Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File: 9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier: pI7vsw04xsAGAJkOW7XYDcy4hL9WLYOiyAPO9ApydOM=
Subject key identifier: 25:10:2A:5F:F3:8A:F0:4F:A1:0F:4D:B2:22:29:B7:54:51:83:16:57
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 01973806E1DDB482FF616791DB6175EB58DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number: 1572
Signing time: Tue 03 Jun 2025 23:01:04 +0000
Manifest this update: Tue 03 Jun 2025 23:01:04 +0000
Manifest next update: Wed 04 Jun 2025 23:01:04 +0000
Files and hashes: 1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: J+hZb7fwdzd7Nh+wecyAzXh6aM3wjGhkjKjQ6av/dYI=)
2: CEOAcQGoF-M49o3FqEoqpthBq7c.roa (hash: o7aWAwYKfU3X1B2JaQq/PQb9tN2IBMnSaEyBCSBzIfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:06:e1:dd:b4:82:ff:61:67:91:db:61:75:eb:58:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: Jun 3 23:01:04 2025 GMT
Not After : Jun 4 23:01:04 2025 GMT
Subject: CN=25102a5ff38af04fa10f4db22229b75451831657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:51:4d:ce:cf:0c:b4:c8:ee:fd:a8:2f:5e:
20:a8:d1:f8:7a:a7:28:0b:d3:a6:2a:8a:df:36:55:
0b:d7:6b:0a:3e:08:36:82:2f:0a:f0:0a:c2:99:68:
a8:fa:90:6b:eb:ec:bb:6e:13:15:ad:56:29:b1:f0:
5b:e4:ca:b1:28:f9:ac:04:e8:10:9a:ee:09:97:66:
9e:91:da:85:0a:fb:13:0f:f8:f9:2a:72:11:e8:6a:
6d:d9:a2:23:e1:4e:56:77:25:4f:28:c0:28:80:15:
a9:50:86:0b:99:21:1e:f2:c3:01:27:2a:ec:87:43:
c6:7f:63:0c:18:54:4b:64:85:ff:c4:5e:51:5d:22:
80:8d:d3:c3:0a:43:00:25:00:1a:c2:11:d9:16:6d:
3b:4d:18:91:04:f5:af:e8:f3:e2:9d:f7:5a:85:7c:
b3:d1:9e:df:aa:fd:b5:59:b1:8a:b9:e0:48:14:05:
de:c2:03:02:70:1e:14:e9:28:da:bf:c2:68:a2:0f:
62:5b:07:76:57:ee:f9:a2:04:c1:3f:16:e9:e3:3b:
ca:5d:b1:99:88:e7:03:f0:ca:ed:eb:07:3d:98:d4:
06:59:93:c7:96:06:54:8d:28:0f:6a:ad:5e:d5:0e:
74:ad:23:de:fe:4c:2e:56:58:8f:f3:3a:28:25:82:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:2A:5F:F3:8A:F0:4F:A1:0F:4D:B2:22:29:B7:54:51:83:16:57
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ae:e6:c7:88:b6:84:a8:0f:22:64:b7:20:f5:e3:b6:c2:e7:
35:b8:f0:8b:db:3a:91:64:23:2f:79:32:f4:7a:a7:4b:84:d4:
a5:d2:4a:04:c3:7e:8e:4e:45:8b:ec:66:31:42:f7:95:a7:1a:
2e:a8:0b:c3:4b:21:ba:95:f9:d5:9d:7b:0d:4a:8b:b3:de:c0:
2e:de:b1:ed:15:d0:97:43:43:93:86:d8:07:80:88:c2:50:c2:
dd:cd:0a:62:21:8e:71:dd:04:12:2b:71:19:90:b2:cb:e7:6c:
6f:00:6c:f7:67:f0:c3:db:c0:0a:b6:83:ab:19:d7:2e:47:69:
45:e0:15:f6:5a:12:d1:82:bc:d5:08:38:0c:fc:d5:c1:15:b4:
e0:37:49:0d:2d:0f:35:1b:ae:ca:98:1c:46:b0:99:48:78:25:
db:8f:3b:ad:71:1b:52:f1:9e:77:4d:74:e9:f7:27:44:48:e1:
ea:ed:00:a4:e0:45:90:6a:cd:ab:7c:cb:00:d4:aa:9e:ec:d9:
f9:01:28:49:be:ed:21:87:2e:d9:12:18:67:81:48:9a:1e:03:
40:f2:45:15:7d:88:0a:34:cf:2d:05:cf:0b:9f:ec:08:b4:a8:
a1:f4:fd:2b:35:f3:a2:e1:5b:2f:d3:62:af:36:0a:eb:d7:fa:
8c:13:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:19:22 2025 by rpki-client