Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File: 9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier: TKbP1GU1ZTo9ogHDOHrsfh/C5Pgits6fe8Yc4Sz5JU8=
Subject key identifier: 55:96:F8:99:9B:B8:7E:AE:48:4A:42:E8:74:E8:54:21:AD:A2:19:AB
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 019739F50B6A24AB193751D998BD52F09AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number: 1573
Signing time: Wed 04 Jun 2025 08:00:49 +0000
Manifest this update: Wed 04 Jun 2025 08:00:49 +0000
Manifest next update: Thu 05 Jun 2025 08:00:49 +0000
Files and hashes: 1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: aivlSWDqpa1fLjBKyPH729i64+gA2OuNfdQ2ggpkbRc=)
2: CEOAcQGoF-M49o3FqEoqpthBq7c.roa (hash: o7aWAwYKfU3X1B2JaQq/PQb9tN2IBMnSaEyBCSBzIfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f5:0b:6a:24:ab:19:37:51:d9:98:bd:52:f0:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: Jun 4 08:00:49 2025 GMT
Not After : Jun 5 08:00:49 2025 GMT
Subject: CN=5596f8999bb87eae484a42e874e85421ada219ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:28:af:6c:ab:e5:e0:8f:a7:df:2d:6c:68:
7b:a7:3c:6f:66:0b:2f:c8:3b:57:50:e5:51:23:7d:
98:d8:28:da:5d:ee:ca:a9:7b:46:dd:40:d2:c9:ef:
0d:63:eb:40:2e:ff:47:c2:1e:3b:66:89:ee:0f:42:
95:60:90:c5:34:99:d0:b7:ed:54:dc:ec:57:94:29:
bd:02:17:33:af:f2:2f:1d:7f:25:1b:ce:39:40:29:
a4:61:23:59:06:c5:20:7b:55:38:f8:17:1d:67:5b:
31:71:2c:67:1a:90:c8:66:f3:45:bc:39:3e:93:cd:
b6:5a:11:86:1c:f3:bd:2d:cd:75:dd:5f:58:e8:98:
60:dc:dc:53:fb:af:ab:83:21:95:2e:9b:e2:fc:3b:
46:b1:c6:bd:2f:16:77:82:f4:9c:8f:0b:c6:5e:14:
91:15:f3:19:f9:ff:8c:28:45:cc:fa:0a:54:39:6c:
7a:62:61:ca:1f:5b:c6:07:64:3c:79:2c:32:6b:b5:
37:cf:7c:4d:ca:bd:09:4f:18:f4:81:98:4f:d8:28:
7b:50:ff:82:60:6e:09:64:84:66:29:c0:c9:35:de:
db:ac:08:26:53:7d:33:72:cb:35:57:f6:0d:35:db:
36:4b:85:77:63:86:6a:a9:0c:f4:ee:29:93:e4:95:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:F8:99:9B:B8:7E:AE:48:4A:42:E8:74:E8:54:21:AD:A2:19:AB
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:98:f4:fc:c4:a9:d4:3b:61:2d:0a:93:9b:3d:7e:4d:1a:9c:
29:70:b4:02:50:19:bd:f6:8f:a8:01:08:aa:03:e4:d2:c4:1b:
74:b2:53:93:68:2c:ef:30:cc:ba:07:91:35:94:c7:2d:2e:e5:
55:d4:01:18:f0:f0:4d:b0:49:10:87:e4:d2:43:f8:bc:15:21:
97:af:9b:e9:a9:2b:72:02:05:b9:87:54:a6:d8:d7:d3:5f:c2:
87:d4:d7:44:3d:fe:ee:fb:41:07:04:92:57:61:c0:85:99:15:
9f:cd:8b:29:75:bc:a2:72:19:f5:92:28:db:d7:70:24:a3:16:
9c:05:73:d9:39:5b:6e:96:13:f0:5a:ef:c5:55:e9:21:72:ac:
e6:98:bf:d4:b4:00:ad:f9:d5:73:81:6c:b5:5b:46:03:f6:43:
42:e2:d7:45:6e:a8:70:36:04:dd:a6:cb:58:b1:2e:a9:08:42:
00:89:48:96:47:7f:4f:44:1c:45:e2:63:40:72:67:f5:b0:80:
01:5c:70:00:80:e1:dc:97:dc:ae:98:1d:8e:02:54:c6:cc:6c:
28:b4:22:26:87:f8:11:48:64:c0:59:6f:da:4c:15:e5:38:7e:
18:3a:43:35:81:cc:3f:0d:d0:4a:50:8d:1b:e2:57:b5:b3:03:
c4:c0:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:49 2025 by rpki-client