Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: lWIEG4w53DfjamzveykfWGMzo/lTiBxvFfYc3EnFoGc=
Subject key identifier: 12:EA:A9:DE:3E:BD:F8:44:AB:41:61:67:FC:D7:F7:C8:6B:9A:C5:00
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 0197F32325822E610BC0F22AFA54218EBD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 15D5
Signing time: Thu 10 Jul 2025 07:00:56 +0000
Manifest this update: Thu 10 Jul 2025 07:00:56 +0000
Manifest next update: Fri 11 Jul 2025 07:00:56 +0000
Files and hashes: 1: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (hash: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: KMcGn1YhBbDtTrK6CqaZejadXW7NVtwsmrsPGnEGuOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:23:25:82:2e:61:0b:c0:f2:2a:fa:54:21:8e:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jul 10 07:00:56 2025 GMT
Not After : Jul 11 07:00:56 2025 GMT
Subject: CN=12eaa9de3ebdf844ab416167fcd7f7c86b9ac500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:48:4a:83:93:cd:0a:95:27:aa:ff:b0:c9:
a1:25:81:fe:5c:7c:06:aa:5b:b3:b3:0b:47:73:73:
d9:67:23:3b:b5:a4:c6:9c:1b:73:c2:42:00:43:64:
3a:9a:0d:ae:ad:06:48:28:b0:9a:5f:45:ff:dd:df:
c3:19:22:79:51:18:43:ed:6e:7d:dc:08:51:fd:49:
78:a9:2e:7d:fe:d7:92:6c:e0:be:67:11:4f:b2:7e:
57:43:cb:c0:fe:4f:fa:5f:4d:21:12:54:a2:43:33:
0e:65:92:57:0d:80:c9:78:8c:61:bc:bc:6e:3c:71:
48:ce:bc:0a:42:4a:1b:c1:0e:ca:e2:3f:cc:2a:d2:
3a:bb:df:b9:29:ae:13:a7:39:c3:88:e6:dc:b7:ff:
44:9e:59:8a:ec:ed:89:76:d0:21:1b:79:56:b9:aa:
0d:60:40:4a:8c:69:58:64:fa:f8:6e:7a:2f:08:25:
fe:6f:04:b8:47:7f:7e:60:89:8a:be:25:a9:76:56:
14:10:ff:56:9c:8f:8c:f2:08:d7:82:47:ef:0b:6f:
a8:02:cc:3a:59:ec:ae:5d:6f:bb:12:6d:2e:2a:c1:
45:a6:2e:83:b1:77:d9:2a:b2:b5:de:75:bc:ee:74:
36:f4:26:e2:2d:90:f5:c7:b6:09:fe:4e:cb:03:04:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:A9:DE:3E:BD:F8:44:AB:41:61:67:FC:D7:F7:C8:6B:9A:C5:00
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0e:b3:30:a7:f4:ce:82:e9:98:b7:7d:46:00:42:b2:8b:4a:
40:b2:1c:a9:e3:35:bc:15:03:4d:eb:b8:6e:7a:00:5b:a7:f3:
34:e8:e7:3d:fc:09:d4:67:24:60:d5:0d:9a:0d:6a:61:b6:1b:
e1:0b:9b:ac:f0:17:d8:cf:57:1e:b5:c1:df:16:35:de:c9:4c:
b0:37:ff:98:cb:4b:73:27:56:0e:ee:8c:49:fe:2d:67:7b:e3:
b8:64:e4:7e:59:78:28:c8:85:b2:03:2b:07:20:e2:83:00:ef:
e9:c1:44:13:ca:8b:d8:7a:71:58:92:61:7d:b0:ac:b7:bc:bf:
ab:93:eb:9c:41:97:79:87:57:f1:c3:33:be:31:ce:64:11:eb:
05:be:ec:65:02:17:67:18:03:54:28:15:20:91:e6:a7:89:ac:
26:f9:3f:91:11:69:43:08:a5:83:57:48:b1:e8:03:bb:36:f7:
e7:61:10:d2:24:68:cc:90:0c:e9:1c:f0:c0:c2:9d:32:9a:42:
c3:09:a4:74:a3:79:da:38:8e:7c:fa:ed:55:4b:b0:56:59:c2:
5f:88:a9:c6:e2:f5:34:cc:2c:37:bd:87:58:0c:86:40:e1:6e:
1f:86:88:ca:cf:2a:29:02:85:ff:a5:72:9f:08:aa:e8:ff:82:
7f:a7:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:58 2025 by rpki-client