Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
File: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft (raw, json)
Hash identifier: V7GznSU84ZOFpFSlUk9UITEJ9OqJTTWPiSZOBRp4N2g=
Subject key identifier: 58:DD:E2:31:07:8E:A3:AB:76:82:FD:64:53:E7:EA:8E:B5:13:50:AA
Authority key identifier: D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
Certificate issuer: /CN=d23616016e4feaf5461e409e5614ef19df015fac
Certificate serial: 0195CC1C0AFA49ACB0C01FAEBC97EF7FF049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
Manifest number: 0A21
Signing time: Tue 25 Mar 2025 07:02:24 +0000
Manifest this update: Tue 25 Mar 2025 07:02:24 +0000
Manifest next update: Wed 26 Mar 2025 07:02:24 +0000
Files and hashes: 1: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.crl (hash: //E9AaT73CLfUl2hbP4TnA3OJG9xRyxkCL8X+3Tvy68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:1c:0a:fa:49:ac:b0:c0:1f:ae:bc:97:ef:7f:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23616016e4feaf5461e409e5614ef19df015fac
Validity
Not Before: Mar 25 07:02:24 2025 GMT
Not After : Mar 26 07:02:24 2025 GMT
Subject: CN=58dde231078ea3ab7682fd6453e7ea8eb51350aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:14:44:68:f7:df:c4:95:e2:f9:c7:41:4e:
5c:65:c7:81:a9:0f:c2:11:b3:da:e6:e3:c5:4e:bd:
30:40:1f:64:e7:e7:b6:d0:91:99:de:53:99:80:4f:
08:be:93:12:fd:33:e0:14:56:5c:86:80:df:73:7a:
9d:86:8f:15:f0:b1:d0:70:07:57:f3:04:96:5c:da:
89:d4:81:fc:aa:ea:50:c1:44:b6:ce:7b:c1:46:38:
2c:51:e0:34:bc:84:14:ef:89:17:62:9c:28:dd:28:
0f:df:7b:21:08:80:0b:4b:76:b3:b4:23:07:28:47:
67:c1:42:83:b5:82:fc:85:76:7c:5c:f0:81:88:26:
4e:78:e7:0b:94:1e:9f:bb:2e:78:89:2e:fa:f4:48:
19:5e:8d:f7:d9:ed:0c:6e:39:06:50:af:12:a9:7e:
f8:58:4c:9f:58:84:df:b5:aa:47:60:cb:de:3f:3e:
f7:10:38:f5:b4:54:6c:2e:fe:f4:94:16:68:93:dd:
c5:20:4b:eb:db:b2:15:2a:71:be:eb:07:8e:66:44:
60:0a:6c:11:e1:1c:a9:d9:ee:8e:b0:d8:3a:dd:29:
da:4c:87:ce:01:6c:a2:a2:69:db:67:df:f6:77:c2:
97:02:9f:c4:4c:58:67:85:c5:05:2e:46:8e:74:53:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:E2:31:07:8E:A3:AB:76:82:FD:64:53:E7:EA:8E:B5:13:50:AA
X509v3 Authority Key Identifier:
keyid:D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:19:a1:b1:ca:c8:9b:97:f4:cb:f2:11:15:da:b6:9f:61:
21:9c:ab:52:d7:d9:23:ee:17:40:24:d7:59:b1:63:65:3f:af:
c0:79:4a:69:61:86:dd:1b:20:78:fe:de:fa:f0:f6:b4:3a:a0:
99:f4:22:ee:e0:b3:57:f6:c2:9c:91:e6:1e:62:f9:08:b0:1f:
a3:99:d8:03:c0:8d:5d:c1:ea:7c:57:5f:94:76:98:1c:48:8f:
38:71:f7:49:b6:2d:83:f9:2e:ed:fa:c9:ee:19:49:e8:59:40:
12:98:c5:fb:a6:3d:e5:05:99:35:0e:c4:56:bd:a7:6b:36:98:
c9:32:d6:4d:e9:3b:4e:13:22:7e:2d:e2:30:9c:32:5b:6a:c8:
19:a1:ad:77:72:2a:9c:c5:0b:1e:84:36:97:7c:7d:e6:98:d8:
3f:9e:50:5b:94:b2:8f:de:d5:50:fc:cb:0b:09:c8:b8:df:db:
11:6e:db:8a:cc:3b:be:00:f1:31:eb:9c:d3:4b:f8:0b:de:78:
ab:0d:3a:db:39:78:d0:32:5f:3c:e6:70:ee:61:4e:b9:0c:ad:
2b:e8:21:e4:fe:d6:1e:d2:0e:b5:ec:9e:fe:75:33:01:4f:b8:
8c:84:70:84:85:4e:3b:5f:52:e5:0d:c6:7a:59:f3:c0:58:89:
86:55:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:19 2025 by rpki-client