Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File: oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier: sedjJucrVWxlNRbSrNkByFUlNgi7B6n9fC0HE/zerYM=
Subject key identifier: A7:A0:57:EC:3A:26:4A:62:15:13:A9:C9:CD:16:92:93:9B:4C:E6:8C
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 01979B97AF4CB31B02A8BBD64EDB04068EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number: 15B0
Signing time: Mon 23 Jun 2025 07:01:38 +0000
Manifest this update: Mon 23 Jun 2025 07:01:38 +0000
Manifest next update: Tue 24 Jun 2025 07:01:38 +0000
Files and hashes: 1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: QF0yzgfYbp6iM3dP3snf2IlscaQ9+IRELzhgGhkySKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:97:af:4c:b3:1b:02:a8:bb:d6:4e:db:04:06:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jun 23 07:01:38 2025 GMT
Not After : Jun 24 07:01:38 2025 GMT
Subject: CN=a7a057ec3a264a621513a9c9cd1692939b4ce68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:13:52:3e:56:23:0a:a0:0d:80:18:9e:8a:
94:da:20:09:39:16:50:16:6d:d1:03:60:92:70:56:
54:9b:3d:5f:84:61:32:7a:43:2d:3f:7c:93:25:dd:
fd:82:8e:40:11:ba:88:33:7b:cc:3f:a0:8c:2a:01:
fb:c5:1a:32:b3:64:99:41:00:ad:3b:f3:3b:38:67:
2e:cf:ac:0a:79:23:f5:c6:fa:d7:ad:bc:31:f4:af:
62:de:f7:f6:8f:7e:12:f7:86:e7:b0:e3:a0:f2:b2:
46:f8:08:b1:a5:4e:98:39:97:bd:a7:28:3d:f6:ee:
87:5e:74:57:46:03:de:d5:de:0e:91:0a:cf:67:24:
45:c9:e3:a6:c9:b6:31:8f:3c:a7:41:cb:dc:46:89:
c2:43:3e:b5:c2:79:67:5e:2f:69:2c:9d:e0:42:da:
ce:66:36:1a:58:3b:15:81:02:1d:bf:3b:52:cd:ab:
25:10:a0:70:e0:15:ae:5e:e8:97:bd:16:0d:78:75:
f8:f1:61:23:80:29:f3:72:22:3c:e8:c2:69:72:b0:
8c:66:66:9d:35:d8:6a:55:69:31:66:38:8a:2b:6b:
f6:e6:1e:03:f4:ae:b7:fb:ce:f1:47:b1:0b:89:95:
61:8f:bb:ac:f7:9e:31:d1:ef:60:c0:d4:27:a8:a0:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:57:EC:3A:26:4A:62:15:13:A9:C9:CD:16:92:93:9B:4C:E6:8C
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:e5:da:69:73:8c:14:d1:90:4b:8b:e6:bc:8a:c6:21:91:
50:c9:1e:b1:b9:bf:48:13:7a:eb:74:44:7e:b5:86:a7:bf:6d:
d5:56:88:b3:82:30:0d:79:e9:0e:7e:03:bf:1f:aa:b2:2c:c4:
7e:cc:5c:3e:9a:12:3c:1c:73:f6:d7:5c:dd:fc:0e:c9:cc:8c:
15:a0:86:fe:6e:cb:e3:5d:86:06:e8:eb:ff:1a:7f:5c:31:a3:
6e:49:b2:fc:6e:77:28:a3:04:24:c3:cf:bc:81:c3:ac:1c:64:
03:61:31:b8:46:d1:9e:92:89:5e:6a:5b:61:2c:ee:b1:ee:f5:
ca:87:7f:da:b5:6d:2b:d6:a9:53:5b:33:5c:a0:8b:bb:0b:42:
a3:eb:29:17:70:a5:b8:10:dc:24:fd:87:45:c9:c0:6c:af:0a:
00:8e:9e:7f:63:4f:a9:51:5b:a2:e5:fc:9a:96:ee:32:bc:dd:
30:88:46:a8:c0:50:73:c6:67:44:a1:9c:64:4c:c0:84:f8:51:
46:95:59:2e:4d:4b:7e:37:0f:5e:b8:1f:8a:e4:a6:ff:aa:c5:
7b:4f:8e:62:ec:0c:5a:b0:01:42:59:88:02:7e:53:ea:73:f1:
a8:58:6d:40:57:61:30:36:21:9a:05:67:d2:dc:bf:f1:ec:8a:
5c:94:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:06 2025 by rpki-client