Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
File: 0_wrb9dUv48iTSicz2XDjewnKz0.mft (raw, json)
Hash identifier: 3GU35Cqd//zQLKgXo3rPNCNsk3ETPkd3dkY1HJS4BSs=
Subject key identifier: 9E:5E:85:2B:3E:E9:FC:C5:B2:CE:C9:8B:44:1D:47:1C:DE:08:1E:62
Authority key identifier: D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
Certificate issuer: /CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Certificate serial: 01957E3653512056B28C2ACA847F90CAE21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
Manifest number: 0437
Signing time: Mon 10 Mar 2025 04:00:44 +0000
Manifest this update: Mon 10 Mar 2025 04:00:44 +0000
Manifest next update: Tue 11 Mar 2025 04:00:44 +0000
Files and hashes: 1: 0_wrb9dUv48iTSicz2XDjewnKz0.crl (hash: r6WQ3wU9HmAJQWttq4kKI2w4J6cYmzCFNr5m0TE6ki4=)
2: w4AfMToU7JP5nYDh1bQukqqPtKI.roa (hash: X6zZhIo5tq1i0IjDg9tH1V0hyW60Jjam1awx3+YUNdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:36:53:51:20:56:b2:8c:2a:ca:84:7f:90:ca:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Validity
Not Before: Mar 10 04:00:44 2025 GMT
Not After : Mar 11 04:00:44 2025 GMT
Subject: CN=9e5e852b3ee9fcc5b2cec98b441d471cde081e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:c1:fc:6d:50:b8:60:40:d1:55:04:d9:f4:
d3:73:7e:79:e2:ad:c3:b4:e6:8d:1e:d2:2c:48:9d:
2b:76:ee:24:e3:51:c8:22:b1:28:91:72:34:94:2c:
0b:65:63:8c:44:e3:01:fe:0f:5f:dc:8b:d1:a2:43:
6f:38:2f:2c:67:4d:48:96:2d:b3:75:b0:c3:13:1c:
60:d5:13:c2:4c:f8:9e:b8:ea:04:b6:7b:60:0a:f5:
ea:c5:31:8f:9d:97:08:a9:f7:40:dd:a8:34:5a:02:
1e:5b:3f:05:f1:75:dc:d5:03:a0:24:b5:6a:5e:67:
15:a4:d2:6e:90:03:92:3c:21:cf:e5:6e:a1:a6:c6:
28:55:87:bb:32:d7:e3:03:6c:bf:5c:a3:7b:39:2f:
b9:42:75:00:ba:f5:74:cf:d2:1b:3b:10:76:37:65:
d9:0c:8e:05:60:b5:d3:3a:a8:a2:31:7f:44:ca:2d:
6b:1c:d4:a6:2f:76:d7:fe:5c:68:a8:64:bd:84:c0:
b7:67:3c:34:ce:1a:23:09:02:eb:44:64:ff:e7:32:
b2:98:06:56:2e:ec:e2:8e:30:f9:f5:6a:be:77:ab:
db:46:5a:2c:f9:8a:c1:1d:6b:cf:4d:f9:94:df:d9:
f4:db:19:c5:9c:65:75:50:bb:90:64:77:b1:13:03:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:85:2B:3E:E9:FC:C5:B2:CE:C9:8B:44:1D:47:1C:DE:08:1E:62
X509v3 Authority Key Identifier:
keyid:D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:e6:74:5a:91:f9:2a:b7:4c:f7:94:a5:8f:86:66:65:bb:
86:76:96:8d:83:16:40:ce:12:0c:8b:4d:61:4a:a0:ed:20:af:
fa:3b:69:8d:b0:cc:3f:9c:77:26:d0:98:9a:39:49:da:05:49:
86:bf:a4:0f:b5:28:11:fa:87:6d:d5:1e:84:86:1c:6a:44:37:
fb:d5:0b:51:df:32:a3:1e:a5:90:cd:68:e5:1e:f5:e8:01:9e:
95:44:0b:ec:07:fe:06:fa:c5:ca:bc:12:53:b2:d4:23:84:33:
b8:6f:89:15:93:2c:c1:a0:33:d1:5a:29:20:ce:09:fe:5c:f3:
cf:28:98:76:a7:31:cc:e3:5a:66:71:9a:5d:75:83:73:7f:6e:
3d:09:2a:c8:eb:84:bf:6d:96:df:8a:d5:aa:08:17:c4:32:0e:
54:8b:bb:64:80:d9:3a:69:0a:25:f9:61:6b:7e:9b:3b:a9:2e:
69:d5:04:51:40:46:41:01:47:1b:b2:29:9e:51:5a:c1:33:c0:
ac:bd:f0:a0:f0:6b:1f:27:55:01:64:56:f1:3d:2d:9a:05:f6:
96:5e:95:ac:de:35:db:27:cd:67:f5:6d:e9:77:42:b9:84:49:
95:be:c9:d4:6c:dc:23:2b:10:eb:7d:0f:12:7e:4e:c8:25:85:
ab:87:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:46 2025 by rpki-client