Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
File: aIPzR-OJH1c9-AFa1swzHM6wR2g.mft (raw, json)
Hash identifier: UBellsSUB1XYzCB0Fe/IFfZvhXrnwm3bz931EscaFU8=
Subject key identifier: C7:21:BE:AD:72:1D:24:77:07:21:E8:73:40:65:C6:E9:48:33:21:08
Authority key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Certificate issuer: /CN=6883f347e3891f573df8015ad6cc331cceb04768
Certificate serial: 0197BE90BEFFF7BA2832FF28CA5B63F7B38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
Manifest number: 0562
Signing time: Mon 30 Jun 2025 02:00:46 +0000
Manifest this update: Mon 30 Jun 2025 02:00:46 +0000
Manifest next update: Tue 01 Jul 2025 02:00:46 +0000
Files and hashes: 1: aIPzR-OJH1c9-AFa1swzHM6wR2g.crl (hash: lmLcTTwM26fqjyf2VzyOG34fwI+YAN27oHnNbfcWnJY=)
2: yzwcVTa4_EkxmkA3zs7RU2L0KuA.roa (hash: DiSWwAw7nqN/ZHYKb36GWp0hrc3vDQ6bPbUIBdkwyko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:90:be:ff:f7:ba:28:32:ff:28:ca:5b:63:f7:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6883f347e3891f573df8015ad6cc331cceb04768
Validity
Not Before: Jun 30 02:00:46 2025 GMT
Not After : Jul 1 02:00:46 2025 GMT
Subject: CN=c721bead721d24770721e8734065c6e948332108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:1c:28:81:c5:4d:f5:8e:eb:24:29:a9:7e:
a6:f1:87:b7:0e:14:2c:cb:27:d8:8d:43:41:ee:7c:
b3:59:ed:e4:95:8d:bd:e0:a9:e6:f3:ed:bb:89:4c:
de:c9:52:09:87:49:9e:87:38:26:e7:96:77:b3:7f:
55:4b:e2:69:0a:13:ea:8d:6c:39:ae:01:4d:dc:b1:
eb:7c:77:09:be:5e:e2:46:4f:22:bf:e6:19:c6:89:
f9:db:53:65:d1:6c:f3:e7:c3:fd:b8:d0:59:65:2e:
b8:c5:f5:07:e7:77:6b:da:62:5f:02:c9:bc:66:49:
e8:72:d1:b9:65:00:93:ef:23:15:39:f2:f3:0b:7d:
ee:2a:2b:39:25:b7:75:8f:bc:91:d1:ef:20:ce:db:
07:66:8d:fd:39:ae:4c:94:61:57:30:02:5f:5a:cc:
03:e7:fd:77:0a:93:0a:71:c6:6f:69:65:ad:a1:f7:
10:a4:3c:18:e5:f2:98:69:7c:27:e9:78:7f:af:5f:
4e:6e:04:bf:f4:ee:e6:7e:e9:05:5a:64:8e:12:91:
13:67:e8:48:e1:fe:7d:d6:5a:67:88:24:9e:05:05:
c8:fb:8c:e5:7a:65:98:85:0a:26:8f:86:a4:da:85:
54:d3:3a:d4:0f:e3:f6:45:93:6b:c0:45:8d:20:48:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:BE:AD:72:1D:24:77:07:21:E8:73:40:65:C6:E9:48:33:21:08
X509v3 Authority Key Identifier:
keyid:68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f8:3c:ca:30:28:aa:9b:31:01:0e:bf:5a:0a:8c:59:8d:bb:
bc:14:a2:e9:ee:25:72:7f:15:a4:ab:36:db:c8:c4:9b:a0:7b:
54:82:77:52:f6:35:be:5e:cd:2e:a6:b6:04:33:51:d8:91:23:
87:60:39:70:c6:05:ed:a5:e9:b3:35:1e:10:05:b4:cd:f4:69:
58:b1:74:13:ff:f8:5c:82:3a:c1:15:3f:d8:39:ca:33:19:c6:
bb:ec:9b:2e:27:93:56:ed:64:82:1f:c4:2c:62:36:a8:74:7f:
2f:ca:49:33:b8:68:dd:e0:8e:60:2d:31:f1:7e:7b:34:e2:f6:
9e:5e:0a:6b:4e:1d:3b:27:d4:ef:48:b5:18:a8:22:36:b4:fe:
e4:b5:ac:73:7e:3a:23:d0:06:5d:5e:d3:24:40:e0:e0:4c:57:
09:8e:ee:31:b9:70:27:63:52:28:cb:96:83:ba:e7:7b:78:5d:
ee:2a:36:3b:fb:4b:9a:d4:81:b2:97:9c:e7:7d:60:52:a7:38:
f7:ad:06:80:a9:7a:0d:10:70:b7:37:a2:9a:8f:c8:b4:99:cc:
8d:4d:71:11:56:05:7e:9c:5f:d0:d0:b2:b6:e7:8c:d1:dc:30:
17:86:60:e1:db:b4:49:a3:ac:14:7c:dd:cc:3a:0e:ae:3e:76:
a0:1d:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:45 2025 by rpki-client