Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
File: o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft (raw, json)
Hash identifier: Fxh+3E2xy4Vrn9l6MxGtMBQ71TKXgqDNtQzuP4AR5So=
Subject key identifier: 8F:4E:AB:2F:E7:53:B5:FB:77:84:72:6A:05:79:BF:A3:15:ED:BB:A5
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Certificate issuer: /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial: 0196D7774528410F290BD277A2C83E8FD6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
Manifest number: 0B1E
Signing time: Fri 16 May 2025 05:00:39 +0000
Manifest this update: Fri 16 May 2025 05:00:39 +0000
Manifest next update: Sat 17 May 2025 05:00:39 +0000
Files and hashes: 1: 1-JVHfdgfgX9obL5uDihzl6u5be0.roa (hash: 5fhgSJOuf6zlLlFO7nClbQrHjOcLY4QSzZjarquKLMI=)
2: o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl (hash: tQgtQT3xNf5tQfK5WfLSqhzhlJl3gkQmE1Zmyzbk4fQ=)
3: r3cWbqyb9HgoTXK9cVNeKGx5WVc.roa (hash: yyB4q0s1+lO0MUxRgNhJm9ecE94W+tKbHHcE3lo6URY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:77:45:28:41:0f:29:0b:d2:77:a2:c8:3e:8f:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Validity
Not Before: May 16 05:00:39 2025 GMT
Not After : May 17 05:00:39 2025 GMT
Subject: CN=8f4eab2fe753b5fb7784726a0579bfa315edbba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:92:4d:9b:0a:30:cf:9d:0d:48:67:9b:33:
27:43:77:61:1a:f4:e2:d7:33:01:f7:64:6a:64:f8:
ad:f5:17:0f:90:22:af:25:c9:fe:cd:0c:ab:fb:b4:
9b:4a:ca:d3:0d:d6:63:36:91:e9:3c:c6:41:7e:db:
cc:d0:ed:ab:58:22:31:2c:c6:38:3a:21:e5:b0:b9:
a1:1a:3a:ab:87:5a:7d:c5:37:90:cb:31:9b:10:27:
f7:93:8e:f6:2d:d4:3f:77:ae:1e:8b:a0:04:6d:73:
19:64:e1:5d:7a:3c:b1:b5:1e:bc:b9:f7:d5:82:1f:
bf:95:cb:9b:df:8d:91:a1:95:0a:2d:ca:6f:1e:53:
01:e9:90:c5:38:1e:88:74:c9:dc:21:a5:50:61:82:
d6:2b:46:c0:fd:92:20:ee:32:c8:fb:2b:fa:f0:5f:
31:14:60:ca:9e:97:e4:0a:27:ee:69:b6:91:78:5d:
44:4c:51:05:63:00:31:5c:60:9d:e6:f8:48:f9:0a:
c0:8e:62:6b:05:7b:a6:db:ec:56:54:10:48:b7:ab:
55:72:80:3f:6d:4f:39:ab:dc:ed:89:f4:c9:44:1e:
2e:54:9f:31:1b:d9:a8:c6:cc:d8:5f:db:95:3a:96:
87:5c:01:b3:9d:40:1b:2d:dd:b6:c8:a1:04:90:64:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:AB:2F:E7:53:B5:FB:77:84:72:6A:05:79:BF:A3:15:ED:BB:A5
X509v3 Authority Key Identifier:
keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:75:c4:40:ae:e8:2d:7e:de:24:71:0d:e6:20:15:5b:c4:6c:
f1:24:96:e1:3a:01:66:a2:e4:7e:b1:dd:3a:e2:67:d8:25:0e:
14:98:57:ae:c1:af:cd:47:20:84:76:2e:68:32:db:92:dd:a7:
e4:5f:12:7b:c9:c9:bc:c4:a8:91:a4:f6:1a:50:44:e6:72:dd:
f6:46:c5:26:58:2d:7f:ed:f7:11:46:5b:27:25:6f:62:32:8e:
6e:5f:22:f4:fb:b5:4c:29:3b:1e:0e:c8:de:28:7e:07:7e:06:
67:6a:6e:da:b8:15:e6:25:ee:fd:ca:b8:02:14:5f:57:32:58:
89:de:83:33:d6:21:8a:c9:e5:25:81:04:f5:14:d1:76:a9:21:
f0:63:57:f7:0f:ec:06:29:51:d2:cc:5c:0e:71:e2:81:65:63:
3c:61:8a:34:24:43:f3:b6:ff:89:cc:ed:ee:5b:66:33:9b:d0:
94:0a:e0:62:a6:48:27:d6:8a:2f:f8:3e:6c:e3:1d:d4:81:3b:
9f:21:60:36:fb:bd:8c:38:80:99:ad:a6:ec:98:28:da:b2:9a:
40:dd:ff:94:b0:de:04:b2:40:f8:53:71:51:25:f5:27:12:2e:
5d:24:56:8f:b9:8f:53:ff:45:77:fc:44:78:af:6d:86:a2:62:
04:22:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:11 2025 by rpki-client