:56:7b:90:cb:db:f0:39:9e:47:0d:d2:56:
3c:da:52:e9:d2:eb:b0:e8:04:99:c6:56:35:25:83:
c0:11:69:d0:4e:2d:10:ce:28:3f:af:51:ba:c9:23:
a3:75:eb:0d:dc:b7:07:ae:f1:6f:e8:86:a6:a7:65:
12:05:67:7e:96:c7:90:33:a1:83:97:a3:60:4f:00:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:D0:81:E0:3A:52:2F:C7:1A:2D:BD:FD:64:7E:61:94:7A:A8:75
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:7b:f1:49:4a:2b:02:fd:5b:74:3b:d9:86:97:10:9d:7e:
b7:cd:bb:2a:3e:a8:b3:b4:75:a5:40:02:ee:2d:d9:9a:8f:1a:
c3:8f:3d:c9:53:ed:7e:d1:e6:65:71:d3:4c:04:d3:3e:f4:1e:
95:d0:45:09:ec:cd:fc:06:ab:be:97:86:17:ec:78:e6:0e:8a:
ce:75:2c:c5:72:1c:9f:63:46:b0:ba:a5:17:ee:22:3b:62:18:
f9:0a:9a:ca:3e:00:19:cb:31:78:0d:f3:d8:67:a2:e1:5d:90:
9f:89:63:a1:d8:ce:e2:c1:c9:cd:2a:a4:4e:93:d2:b5:a7:84:
3f:a7:35:07:1e:d1:4a:47:cb:e4:6a:fc:52:35:df:74:48:4b:
78:42:8b:13:5c:ba:e0:a0:88:3d:36:96:2c:ca:84:86:ee:bd:
b7:9b:b9:1f:b9:19:2d:df:10:d7:6c:93:a1:9f:bd:0c:dc:84:
67:9b:97:e1:83:03:a4:0f:74:2c:06:7f:4d:6d:9f:b4:a4:79:
14:8e:32:48:58:63:8d:10:33:f0:70:df:0a:94:dd:fc:ca:89:
d1:da:bc:48:d4:59:39:2c:5e:40:09:de:86:4a:79:aa:2a:89:
d9:b3:e8:16:a1:58:2d:6e:b4:d7:fb:3d:d5:9d:4e:88:3b:3a:
55:e2:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:41 2025 by rpki-client