Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier: /Ep+TdhJLBmqUj//rKkXo++agUpH6ntWFF683ww49Uc=
Subject key identifier: FC:7E:01:EF:EB:9D:03:5E:93:C9:B1:0A:81:2C:F3:B5:B9:6B:7D:38
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 0197451DA89A36291BD9B051516089D1C959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number: 0FCB
Signing time: Fri 06 Jun 2025 12:01:01 +0000
Manifest this update: Fri 06 Jun 2025 12:01:01 +0000
Manifest next update: Sat 07 Jun 2025 12:01:01 +0000
Files and hashes: 1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: bLsvulvXhwIYiuPIN+igbka6IcMsjt4tACLL8bFi5cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:1d:a8:9a:36:29:1b:d9:b0:51:51:60:89:d1:c9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Jun 6 12:01:01 2025 GMT
Not After : Jun 7 12:01:01 2025 GMT
Subject: CN=fc7e01efeb9d035e93c9b10a812cf3b5b96b7d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:b8:fc:0c:4f:b1:99:ad:f2:fd:b9:39:22:
d9:d8:d1:39:35:43:fb:fe:43:7d:97:ac:32:22:87:
83:3d:c0:95:fd:6b:29:40:4f:9f:64:77:ac:7d:64:
25:87:c8:8f:86:62:07:21:36:33:e5:ad:9c:a5:ee:
5e:ed:b4:d4:28:ce:69:bb:01:95:a9:c3:1a:6c:da:
df:14:9d:34:0d:49:8e:88:91:52:92:15:0c:f8:e6:
f7:be:15:fc:24:01:1e:ac:98:7d:6d:a5:14:29:f1:
44:ec:62:ed:63:11:9d:57:f4:78:d8:ba:9b:90:1c:
78:8d:8e:3d:7a:76:50:8f:c3:36:e9:e8:4c:e8:bf:
cb:65:df:10:1f:b1:86:1c:a3:10:1b:18:89:b9:8b:
d7:c5:9d:03:86:ac:14:e1:6e:b7:43:83:0d:4d:d4:
05:a7:df:58:c5:de:70:f9:72:ac:6a:5c:e4:f0:61:
ce:e5:6d:c4:da:b7:93:1c:9a:53:d2:88:bc:64:2d:
9b:9d:ef:93:da:73:f4:0f:02:8f:69:89:a7:5b:0e:
9a:be:24:73:ca:d4:1f:9e:65:58:ab:8c:69:61:e1:
b7:7e:35:bf:f2:b0:0b:a8:01:24:6b:58:d2:52:b4:
65:66:e9:46:1f:86:3a:6d:c2:72:2f:ec:15:bf:2c:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:01:EF:EB:9D:03:5E:93:C9:B1:0A:81:2C:F3:B5:B9:6B:7D:38
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e0:5b:f8:8a:da:ce:35:af:4d:c6:69:da:c6:1c:89:32:6f:
1b:c0:8b:89:52:fd:6e:82:89:5f:9f:9d:cf:46:50:45:0e:1d:
91:7d:6c:ca:85:3c:6b:86:a3:9c:59:06:1b:94:f5:9d:fb:44:
46:96:5d:5e:a2:4f:8c:0d:89:76:ee:09:f7:40:19:6a:57:9c:
fb:54:5a:77:0d:ab:b1:ac:6e:dc:3a:d6:8f:88:73:44:df:a3:
35:83:05:9f:6b:f6:95:25:2c:d6:95:6c:40:d9:23:38:a2:02:
23:42:86:7b:6b:31:30:d1:6e:44:23:02:fa:64:32:ff:61:46:
e1:8f:bb:6f:0a:19:78:e8:f2:3e:af:07:37:bf:58:7a:8e:21:
1a:a4:76:0f:46:93:80:ad:a1:81:e1:51:60:e3:cf:0c:55:f6:
56:1b:a0:a0:77:8c:e7:3f:ed:2f:2a:9e:dd:b0:8e:9d:18:6a:
0d:93:f8:6d:67:c3:7c:e0:1a:9d:a1:d6:8b:0c:5f:00:44:43:
39:df:59:32:a0:42:0b:83:42:52:9e:42:80:fd:be:be:20:7d:
92:cb:b3:9e:f6:61:8d:38:fb:5f:d4:c1:1f:9b:bf:fb:c4:7d:
17:d0:b1:98:4e:dd:73:1c:0c:66:07:ea:8c:c0:8d:09:9b:9f:
8b:b2:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:08:54 2025 by rpki-client