Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
File: wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft (raw, json)
Hash identifier: AnX/8+PrKuKm2MxPQywuhOIsdwi3ZDewGR1/cTm9roM=
Subject key identifier: F1:2E:28:61:F5:CD:9A:E7:1A:BD:D4:CD:F5:C6:83:14:66:5D:8C:4C
Authority key identifier: C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86
Certificate issuer: /CN=c022d3d506c8feb4936854b13a7bb97f9b1c9786
Certificate serial: 01956AAFA517BC17B2C9459F7D73F7CCBE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
Manifest number: 049C
Signing time: Thu 06 Mar 2025 09:00:50 +0000
Manifest this update: Thu 06 Mar 2025 09:00:50 +0000
Manifest next update: Fri 07 Mar 2025 09:00:50 +0000
Files and hashes: 1: wCLT1QbI_rSTaFSxOnu5f5scl4Y.crl (hash: kRVGtO43Kz6/VTJ7RnwWVTQA2+k0/j2S9mZD/2/UHoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:af:a5:17:bc:17:b2:c9:45:9f:7d:73:f7:cc:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c022d3d506c8feb4936854b13a7bb97f9b1c9786
Validity
Not Before: Mar 6 09:00:50 2025 GMT
Not After : Mar 7 09:00:50 2025 GMT
Subject: CN=f12e2861f5cd9ae71abdd4cdf5c68314665d8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:db:60:22:9e:b4:9f:3a:ef:82:a0:2b:52:
e6:e1:8e:37:60:5b:5d:d8:6d:2b:b0:9f:9d:39:76:
d9:f4:21:37:62:3b:99:9b:cf:53:de:21:67:bb:76:
aa:55:54:90:75:e7:4a:de:bf:4d:f8:6f:57:21:e9:
a7:c6:5d:74:8a:23:b1:85:00:59:2d:ce:52:12:69:
82:87:b6:e3:a5:2b:46:98:ad:90:71:2a:d5:ed:fc:
75:b6:39:da:85:4b:c0:30:ec:18:35:77:18:d2:01:
45:94:31:ea:30:03:a3:9e:eb:8c:da:ed:68:e9:14:
8a:bc:3c:27:43:e6:f9:cc:b5:ce:9b:32:9f:4b:96:
31:92:c7:c3:7c:66:1a:f6:25:3f:56:69:9a:ee:5e:
dc:b0:99:86:15:99:47:07:27:7b:8f:f1:e5:71:22:
70:57:d2:55:9b:0c:9d:1f:34:ee:3f:48:fe:8a:f5:
2a:72:12:1a:d2:ba:62:85:e0:63:52:85:6d:21:67:
92:a7:6f:f6:01:03:5c:f6:2c:a2:58:bf:1e:f9:83:
10:46:e5:56:e4:c6:8f:b6:53:42:39:91:ab:5a:69:
d0:fd:6b:57:0f:4b:5b:af:92:b6:f0:21:d7:2c:da:
38:60:d0:80:a1:08:b4:0b:79:9c:bc:ba:e6:77:83:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2E:28:61:F5:CD:9A:E7:1A:BD:D4:CD:F5:C6:83:14:66:5D:8C:4C
X509v3 Authority Key Identifier:
keyid:C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7c:54:a7:0c:2f:ba:7b:ff:6b:1d:d3:11:dd:5a:54:e3:d6:
77:e4:ae:9f:bb:d1:e7:ae:9d:b3:cd:bb:bd:70:62:78:97:5f:
92:f3:94:e3:17:a1:11:b8:5b:79:f5:96:41:4b:be:fc:ed:f4:
a9:09:11:21:fa:cb:db:da:41:76:4d:df:fd:e3:76:c9:44:be:
9a:1d:cf:32:84:36:24:12:5b:93:17:ac:d9:20:95:d9:60:2b:
01:67:3f:36:a6:9b:ae:07:cf:1f:f6:c3:ba:00:73:11:7f:ca:
ef:37:89:f1:b4:22:b0:9c:b6:a0:f8:18:d4:8e:ad:a2:ca:e4:
7f:87:c0:b2:eb:9a:8a:70:6b:63:fd:f0:20:23:65:5a:fe:0c:
27:4a:40:33:df:4a:20:5f:ed:d1:d6:eb:9c:e6:f9:51:d9:61:
3b:6e:f8:1a:3b:03:8f:15:4e:ec:b8:f6:22:ae:7d:27:23:1b:
a1:e2:aa:c9:3a:18:9c:80:6b:c7:e1:39:26:72:03:09:70:36:
8a:da:8f:eb:01:4d:93:0b:b7:f3:55:5a:8e:1e:95:be:bc:69:
f7:00:8d:9a:db:21:71:2b:37:12:4f:3e:10:bb:43:c5:ea:2c:
8f:09:c4:d3:17:94:94:5a:2d:0e:95:f0:07:fc:3d:f2:81:49:
ab:ae:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:10:02 2025 by rpki-client