Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
File: oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft (raw, json)
Hash identifier: 1ND9XMGNNO61BtxhwTuIOZ9+KpAGiG4EOmrnjbB8eYk=
Subject key identifier: B7:75:FD:88:A3:EA:FA:19:C8:12:EB:AA:72:5A:BD:EE:12:C0:91:C9
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 01979BCDBA07FFCF3CC292374358B4D93850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
Manifest number: 15AF
Signing time: Mon 23 Jun 2025 08:00:40 +0000
Manifest this update: Mon 23 Jun 2025 08:00:40 +0000
Manifest next update: Tue 24 Jun 2025 08:00:40 +0000
Files and hashes: 1: oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl (hash: WMphpjcdd16gC8VYU2XjA5XgIQF2pzalkM2M3kJNCn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:ba:07:ff:cf:3c:c2:92:37:43:58:b4:d9:38:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Jun 23 08:00:40 2025 GMT
Not After : Jun 24 08:00:40 2025 GMT
Subject: CN=b775fd88a3eafa19c812ebaa725abdee12c091c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:d1:e6:dd:3b:59:6f:b2:09:c0:f5:92:2c:
93:14:21:95:f4:2d:cf:51:e5:ee:9d:a5:4d:b8:30:
87:13:ca:14:35:61:47:54:19:78:b5:f1:f1:88:e3:
ca:30:e4:19:90:e0:d2:fb:bd:79:52:de:cb:22:39:
87:e5:60:a2:e6:b7:35:80:60:f5:66:48:d6:9b:9a:
5c:15:d1:3d:b3:e3:ab:ca:e7:f8:14:1b:39:44:d5:
a9:23:30:7b:c4:8e:bd:fb:92:78:59:40:ab:9b:5d:
b8:d9:e7:b9:5b:8f:03:57:6f:31:d4:d8:cb:bd:5c:
07:e3:69:4a:91:b3:bd:39:47:9e:ae:02:c2:05:8f:
11:07:9f:8c:ce:08:b7:b5:d2:7b:d6:d5:b9:ff:b5:
14:25:1b:cb:bc:a0:1f:e2:e1:8a:77:14:41:98:9c:
49:7a:c7:b7:a0:13:03:eb:48:cf:d9:cf:54:ec:8a:
3a:c1:a8:c2:83:33:27:aa:8c:52:8b:3b:b1:9a:29:
5e:50:56:84:2a:fb:b2:c3:e8:7b:51:a2:19:9c:07:
b9:4c:8f:fa:54:4a:81:70:ab:c9:68:0f:7b:5c:08:
4d:be:cf:6e:15:1f:e7:b6:71:5b:77:ad:f6:d2:5c:
c0:44:b3:a1:af:5d:de:5c:94:e4:8f:ea:61:46:fc:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:FD:88:A3:EA:FA:19:C8:12:EB:AA:72:5A:BD:EE:12:C0:91:C9
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2f:ed:45:0a:4c:8f:4a:35:5e:77:a3:b6:ca:d3:2a:26:08:
a8:36:34:af:d9:74:88:7c:31:84:ef:16:2b:ff:6a:21:27:46:
ac:ab:ae:24:65:ed:b9:13:a7:df:47:e4:17:a3:a7:37:74:b7:
56:fa:56:28:a7:0f:53:8f:55:8d:7f:c8:92:01:d7:b6:61:1d:
f5:83:23:3b:98:48:a7:bf:d1:22:19:50:de:00:e8:9f:7a:c8:
dc:c5:ce:ab:ae:e9:89:52:40:ea:14:58:3d:ef:57:fc:8a:c8:
8c:76:1c:3b:ae:44:f7:c1:db:09:d6:c6:a1:bb:ec:25:e2:41:
45:b8:99:1c:98:2d:96:dd:bb:bc:23:e7:49:9f:2f:18:21:34:
1a:a2:79:3c:44:26:7e:2e:6c:df:1a:32:bb:c4:35:fb:29:61:
1f:97:f5:a8:69:87:38:b9:f2:90:39:49:85:41:05:fb:42:92:
9b:af:55:08:c3:9c:e4:8a:f0:b8:7a:cd:02:94:bf:90:07:61:
7e:67:84:4a:4e:27:39:50:0f:d2:4a:40:aa:9b:87:cb:7f:c4:
f7:90:cf:15:f8:ef:be:a6:d6:72:39:eb:24:e8:c5:21:0e:f1:
67:47:15:43:ff:79:52:95:46:7c:cb:b5:ab:85:27:c8:59:f1:
c0:e2:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:03 2025 by rpki-client