Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
File: awb3JA1ymLkisOCzI5dYl2ov0I8.mft (raw, json)
Hash identifier: x2WBo1BkxlmNjt3BA3lJaNLH5x68T6kfBsCQLs6b2fI=
Subject key identifier: 3D:9A:99:26:CD:D2:CE:46:31:35:85:09:1B:1C:FC:2C:2A:78:E6:D1
Authority key identifier: 6B:06:F7:24:0D:72:98:B9:22:B0:E0:B3:23:97:58:97:6A:2F:D0:8F
Certificate issuer: /CN=6b06f7240d7298b922b0e0b3239758976a2fd08f
Certificate serial: 0195CC88D631EED5F0B02C842093D2F76337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awb3JA1ymLkisOCzI5dYl2ov0I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
Manifest number: 03FB
Signing time: Tue 25 Mar 2025 09:01:14 +0000
Manifest this update: Tue 25 Mar 2025 09:01:14 +0000
Manifest next update: Wed 26 Mar 2025 09:01:14 +0000
Files and hashes: 1: awb3JA1ymLkisOCzI5dYl2ov0I8.crl (hash: fSC78QS9EOTGm2MTnt2zWDDmEE1AOwnk5CXLs4rQfl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:88:d6:31:ee:d5:f0:b0:2c:84:20:93:d2:f7:63:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b06f7240d7298b922b0e0b3239758976a2fd08f
Validity
Not Before: Mar 25 09:01:14 2025 GMT
Not After : Mar 26 09:01:14 2025 GMT
Subject: CN=3d9a9926cdd2ce46313585091b1cfc2c2a78e6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:e0:f1:31:81:fd:ca:60:03:0f:c1:4d:22:
88:78:84:d8:51:54:12:74:d4:26:87:5a:9c:c3:b5:
4c:97:59:ce:84:b1:e7:fb:bb:de:54:3c:23:32:e1:
0b:0b:c9:46:ac:2a:b9:5d:23:17:5d:63:54:14:71:
c0:51:6f:fb:71:2a:5c:3d:b2:68:63:75:aa:d8:bc:
83:06:ea:8d:86:01:90:7a:ea:37:98:8d:16:8b:f0:
f9:b2:91:ea:d0:d8:f6:a8:5c:15:9d:6e:09:b0:ad:
bd:07:0e:9e:bc:78:73:4d:69:25:1b:fa:9b:7e:75:
78:35:9b:82:97:a1:6b:8d:b8:a3:40:94:e2:0a:38:
d3:3f:7a:69:97:dc:10:a7:48:11:79:48:b0:a6:0e:
40:56:eb:21:ab:1e:e3:a7:b1:84:2a:e8:32:86:b6:
82:a8:64:a3:c6:87:50:56:ab:2c:0d:2f:33:0b:bc:
bb:8f:36:e8:e4:a5:db:bd:fd:4b:91:8c:b9:7f:6d:
73:63:0a:10:b3:f6:ef:8d:5c:0a:56:e5:35:4a:ef:
bb:1f:4e:64:f6:fd:a0:b3:b9:48:5d:05:bc:b7:f9:
6e:85:90:13:e0:7f:7c:ce:9b:52:12:1b:ae:af:43:
c9:fd:0b:ce:c2:57:db:b3:10:79:fc:22:22:a3:29:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:99:26:CD:D2:CE:46:31:35:85:09:1B:1C:FC:2C:2A:78:E6:D1
X509v3 Authority Key Identifier:
keyid:6B:06:F7:24:0D:72:98:B9:22:B0:E0:B3:23:97:58:97:6A:2F:D0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awb3JA1ymLkisOCzI5dYl2ov0I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:fd:aa:29:8c:37:d8:c9:38:81:c1:e8:14:ee:01:d5:02:
85:3b:62:17:ed:2c:0a:40:37:ae:4f:fd:6a:0b:38:95:36:49:
be:b3:b8:19:b5:ba:8a:3b:29:88:f3:5f:93:76:81:65:46:48:
63:4e:73:84:c6:1d:f8:7c:82:ff:e5:07:42:5b:d7:3a:2d:19:
11:25:d2:18:e6:11:9b:e6:d0:d3:e1:c8:40:4c:fc:b5:d6:17:
07:80:c1:f1:63:17:87:04:3b:61:32:7b:0e:59:d6:9e:8b:1f:
f0:69:88:6e:b8:62:f1:fb:10:ec:d5:35:36:1f:4a:bf:f7:5b:
ed:10:0e:84:1b:96:9e:20:02:88:a6:aa:cd:60:5c:8c:99:0f:
92:61:2a:18:e8:37:97:3c:6a:9c:9c:e0:f2:51:6e:67:c8:a8:
5e:b5:e4:79:cf:2e:c5:83:62:f5:31:fb:27:25:2c:ae:f3:0c:
a2:bd:27:ef:71:90:7f:dc:53:a0:87:e7:a8:70:16:56:31:c8:
68:a3:6e:73:cd:17:d4:30:d0:e7:ae:d4:54:8b:7a:52:2c:6f:
96:28:4c:57:9b:20:18:59:68:0e:36:e4:85:32:36:9c:0d:58:
44:6e:5c:ab:6c:ce:6d:09:d4:1f:fc:4a:1d:8b:53:67:cc:54:
44:86:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:28 2025 by rpki-client