Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
File: 1-Wa0UKbR3EL4Td28NLTovztI2E0.mft (raw, json)
Hash identifier: Ddn2EdOHrOQW+MZkDqP98aFjDVcTqstHinrOmQe4lgE=
Subject key identifier: 70:6C:B7:CA:07:F3:51:2D:AD:D7:74:6C:80:68:F6:6F:C5:E3:FD:93
Authority key identifier: F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
Certificate issuer: /CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Certificate serial: 0197586D300F093173ABBE7DF9D45633FACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
Manifest number: 0338
Signing time: Tue 10 Jun 2025 06:00:39 +0000
Manifest this update: Tue 10 Jun 2025 06:00:39 +0000
Manifest next update: Wed 11 Jun 2025 06:00:39 +0000
Files and hashes: 1: 1-Wa0UKbR3EL4Td28NLTovztI2E0.crl (hash: 4Yq9jNXB76m/K8Ep1g/7WVU/ZwtmGvkeBjAOYUqVo84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:30:0f:09:31:73:ab:be:7d:f9:d4:56:33:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Validity
Not Before: Jun 10 06:00:39 2025 GMT
Not After : Jun 11 06:00:39 2025 GMT
Subject: CN=706cb7ca07f3512dadd7746c8068f66fc5e3fd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:79:b2:72:75:49:1c:46:cb:45:81:b0:a3:
0d:ad:57:36:ec:8a:36:83:33:c7:6f:39:6a:e2:dc:
f4:e2:83:7c:09:f1:74:cd:00:48:bb:45:c0:09:58:
51:15:db:81:c1:17:b3:eb:8e:a1:17:40:d3:41:37:
1e:5f:c5:83:50:be:d2:7d:cc:6f:79:e0:f0:30:1d:
fd:cc:f6:5d:1d:cd:f2:05:ad:04:58:86:05:92:cf:
d3:fe:57:e4:a9:c4:59:48:0c:6a:38:96:32:f7:b0:
6f:7b:c5:54:0c:09:81:6e:e7:e1:17:ec:83:62:cc:
af:05:05:57:dd:2e:eb:92:94:76:30:65:6e:ff:8d:
33:f7:42:94:e9:cb:d7:a6:eb:08:52:8f:99:83:14:
1c:2e:d9:55:fa:34:31:2d:7d:d1:ac:ba:b2:d4:2a:
1c:e7:6c:c1:07:0e:48:eb:11:bc:cf:65:38:d9:26:
b9:f1:3d:32:d1:96:ec:a3:7e:96:a3:e4:2a:ab:5f:
ce:9e:7c:fd:69:3f:ba:03:a7:fd:f7:3c:ff:05:33:
66:63:1a:be:03:3a:06:4d:da:e6:67:ba:14:2d:94:
23:c2:17:57:da:27:27:e7:72:53:04:7a:05:5f:e1:
6e:31:b8:36:20:a4:a4:11:39:42:2b:5f:e8:f0:64:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:B7:CA:07:F3:51:2D:AD:D7:74:6C:80:68:F6:6F:C5:E3:FD:93
X509v3 Authority Key Identifier:
keyid:F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:0b:33:46:98:20:68:b5:60:4c:e1:e9:a3:a7:05:f5:d3:
9c:8d:83:f0:c1:1c:ab:5c:63:6f:51:7c:c3:8b:52:90:d0:df:
08:cd:bb:99:9a:ac:01:e4:1a:a8:82:b1:17:a3:c2:93:7f:e0:
ed:9b:17:bf:ef:d2:fe:8f:bd:2c:cd:04:bd:8c:69:73:41:71:
ea:4c:94:e6:a5:72:b0:de:d0:2d:46:ba:a1:fa:08:11:20:ea:
6a:07:38:b7:dc:bf:95:ed:46:fc:e3:7d:6a:d0:38:fd:c1:fb:
a4:ba:fa:1f:19:c6:fc:18:aa:d8:46:f9:ba:41:77:4a:20:9b:
64:4a:ec:cd:24:75:1e:da:e9:f7:a0:51:72:43:a0:62:9c:e2:
39:97:65:31:a6:c4:87:17:d9:41:1e:2f:12:05:22:25:af:63:
53:03:3d:41:1b:af:6b:e8:41:dd:56:2c:8d:8b:2d:36:ea:7d:
af:d0:4d:f1:3c:2f:56:81:1d:31:4d:9b:35:69:f5:29:ea:ae:
b5:3f:3d:ef:e5:e8:3a:31:f0:f6:c3:61:bb:22:ed:2f:ca:f5:
36:bb:2a:50:f3:dd:b4:9e:5e:f0:ac:56:a2:67:a8:7e:4b:37:
42:61:f0:e3:91:a6:49:a2:60:c2:94:39:5e:9b:1b:c0:fc:4f:
15:5d:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:48 2025 by rpki-client