Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier: 5CeSqSD3lwXhHfCErowkz38MyJN+f0FzQLZDuPFi82I=
Subject key identifier: 6D:00:64:12:CB:9C:09:3A:B5:CC:DC:70:4D:4A:96:5F:86:E9:19:6D
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer: /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial: 01979FE1B244CBF3865A969FAA590D76A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number: 0712
Signing time: Tue 24 Jun 2025 03:00:57 +0000
Manifest this update: Tue 24 Jun 2025 03:00:57 +0000
Manifest next update: Wed 25 Jun 2025 03:00:57 +0000
Files and hashes: 1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: dR/5/05lBY+2VdjfK+4yPvD0TxuHxAm2/SzzvZQkEHY=)
2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:e1:b2:44:cb:f3:86:5a:96:9f:aa:59:0d:76:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Validity
Not Before: Jun 24 03:00:57 2025 GMT
Not After : Jun 25 03:00:57 2025 GMT
Subject: CN=6d006412cb9c093ab5ccdc704d4a965f86e9196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:9c:06:ae:21:a8:5e:94:0b:f0:1a:36:be:
41:ae:65:95:52:4f:92:d9:f6:65:17:2e:a6:aa:e7:
d2:a8:46:19:fc:b7:94:56:8e:7f:09:78:f3:22:12:
9b:02:64:0a:79:92:9c:68:07:5f:64:ae:4d:f8:a5:
8e:d4:05:85:a3:ea:1a:98:7f:70:d8:cd:24:d0:7d:
00:6b:2a:6a:62:6b:0d:c3:79:9c:17:49:b3:44:45:
b5:fb:e5:c5:ae:3b:70:57:b0:5d:ec:26:53:83:fd:
84:0e:53:16:c8:3d:5e:b6:4b:10:e4:48:7e:81:5c:
59:11:05:6c:48:c2:c3:42:88:28:43:a7:1c:3d:00:
e9:0f:5d:e6:a3:e8:f5:41:65:a9:e2:a3:58:0e:cf:
51:14:84:37:16:9a:ec:63:50:b5:e6:cf:c1:09:66:
a3:82:88:20:60:b9:ba:ad:09:28:10:c5:6a:51:30:
e9:90:a6:79:7c:7b:24:19:39:3a:2f:b4:98:3a:c7:
a3:4f:22:d4:5e:c5:ef:7b:19:22:0f:00:99:24:2d:
ef:a3:e9:66:f2:be:64:bb:55:d9:7f:94:9d:d3:7b:
dc:45:42:90:37:72:5d:ec:ee:6f:97:bc:9b:24:59:
04:0f:6f:0b:3f:ce:15:ac:e7:31:90:dc:85:25:24:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:64:12:CB:9C:09:3A:B5:CC:DC:70:4D:4A:96:5F:86:E9:19:6D
X509v3 Authority Key Identifier:
keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:96:12:74:22:4f:84:d6:48:55:40:07:5d:66:27:18:f2:ef:
32:dd:5e:02:5a:cd:4d:92:38:16:ab:4c:1f:69:c3:4a:cb:d0:
89:1d:e9:31:82:e5:e1:b1:e6:f1:32:b7:4a:6d:61:19:00:76:
c2:e5:e8:5c:00:85:69:c6:18:ee:db:b0:24:b0:02:2b:69:cf:
47:96:33:79:e2:be:81:1a:a9:cb:07:b9:b9:2c:d5:c5:9b:22:
de:86:a2:b0:58:94:72:77:25:5f:19:95:91:b9:33:34:81:6a:
8b:bb:9e:a5:3f:ad:11:2f:34:a8:c3:da:ce:d0:e6:b9:ea:9f:
25:66:37:82:11:97:fa:35:5d:45:fa:49:ac:c1:93:52:98:b4:
a3:a5:f8:5e:01:b8:7d:4a:89:f6:e5:94:1c:14:b5:4c:fb:32:
b3:ee:5b:80:68:54:1f:4a:8b:29:65:16:b3:9e:74:e5:97:e4:
86:2e:87:38:df:92:b0:5b:4a:85:fc:80:d5:fa:26:6c:26:f0:
2a:66:60:1a:b1:fe:f8:03:1d:98:a5:40:b3:a6:8f:d0:c7:87:
8f:30:a3:92:4a:62:7c:18:76:11:3e:32:f5:5a:7a:76:92:ab:
85:b4:fd:6c:35:00:be:a7:1b:12:d8:82:61:28:db:4d:46:92:
c3:cd:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:09 2025 by rpki-client