Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: 30tpAUOO6E4E23qap0C5SPqI5LK2Ohfb5HadMekJYZI=
Subject key identifier: 94:7D:E6:0A:B6:ED:70:12:AE:03:CC:70:34:EA:9E:54:90:60:27:0B
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 019786FD27DAA887882B0F384A525B6CA29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 1248
Signing time: Thu 19 Jun 2025 07:00:27 +0000
Manifest this update: Thu 19 Jun 2025 07:00:27 +0000
Manifest next update: Fri 20 Jun 2025 07:00:27 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: fJCsVzxPhK465wpji4F5U9N724Z8ZnPpPtV+hG2Fuws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:27:da:a8:87:88:2b:0f:38:4a:52:5b:6c:a2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: Jun 19 07:00:27 2025 GMT
Not After : Jun 20 07:00:27 2025 GMT
Subject: CN=947de60ab6ed7012ae03cc7034ea9e549060270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:8d:1f:5e:48:af:18:0f:5e:2e:d6:e7:6a:
95:42:fe:bb:18:ce:fa:72:32:53:a6:cd:d1:bc:9e:
f7:7b:e1:51:72:54:e6:5b:ea:dd:28:6a:3a:24:f9:
8a:db:04:57:ab:49:e2:b5:89:2e:de:10:07:b9:51:
fb:ee:5d:7d:cd:12:10:50:5b:ae:ab:4c:82:8f:0c:
37:f5:9a:bb:ae:95:5a:27:c6:95:cd:d3:d9:cd:1a:
8a:da:e1:5e:fe:8f:e5:4e:29:d0:5f:27:2f:e3:d4:
80:73:8f:a1:c6:dc:43:28:5f:75:e1:ad:6f:f9:01:
ff:2c:de:2b:3f:a4:d2:25:b7:86:3d:17:15:82:c9:
5e:7e:01:c7:da:35:d9:25:2f:16:b6:f3:c5:3b:7b:
17:f9:f5:a0:e2:20:bc:8c:12:6f:9f:01:6b:af:1e:
e5:a5:46:78:4d:bf:a0:ed:4d:69:37:06:3a:7c:c3:
b3:56:4d:78:9e:78:15:23:39:f3:df:76:5d:a8:59:
8b:b0:ba:60:a8:8d:c2:ae:1d:87:3e:44:47:64:94:
68:d9:e1:f7:d6:6f:9b:9a:f2:be:56:78:58:8e:fc:
70:05:d7:a1:14:8f:5a:f5:4f:02:36:9f:49:bf:6a:
ca:66:6f:ae:b0:9a:0b:55:16:cd:fe:ae:9f:29:9b:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:E6:0A:B6:ED:70:12:AE:03:CC:70:34:EA:9E:54:90:60:27:0B
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ec:5e:67:ef:e9:8a:f1:28:3e:60:eb:aa:4f:ac:74:5d:d1:
09:9f:8a:97:9a:2c:96:bd:a2:f1:58:0a:d4:a3:0d:64:4e:dc:
2f:c8:cc:1b:26:da:93:a7:4d:5b:0d:62:70:4f:82:f3:ac:78:
11:0a:2f:ce:cb:4f:fd:d4:bd:b8:63:4c:c7:1e:c6:1b:c8:6d:
27:4a:18:d6:cc:51:9b:d4:63:aa:97:f1:90:77:81:99:9a:5a:
19:79:bf:b0:27:91:0e:82:76:93:d8:a7:06:79:72:a0:27:03:
6f:ea:2c:78:6d:72:a6:3f:80:49:78:fb:88:57:62:be:40:2e:
70:96:3f:dc:1c:35:8d:fd:c0:dd:a9:89:96:7d:ef:89:9a:89:
82:8b:73:26:cb:f1:c7:ec:6f:bb:00:0c:74:d4:69:90:fc:f7:
55:a2:b9:91:ce:15:ef:aa:8b:47:bb:17:55:7e:e7:67:7f:03:
24:ea:b2:47:df:b2:32:6b:4f:02:ef:d9:55:ea:93:97:d6:3d:
73:dd:75:71:6e:45:8b:1b:ae:14:f6:f7:97:11:f5:91:47:77:
2a:b5:12:32:f8:4a:23:7f:05:40:e5:44:32:1f:d0:20:ac:5b:
c8:47:0a:f7:b2:09:63:48:43:40:4f:02:96:bd:7d:a1:9d:d8:
e6:56:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:40 2025 by rpki-client