Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
File: PKxqaB9tMonhxFAqHxXHuuMfktw.mft (raw, json)
Hash identifier: FuUqWJU6lNXeeteYflqdM+7SIOU5T8/fbEirIDuVHMk=
Subject key identifier: B7:B4:A8:51:B2:EA:24:14:F4:14:94:9A:58:9E:95:F6:45:2F:0F:CF
Authority key identifier: 3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
Certificate issuer: /CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Certificate serial: 01956709F9601FF5D6E369E23B9038777413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
Manifest number: 0FF5
Signing time: Wed 05 Mar 2025 16:01:01 +0000
Manifest this update: Wed 05 Mar 2025 16:01:01 +0000
Manifest next update: Thu 06 Mar 2025 16:01:01 +0000
Files and hashes: 1: PKxqaB9tMonhxFAqHxXHuuMfktw.crl (hash: mrwJjRRgKXOJNVeV8MKZmHmWx0nDPqhMUGxXdQ/fCos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:09:f9:60:1f:f5:d6:e3:69:e2:3b:90:38:77:74:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Validity
Not Before: Mar 5 16:01:01 2025 GMT
Not After : Mar 6 16:01:01 2025 GMT
Subject: CN=b7b4a851b2ea2414f414949a589e95f6452f0fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:7c:5e:c9:7e:74:b3:41:9a:d8:ae:51:d6:
fa:5b:4b:7e:87:08:07:f5:b7:94:f3:ea:67:be:bb:
69:f7:2a:b6:b1:08:c1:ee:cb:f9:af:4a:7e:90:73:
ee:cd:57:a3:04:fd:bd:80:3d:29:83:87:11:1f:d6:
68:3a:fb:e1:79:4f:ae:59:92:02:c1:0d:53:37:c3:
2b:97:6a:f4:b3:d6:4c:19:90:ea:e5:09:5e:35:a9:
24:e7:8d:13:63:6c:02:98:15:af:f3:0f:c5:14:3f:
cd:17:13:f0:01:68:be:6f:5a:c8:d6:20:ba:2e:ee:
c2:ab:dc:e6:7f:34:0b:b6:28:f1:7f:3c:9b:e1:ba:
b4:65:94:dc:d6:02:8d:10:46:7f:f5:aa:57:c3:7b:
4c:4e:9e:10:3b:41:d1:5a:de:29:93:2a:88:bb:0f:
a1:80:7a:49:c6:5b:87:ac:79:09:d9:0d:17:a5:58:
94:7a:57:9d:f4:68:22:c8:98:68:f6:7f:b5:7e:6f:
61:85:47:a5:3d:a9:90:23:60:f4:86:a0:84:cb:d7:
2e:9e:71:32:94:dd:d4:a5:f3:2b:c8:38:50:80:fc:
e3:7c:63:b9:4a:55:5f:55:17:bc:5e:fa:b7:2a:e5:
e5:9c:26:ef:29:a9:e5:da:1e:b8:e5:38:65:1a:82:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:A8:51:B2:EA:24:14:F4:14:94:9A:58:9E:95:F6:45:2F:0F:CF
X509v3 Authority Key Identifier:
keyid:3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:66:dd:72:b2:dd:f4:73:d9:c9:86:03:e7:06:26:8f:e8:
05:d4:f9:da:63:c9:6c:6b:8e:3d:73:da:b7:b3:8f:53:1e:3a:
40:22:f7:b4:8f:cd:0b:28:b2:4e:d7:07:4a:8c:1b:2d:89:a4:
65:cc:39:b9:e5:07:f8:31:c9:1e:c2:43:8b:05:46:12:3f:6f:
bc:06:a6:ea:07:d1:20:f9:7e:52:89:39:27:8f:e9:69:a3:84:
ff:ce:05:d2:91:ab:fa:5a:a8:f5:b7:65:fa:91:6b:bd:ec:d4:
70:82:80:51:2f:44:46:91:6a:68:03:5a:b7:cc:fd:64:ec:2a:
cd:57:26:f8:cf:02:dd:d8:b5:08:36:3a:85:13:05:00:e7:7a:
9b:72:0d:f3:fa:d1:35:49:86:a5:f8:18:63:8b:6b:11:7c:6e:
e5:75:df:c4:00:10:7b:f8:d3:78:4f:ca:79:b3:13:83:fb:46:
4e:5b:12:77:08:14:3b:27:e2:ef:48:13:53:ba:c2:35:26:61:
44:87:fa:83:ce:85:0d:00:77:83:be:76:07:93:c1:38:bb:87:
01:ea:90:a4:44:0c:f9:c8:4e:6e:fe:c4:c2:ba:96:5f:10:ec:
4d:d3:a5:4b:43:14:b6:e6:4b:a0:7f:1c:6e:0d:12:ec:f7:d3:
1f:ee:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 17:20:13 2025 by rpki-client