Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft
File: 5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft (raw, json)
Hash identifier: 3EhlIYW/znO9azIiR/OC+ZFUZrgVkidbTiMqXCKrwkU=
Subject key identifier: A0:3B:CE:17:73:48:DD:B9:6C:39:6C:68:18:E2:95:5E:F3:8E:19:F9
Authority key identifier: E4:6D:57:9F:EF:50:14:7C:1F:D0:9D:96:B4:95:6F:DD:1F:20:9D:72
Certificate issuer: /CN=e46d579fef50147c1fd09d96b4956fdd1f209d72
Certificate serial: 01970B9CD814742528DA7AD5FFB629B0C99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft
Manifest number: 0E6A
Signing time: Mon 26 May 2025 08:01:57 +0000
Manifest this update: Mon 26 May 2025 08:01:57 +0000
Manifest next update: Tue 27 May 2025 08:01:57 +0000
Files and hashes: 1: 5G1Xn-9QFHwf0J2WtJVv3R8gnXI.crl (hash: NNE4TJvDtLFCTRvyDxXwrtwBqZzuwhDcbUQDjOQHqLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:9c:d8:14:74:25:28:da:7a:d5:ff:b6:29:b0:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46d579fef50147c1fd09d96b4956fdd1f209d72
Validity
Not Before: May 26 08:01:57 2025 GMT
Not After : May 27 08:01:57 2025 GMT
Subject: CN=a03bce177348ddb96c396c6818e2955ef38e19f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:a0:33:64:e1:2a:d2:62:9a:b0:24:39:59:
96:5a:a7:0b:ad:45:be:78:0d:92:f3:78:f8:2d:cb:
60:cd:4d:52:a1:74:99:92:b8:2b:e0:8c:65:d8:5d:
3e:ce:00:40:f8:e5:84:63:5a:41:c8:3e:a6:c5:e7:
d6:4c:e1:ac:a4:06:8c:8e:b6:73:de:d6:6b:a1:79:
a9:86:c3:76:19:41:4c:38:22:9d:f2:0a:99:cc:0d:
c0:5e:20:10:04:f7:5f:e6:c5:9b:97:32:5b:f8:c6:
e2:38:39:7b:65:06:5f:62:35:1a:a5:4c:96:61:70:
f3:6f:ed:1d:ff:aa:fa:d7:85:d1:52:30:cd:9b:0f:
82:6a:90:e9:c0:54:98:ae:af:09:8e:8f:99:4d:fd:
da:c5:1c:51:74:a1:a0:2c:11:3b:11:6e:29:67:ed:
8c:c4:9b:f6:76:30:4a:50:f1:77:5e:e1:00:5a:d9:
6b:e1:bf:29:22:0b:af:66:ec:2e:34:49:68:20:f8:
96:22:0d:8b:cf:3b:29:9a:be:a9:7f:b1:7f:a5:23:
c3:e0:cb:65:b4:66:78:6c:b1:41:35:44:35:d4:3d:
8f:a1:3c:d5:45:b0:e1:89:f5:05:68:96:6f:5d:a9:
69:16:46:90:55:c9:5e:02:69:84:86:f8:ea:b5:b7:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:CE:17:73:48:DD:B9:6C:39:6C:68:18:E2:95:5E:F3:8E:19:F9
X509v3 Authority Key Identifier:
keyid:E4:6D:57:9F:EF:50:14:7C:1F:D0:9D:96:B4:95:6F:DD:1F:20:9D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ca:d0:6a:6c:24:63:60:0f:64:24:cb:a9:01:33:68:de:9a:
31:bc:b9:6e:ba:98:0b:07:e8:27:83:aa:be:19:7c:55:d4:6b:
e6:30:b5:5c:e2:81:0d:ba:bc:25:26:ed:c6:13:69:ba:05:23:
67:5d:0d:ad:38:cf:47:cb:94:45:b7:89:3d:5d:d2:dc:0e:0b:
04:df:10:3e:ab:83:8b:b0:b7:c8:8f:dc:8a:96:57:0d:ea:0d:
2d:6a:cb:81:80:4c:61:3c:03:ed:3d:ba:4a:82:bb:70:87:3f:
4d:5e:4a:fb:20:3d:42:bf:9d:32:c9:f8:92:55:20:3f:54:81:
7e:e7:56:30:62:7d:3c:31:2f:88:50:33:ce:50:b5:76:86:1a:
2f:89:7a:2a:27:f8:a5:e6:be:70:4e:0d:e2:67:d6:25:b8:be:
d5:90:df:ad:94:e1:ec:78:85:76:d4:64:a2:5a:46:51:79:b2:
c6:8e:4e:3e:9b:ec:f1:2e:f9:4c:a0:ab:cd:3f:2d:dd:86:76:
2f:31:84:e2:6d:47:97:5d:15:e1:23:60:67:21:b5:18:53:38:
8d:32:da:22:21:87:16:85:f5:aa:c3:b8:60:ef:4e:59:db:3e:
0f:a4:95:d5:dc:6b:fd:19:b2:3a:f6:e0:62:56:65:fe:32:ab:
24:aa:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:20:04 2025 by rpki-client