Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
File: 1-IMBwukKuq41kP_E_6aU1iIFnj4.mft (raw, json)
Hash identifier: hGuJEDcJHfu+6RrM5JQrf7rt7Wr0FsCOHJiSFt/RLyU=
Subject key identifier: A1:EA:DE:14:EF:CB:AC:E4:FB:B5:77:A3:0C:7B:10:C6:4A:DC:33:5E
Authority key identifier: F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
Certificate issuer: /CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
Certificate serial: 0188E3E7B368DD358112DC898736BD599D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
Manifest number: 0D29
Signing time: Thu 22 Jun 2023 16:19:52 +0000
Manifest this update: Thu 22 Jun 2023 16:19:52 +0000
Manifest next update: Fri 23 Jun 2023 16:19:52 +0000
Files and hashes: 1: 1-IMBwukKuq41kP_E_6aU1iIFnj4.crl (hash: 1qhavlr3fflUvTGIPyDbK7IRbe8SRewd6lSB3XF0tgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:e7:b3:68:dd:35:81:12:dc:89:87:36:bd:59:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
Validity
Not Before: Jun 22 16:19:52 2023 GMT
Not After : Jun 23 16:19:52 2023 GMT
Subject: CN=a1eade14efcbace4fbb577a30c7b10c64adc335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:73:a0:91:f3:a1:07:7b:9a:ed:11:58:8a:
82:ab:38:db:1f:05:4d:99:14:0d:54:a0:2b:cf:19:
8a:f2:57:8a:59:22:dc:0d:c5:c2:aa:59:e4:4d:12:
02:57:57:fc:ec:02:c7:ec:59:fe:81:ef:8b:aa:86:
1f:ab:8d:06:68:59:b2:9d:94:75:49:60:5a:fd:90:
28:6d:bf:df:af:30:ff:ef:30:1e:23:37:04:80:ec:
64:c4:e8:b8:3c:54:8a:f8:82:af:ef:15:c9:00:2a:
e2:a6:7f:96:a1:7e:68:2f:03:39:59:6c:8f:c7:e7:
04:29:32:36:94:3d:8e:c3:eb:d7:a7:bd:f4:8c:04:
68:5f:a9:c0:6a:f5:b4:dc:1c:ba:e6:f2:8a:a6:56:
83:37:10:c3:14:3a:9d:bc:f9:fa:b1:71:c2:c6:74:
ad:d2:14:80:30:00:c7:cd:0b:ef:42:38:af:40:2e:
41:d0:47:c9:d1:c5:7d:e7:69:a2:28:e9:a1:94:25:
d7:1b:f6:c1:b0:ba:bf:64:5a:a8:90:be:9d:1d:6d:
3c:8e:90:1e:75:6f:9c:40:05:50:47:3a:f9:41:ec:
e5:9d:d7:61:98:83:3e:4e:1a:00:cb:7b:e3:c1:4b:
71:61:f3:89:5d:ab:f4:90:5b:1d:0f:e9:8a:da:7b:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:DE:14:EF:CB:AC:E4:FB:B5:77:A3:0C:7B:10:C6:4A:DC:33:5E
X509v3 Authority Key Identifier:
keyid:F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a9:ec:ec:35:fe:16:a8:5b:53:51:df:22:55:8f:24:ee:63:
ea:90:59:db:37:4b:44:ed:b6:14:e6:de:82:d5:62:de:9c:1c:
71:f1:1c:f9:c9:7c:1d:6b:cd:07:1a:e9:8a:9a:38:79:03:3f:
73:a2:74:6b:4a:8e:de:85:38:35:85:e2:08:83:1d:c4:80:08:
54:e1:3a:05:1f:f9:44:c0:76:8c:37:98:9d:35:74:5a:a8:bb:
4c:fb:2a:4d:40:ba:c4:d7:58:f2:aa:0b:3f:f1:d2:87:4c:63:
0c:fa:3d:c7:ee:2d:7c:6f:3a:ae:4e:9d:ce:74:43:48:02:d8:
a0:1e:ea:e8:17:b5:43:f2:81:1a:b6:ec:e8:be:65:23:9b:1e:
86:b5:99:ec:e4:bd:cf:f7:b0:0c:98:a6:f9:55:06:2c:e7:0e:
c6:ee:2b:c9:97:80:8c:5c:0b:7a:8e:65:0b:8c:c3:76:42:6e:
a0:aa:47:8b:47:15:3c:53:e3:45:07:2b:e1:ac:0e:1b:c2:20:
ee:48:e1:1a:1f:fa:fe:b5:55:3f:71:be:bf:50:05:8c:98:b4:
08:d7:3e:d4:42:79:f5:97:22:c9:89:bc:17:6f:32:ce:9c:41:
62:17:90:8d:0a:e3:8f:a8:c2:f4:2c:3e:e1:8e:47:ae:7b:d3:
45:52:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:52 2025 by rpki-client