Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier: QcDKsUfmhloAy33Wnfc1nC/MsAsTl23Bl84fHdIoDcc=
Subject key identifier: CB:6D:29:16:40:26:9F:44:72:94:2C:8A:59:5E:03:06:6C:E0:A1:46
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer: /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial: 01979A4D3EF10F2569C39DBDE3728D3EFE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number: 0588
Signing time: Mon 23 Jun 2025 01:00:42 +0000
Manifest this update: Mon 23 Jun 2025 01:00:42 +0000
Manifest next update: Tue 24 Jun 2025 01:00:42 +0000
Files and hashes: 1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: AIdDOm26NcM/GhjSSPDeftqaX7a3wWEAVjs3z9jLl0Y=)
2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:4d:3e:f1:0f:25:69:c3:9d:bd:e3:72:8d:3e:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
Validity
Not Before: Jun 23 01:00:42 2025 GMT
Not After : Jun 24 01:00:42 2025 GMT
Subject: CN=cb6d291640269f4472942c8a595e03066ce0a146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:f9:78:8e:1c:c3:21:de:fe:11:52:6d:21:
76:98:c6:ee:49:42:d3:cb:05:9f:a5:e5:0f:1f:84:
12:b8:a2:90:19:31:4c:18:51:2c:01:2a:2b:47:45:
61:93:ec:77:d7:5d:eb:ac:68:14:e0:f0:0e:3e:61:
95:e2:b8:68:e7:e7:f9:25:65:5f:0f:4d:67:dc:49:
d5:79:f9:db:f1:2d:46:59:88:f8:64:67:8d:8c:3d:
36:0e:29:ce:fc:ab:80:a6:10:5b:a0:b8:bb:84:95:
b4:77:7e:b4:ad:be:c1:39:50:e3:16:14:d0:bb:7b:
78:dd:e9:4e:68:89:a2:75:cb:89:6d:77:97:d4:6a:
6b:eb:5d:0e:8e:fc:f3:ac:ee:55:9c:1f:47:fb:47:
2e:76:ea:f6:36:1f:7b:1b:1b:91:f6:54:ae:fa:71:
80:63:22:7a:1a:0e:46:f1:f0:c4:3e:36:74:e0:eb:
6f:85:b1:10:48:00:d4:d4:72:74:7b:d1:ab:4a:f6:
73:85:15:37:30:e9:dd:93:e6:e2:90:cb:35:4b:9f:
e5:3c:bc:57:f2:d8:34:5c:8f:7e:b7:99:05:39:62:
dd:9b:f3:df:bf:82:44:ca:b3:6b:8f:74:6a:41:46:
6e:af:94:9d:e2:18:85:3d:cf:95:c6:98:46:93:5a:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:29:16:40:26:9F:44:72:94:2C:8A:59:5E:03:06:6C:E0:A1:46
X509v3 Authority Key Identifier:
keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:18:2a:9c:97:e3:de:bd:90:79:7a:7e:9e:cc:d4:d4:4f:
07:75:16:79:24:c4:94:fa:5a:a7:1e:48:0c:17:7b:b0:91:76:
28:6a:4f:cd:49:ee:0d:e7:3a:59:5f:4b:2e:cd:a2:f5:9e:86:
5c:67:bf:ac:58:8b:86:dd:c1:7a:a4:7f:07:07:23:2a:97:6d:
2b:69:fe:cb:e9:43:17:ff:a9:94:19:28:29:a2:ed:e3:cf:f4:
29:6d:85:37:aa:b3:f2:1a:c2:f4:7a:c3:ed:a0:12:ab:85:be:
ac:c2:52:d1:ff:fb:f3:db:58:0c:c1:48:e0:dc:f0:09:ac:e5:
94:d2:0e:92:29:58:78:82:e0:45:5e:84:ac:ed:aa:16:c3:8d:
5a:36:32:ef:d3:88:a0:fc:97:74:d3:df:cc:2b:cb:fa:49:21:
93:e5:8f:be:1c:75:30:7f:21:7f:97:9f:65:95:aa:00:e5:d6:
b1:3e:58:8e:80:b8:87:f8:de:1d:16:7f:4f:1f:e6:8e:42:31:
6f:d0:74:71:ab:4b:34:90:a4:a3:4d:db:43:76:ba:d1:44:17:
9f:05:8d:0e:aa:f9:58:7a:fe:08:11:9d:f5:a7:00:99:80:c2:
6a:50:ca:df:b6:4d:50:b3:c0:49:b0:05:23:f1:cc:dc:ff:99:
c7:70:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:34 2025 by rpki-client