Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
File: CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft (raw, json)
Hash identifier: N758WQ+lS/CZMzz/wGpTfbq57Y2w5xg+rbwmWAoTkeU=
Subject key identifier: A3:33:E0:7D:6D:44:B3:3E:54:E0:F9:8F:7B:E4:D2:0E:73:5F:18:18
Authority key identifier: 09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
Certificate issuer: /CN=09660852bd09ad2213da02bd15bbf1837695734c
Certificate serial: 0187A1E76C62EDD4F1D6ABB644BB9FB0CC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
Manifest number: 0D3D
Signing time: Fri 21 Apr 2023 03:41:50 +0000
Manifest this update: Fri 21 Apr 2023 03:41:50 +0000
Manifest next update: Sat 22 Apr 2023 03:41:50 +0000
Files and hashes: 1: 0Xf6-vilfia24A7NEN-1UNpf3TQ.roa (hash: hlCPws79TRjoG/wJl4XIBqwLzlhcryMiUyk2ApIcBwY=)
2: CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl (hash: fEncY0nqvfRC1XlRitOZk3wLuZ5lo1cKFlOULvOJfDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:e7:6c:62:ed:d4:f1:d6:ab:b6:44:bb:9f:b0:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09660852bd09ad2213da02bd15bbf1837695734c
Validity
Not Before: Apr 21 03:41:50 2023 GMT
Not After : Apr 22 03:41:50 2023 GMT
Subject: CN=a333e07d6d44b33e54e0f98f7be4d20e735f1818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:99:90:64:0b:25:e2:07:04:f6:14:e9:f1:
e6:c4:30:bc:f2:43:20:6c:69:a3:21:f8:d4:1d:55:
b0:83:d2:04:6f:03:e7:d7:8b:b9:6f:12:a0:4e:d9:
96:64:26:df:0e:45:96:6d:13:b4:e3:0e:2f:2e:c7:
df:33:5a:a8:f4:e5:1b:14:91:b2:20:39:de:cb:0b:
9c:af:27:17:62:54:d6:33:d4:13:c5:58:1e:1c:e4:
9a:b6:28:20:c3:d1:75:70:01:ba:08:37:a6:c7:3f:
f3:0c:2b:cf:79:de:ff:44:0e:2a:97:c2:72:d8:96:
88:4e:7f:bd:d9:d9:b1:52:ee:98:a3:db:b7:04:c0:
30:b8:5c:61:dd:97:05:0c:ce:b2:bf:2d:67:8d:bc:
2d:9f:eb:08:38:87:69:78:23:25:b2:6a:bc:ab:f7:
6c:33:5c:18:c7:50:cf:4f:ac:08:98:d1:d0:aa:0b:
69:b3:fb:c2:45:ec:5c:10:b5:cb:d4:c4:e3:60:38:
c7:ff:6f:13:2f:6a:d8:70:12:e1:5f:23:31:e2:53:
99:bf:8d:5b:f2:90:c1:93:d4:4d:39:ae:b0:66:5a:
6b:eb:64:f4:78:a2:dc:c6:1f:b8:41:b2:32:70:cf:
b0:81:63:af:1d:12:60:af:95:e4:f0:66:d7:1e:53:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:E0:7D:6D:44:B3:3E:54:E0:F9:8F:7B:E4:D2:0E:73:5F:18:18
X509v3 Authority Key Identifier:
keyid:09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:86:0b:1f:ea:12:78:e5:c3:0e:87:d2:3a:ed:2f:7b:8c:
38:13:a1:45:a7:c7:57:a1:d7:09:d2:b9:f9:29:75:6c:73:d9:
3f:a7:7c:98:c4:c6:70:58:7b:8f:3e:02:4e:f8:9a:10:06:88:
d9:17:76:d5:e9:4f:fd:ab:30:85:22:41:1b:27:d8:c6:53:b3:
9d:23:e1:4a:ed:d6:8c:cc:18:d3:6b:44:c0:94:2a:55:57:04:
3f:06:13:93:d2:e5:ff:af:ac:b1:f5:37:7a:aa:4e:f8:b9:cd:
71:0b:9e:74:83:b0:b2:50:a2:ad:53:88:ff:b7:01:03:f7:81:
e1:15:92:d2:d2:2a:9d:50:56:3a:44:78:7f:27:ae:db:cb:e6:
50:e6:12:ec:01:31:2d:b5:b7:1b:07:a5:6f:3e:5f:5d:b8:99:
fb:a8:97:97:b9:f3:68:11:4b:56:7f:af:0f:b7:76:7c:24:9b:
78:58:e9:71:db:a5:53:37:80:53:4d:e9:ae:fd:8e:6f:ff:60:
25:8c:72:3a:b6:6c:65:c8:aa:58:ca:46:20:49:a4:a0:3f:a4:
25:2a:bc:71:1c:6e:7a:be:76:2e:27:c6:b2:b3:37:64:d3:2a:
bf:60:25:a8:a7:dd:cf:db:aa:dd:a9:00:cf:94:25:00:37:45:
fc:f6:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:25 2025 by rpki-client