Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.mft
File: oXzNarKvesjM2SrYgrw5_aoXHRs.mft (raw, json)
Hash identifier: YVX/s7FDeaictkKvABAbNr7isFArAgYZ/VSktziesrQ=
Subject key identifier: 0C:08:05:C3:EB:C6:BD:CA:86:8F:FE:DF:98:23:39:C2:48:CB:F1:FF
Authority key identifier: A1:7C:CD:6A:B2:AF:7A:C8:CC:D9:2A:D8:82:BC:39:FD:AA:17:1D:1B
Certificate issuer: /CN=a17ccd6ab2af7ac8ccd92ad882bc39fdaa171d1b
Certificate serial: 01978CC352012F02A674447984449CE6F36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXzNarKvesjM2SrYgrw5_aoXHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.mft
Manifest number: 01
Signing time: Fri 20 Jun 2025 09:55:00 +0000
Manifest this update: Fri 20 Jun 2025 09:55:00 +0000
Manifest next update: Sat 21 Jun 2025 09:55:00 +0000
Files and hashes: 1: oXzNarKvesjM2SrYgrw5_aoXHRs.crl (hash: QDb+47AH3IrH6UAxv+RUCT/mMWhig+yvflLblhkBpLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:c3:52:01:2f:02:a6:74:44:79:84:44:9c:e6:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a17ccd6ab2af7ac8ccd92ad882bc39fdaa171d1b
Validity
Not Before: Jun 20 09:55:00 2025 GMT
Not After : Jun 21 09:55:00 2025 GMT
Subject: CN=0c0805c3ebc6bdca868ffedf982339c248cbf1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:a5:8c:80:53:80:e3:c6:bd:05:67:8a:57:
84:de:74:d8:df:cb:f2:ce:ed:86:2d:79:4f:2b:e5:
26:dc:aa:eb:22:06:53:fd:60:d2:1a:04:1f:14:b4:
4f:e8:b1:41:71:49:27:2d:5e:18:b3:75:2d:de:8d:
39:35:26:59:d6:c6:5a:4e:63:a4:9b:58:ba:0f:4e:
f5:50:07:0d:94:28:8e:d0:31:97:da:1b:98:b6:49:
02:bd:f2:99:10:d3:0f:83:02:29:d2:39:15:1a:e8:
fd:38:71:dd:fc:a9:dc:f4:b2:00:1a:10:ab:e2:3a:
20:29:a9:fe:1c:c9:4a:1c:6d:94:5b:cf:c7:c6:b9:
48:35:01:ee:44:1a:82:be:e4:86:0f:4f:5a:bf:f4:
7d:6b:bb:24:53:f4:36:09:ff:00:84:9c:81:63:aa:
3a:3f:88:9e:93:70:91:01:c7:f3:51:f8:fc:70:c7:
ea:fd:14:c6:3c:b7:14:fa:bc:03:12:7d:27:7c:f5:
88:52:31:69:21:e2:68:7a:20:75:61:a1:60:7f:6c:
96:ea:43:dd:99:31:17:b0:58:c3:93:30:b2:34:5c:
89:29:fd:b5:8f:23:71:21:34:16:54:6c:21:00:ab:
cf:65:69:5c:a3:6b:ac:bf:da:08:06:37:1a:a0:b2:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:05:C3:EB:C6:BD:CA:86:8F:FE:DF:98:23:39:C2:48:CB:F1:FF
X509v3 Authority Key Identifier:
keyid:A1:7C:CD:6A:B2:AF:7A:C8:CC:D9:2A:D8:82:BC:39:FD:AA:17:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXzNarKvesjM2SrYgrw5_aoXHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:34:89:89:d9:2f:ca:39:cc:ba:82:fd:7b:3c:73:bc:6c:
b0:88:db:ad:73:89:30:d4:a5:e1:3d:cb:44:b1:b7:57:0c:fa:
54:41:51:c6:c2:fa:b7:5e:d4:21:eb:ea:c9:a9:e0:c4:96:0e:
c4:e7:ee:5f:cf:fe:df:6d:df:72:cd:b8:1c:f5:ad:e3:08:cb:
2a:10:f2:c9:58:ce:f7:68:d5:3a:ef:d1:57:4c:5a:5e:b4:01:
65:d9:71:4c:4c:62:4a:61:c0:75:54:ad:be:a2:7d:58:f0:39:
7c:da:9a:d8:92:26:ec:2a:86:a5:60:2b:e1:cb:db:ff:af:a1:
08:ed:09:ea:32:2a:76:a4:a4:fb:43:44:22:68:2f:d0:f3:84:
8b:dd:98:f9:15:5a:85:1b:8f:b6:1d:2c:67:8b:6d:e4:2e:fe:
f9:db:1d:c7:48:d6:2a:8d:2f:8f:af:b0:03:c0:4b:af:e6:a4:
f7:f0:cd:4b:38:e8:72:a9:23:b7:b1:a7:df:3d:eb:a2:5d:7e:
71:2c:d0:29:5b:c4:9c:4f:0b:14:26:69:f0:88:1b:19:ab:b0:
f1:43:b3:5c:05:f9:72:3b:0e:96:ac:fe:37:40:b8:a7:34:fe:
2b:de:ed:68:a6:2f:f5:70:d3:29:42:23:2f:05:7e:0b:3e:f0:
55:5d:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:50:35 2025 by rpki-client