Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
File: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft (raw, json)
Hash identifier: PefUwDXGlMsNFZS0j3n/18YH2ykZSr4VvMZUaFw0G+Y=
Subject key identifier: 90:C9:51:B8:A0:F0:65:0C:46:6E:6E:CD:27:3F:2A:40:4B:DC:53:66
Authority key identifier: F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
Certificate issuer: /CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Certificate serial: 019622943300032658F4087BDBF74B2A8552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
Manifest number: 025A
Signing time: Fri 11 Apr 2025 02:00:59 +0000
Manifest this update: Fri 11 Apr 2025 02:00:59 +0000
Manifest next update: Sat 12 Apr 2025 02:00:59 +0000
Files and hashes: 1: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl (hash: RF2Be7aC+NhLM2V3v+k1wTn07Nj4AdtBS91E6VwK9I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:94:33:00:03:26:58:f4:08:7b:db:f7:4b:2a:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Validity
Not Before: Apr 11 02:00:59 2025 GMT
Not After : Apr 12 02:00:59 2025 GMT
Subject: CN=90c951b8a0f0650c466e6ecd273f2a404bdc5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:7c:91:01:38:55:e9:22:d3:40:06:15:33:
76:fa:45:6e:e0:a7:a2:c0:06:9b:4a:da:56:31:af:
c7:18:9f:57:71:cd:8e:c8:cb:f0:9f:ad:cf:e0:1a:
21:a6:f1:4c:0c:e2:f4:61:51:44:35:ba:9d:a4:0b:
0b:9f:dc:d0:ca:ed:cb:4c:8f:ca:85:2d:ba:da:db:
02:c5:8f:d6:a0:54:99:ee:66:6e:66:41:1d:ab:bd:
08:26:e5:d9:25:a8:bb:1f:75:cf:30:9a:39:8d:ce:
f2:41:d7:3c:66:f6:06:f9:24:d7:1e:10:b7:94:e3:
38:7b:c7:6c:d8:18:90:71:8c:75:33:90:67:f1:09:
48:d4:f7:6b:92:a0:be:35:50:28:2a:34:14:5f:6b:
13:16:28:c2:84:2d:f2:77:51:93:c5:13:32:af:a7:
b3:58:a4:43:f7:c7:68:28:bc:61:32:31:56:58:cd:
a8:d2:48:b8:3f:3a:17:e2:64:a2:1b:9a:a8:94:3c:
36:09:a2:fe:d3:1e:0b:9e:3e:a7:79:44:39:f3:cc:
cf:cc:53:a2:eb:10:5c:32:58:59:71:3d:50:5d:40:
98:59:c5:b9:f3:20:4f:37:09:cf:fa:8d:6a:17:95:
28:44:c8:0b:c7:58:e6:8d:3d:f4:46:46:94:7c:b9:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:51:B8:A0:F0:65:0C:46:6E:6E:CD:27:3F:2A:40:4B:DC:53:66
X509v3 Authority Key Identifier:
keyid:F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:5a:d7:a2:f5:6c:c1:de:41:51:03:a1:12:c9:e2:a1:84:
b3:cf:a6:77:b7:55:81:b2:98:50:de:ee:b2:89:4c:f3:51:e8:
a0:2e:50:6f:46:5d:ea:ae:da:30:0f:94:b9:9b:0d:df:71:90:
49:93:6b:26:88:99:7b:2f:ec:6d:f4:73:cf:99:93:f4:9b:33:
03:31:51:93:a4:41:7d:20:17:e9:41:15:9b:b2:15:89:2b:0e:
49:25:c8:e7:93:0a:f1:75:ee:8e:0f:14:d3:9b:84:25:cc:9b:
b0:20:34:c6:9c:01:4d:fe:4d:b8:8d:ee:1a:d3:3a:ff:62:f2:
9f:35:2b:25:62:08:2d:42:43:0e:a4:d8:aa:a5:aa:6b:df:71:
a8:3d:f2:7d:4e:75:27:c7:53:02:1e:cd:36:97:5a:b7:32:72:
5e:1b:b4:18:6a:2c:1e:8f:a2:c9:42:83:aa:f2:01:7a:ea:bd:
66:4d:9b:fb:e7:82:5a:a1:bb:91:89:42:92:3b:c0:70:14:7c:
de:ec:10:42:56:e1:16:2d:a3:0c:35:94:cd:d5:c9:e7:60:17:
c7:1f:8a:32:8d:82:33:36:ec:4a:e8:37:7d:8d:6a:94:ba:0c:
57:01:fb:90:3b:b1:c6:4f:ee:16:45:cc:fc:1e:94:1d:f6:72:
a2:02:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:42:07 2025 by rpki-client