Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier: XoMF3v0NfwOXJ/kxz3JMCuVfP9sIsCWbwsVORr8Rftg=
Subject key identifier: C0:52:4E:3A:F8:67:BC:58:FF:9B:2B:D0:93:D6:F1:38:ED:46:B0:45
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer: /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial: 01979B974D2C670FA71B803C5B1E50AA08EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number: 15A5
Signing time: Mon 23 Jun 2025 07:01:13 +0000
Manifest this update: Mon 23 Jun 2025 07:01:13 +0000
Manifest next update: Tue 24 Jun 2025 07:01:13 +0000
Files and hashes: 1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: pj0k7JhQg3SAvjnWWPcvuYZDxqdXUbHFzIB4J0Uh+yY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:97:4d:2c:67:0f:a7:1b:80:3c:5b:1e:50:aa:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Validity
Not Before: Jun 23 07:01:13 2025 GMT
Not After : Jun 24 07:01:13 2025 GMT
Subject: CN=c0524e3af867bc58ff9b2bd093d6f138ed46b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:73:a1:2b:65:8e:a7:96:1c:52:30:ed:a2:
86:ef:75:a3:9b:be:27:e1:3a:4a:5a:07:f4:f9:10:
4b:b6:8f:73:1e:e4:50:9a:c9:8a:07:e7:39:92:fd:
70:db:87:1b:83:3e:9a:7b:dc:10:cf:04:18:ac:37:
d4:f2:ef:19:37:2b:40:a6:41:94:29:8a:b0:27:b7:
ca:25:98:15:0d:67:1b:3f:23:1b:f3:fb:e1:e8:f5:
ed:bf:2f:b5:5d:9a:5d:82:a8:71:03:85:7c:e2:bc:
67:c6:bc:ce:c0:f5:26:0f:27:10:76:5a:a9:ac:41:
6d:65:79:c9:47:7d:3e:a9:d1:6d:12:9b:fa:c8:f7:
03:4a:bf:1b:92:60:15:38:43:45:57:84:52:da:c3:
3d:39:53:13:96:97:16:82:5d:34:47:e0:73:df:07:
ec:df:4e:ad:d6:98:a2:d1:e3:72:8f:27:d3:7f:2b:
fa:e8:ce:d8:fa:f3:f1:5f:29:19:e5:4e:b5:fc:01:
99:1b:c4:41:12:ea:57:c3:99:b8:a3:38:55:bb:3d:
f7:58:2d:63:ee:94:a7:ce:6d:33:a8:fa:e6:04:25:
08:14:38:f1:1e:36:cf:61:dc:36:67:9b:d4:11:7e:
06:bc:47:ce:0e:af:10:4f:0f:5e:ed:ab:98:36:3a:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:4E:3A:F8:67:BC:58:FF:9B:2B:D0:93:D6:F1:38:ED:46:B0:45
X509v3 Authority Key Identifier:
keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:62:6b:92:b1:e9:b2:62:33:16:30:5d:08:c0:7f:8d:e3:c5:
23:29:06:dc:25:fc:06:25:87:cf:d4:80:3f:9d:a0:95:2e:c4:
0b:5c:d2:bb:df:fa:92:06:01:fc:ae:2b:10:5b:d7:7b:72:a4:
5d:3a:f1:bd:1a:b6:05:5e:7e:72:d8:35:f1:3c:9d:16:d1:4b:
2d:97:0a:0c:58:7c:98:02:bb:15:96:43:dc:d9:b6:73:0a:6e:
cf:31:b2:73:7d:a1:75:5b:b7:21:ca:63:a5:48:69:c5:40:bc:
83:e0:98:7b:6b:66:da:a5:f4:5b:40:cd:6b:87:49:1e:92:0c:
f2:44:99:b8:2a:4a:24:fe:da:4e:ec:73:df:02:5a:41:f2:e2:
09:d2:c2:8c:db:6b:c2:ec:27:80:af:48:f8:13:df:df:69:6a:
9a:ef:93:24:7c:62:50:73:c3:8e:6b:fb:6d:dd:ab:87:c3:bb:
ba:4f:49:cf:34:a3:14:d5:8e:70:b9:5c:68:3b:e7:fc:8f:98:
0d:bf:9f:ea:f9:41:f7:11:b9:d8:01:24:36:01:cc:b6:28:9f:
f0:20:f6:72:07:70:18:6f:ef:46:df:ca:42:43:c5:5f:16:e6:
28:d3:fb:03:42:22:72:e3:da:c1:cf:cc:a1:22:a1:a6:0a:eb:
a2:28:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:27 2025 by rpki-client