Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.mft
File: pRUEcLY5DlX3ReEK-2ZJHsBeEgg.mft (raw, json)
Hash identifier: BTMyCBq99M4TCwYWi7GfisJhnSzC8sXvIC3ArotI5Jo=
Subject key identifier: DA:F8:C8:35:25:20:F7:66:38:5A:5E:8D:66:C5:29:FD:98:45:46:98
Authority key identifier: A5:15:04:70:B6:39:0E:55:F7:45:E1:0A:FB:66:49:1E:C0:5E:12:08
Certificate issuer: /CN=a5150470b6390e55f745e10afb66491ec05e1208
Certificate serial: 01877F471CB84764FFBD550CD7AC973F71F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.mft
Manifest number: BA
Signing time: Fri 14 Apr 2023 10:19:39 +0000
Manifest this update: Fri 14 Apr 2023 10:19:39 +0000
Manifest next update: Sat 15 Apr 2023 10:19:39 +0000
Files and hashes: 1: pRUEcLY5DlX3ReEK-2ZJHsBeEgg.crl (hash: CGs+UGWH8t07yOe8isJlHXaVukF1gRc8M0EhDhOZlhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:47:1c:b8:47:64:ff:bd:55:0c:d7:ac:97:3f:71:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5150470b6390e55f745e10afb66491ec05e1208
Validity
Not Before: Apr 14 10:19:39 2023 GMT
Not After : Apr 15 10:19:39 2023 GMT
Subject: CN=daf8c8352520f766385a5e8d66c529fd98454698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:23:1c:ed:84:2e:3f:fe:ed:dd:fe:5a:58:
3a:e9:ab:62:bc:fd:76:a8:55:43:c8:78:e7:9e:7a:
ce:0b:96:ae:37:ed:fc:5b:4f:96:7d:ec:b6:02:ef:
79:44:fb:c5:9c:97:70:1b:5f:62:19:4e:51:49:5c:
78:28:ee:bc:c1:dc:84:11:61:40:a9:a6:a7:d8:cb:
67:52:08:7c:f8:47:16:3b:bc:9f:23:3e:fa:9c:b8:
ee:78:5f:ac:44:18:ae:d9:ab:74:ba:0a:7b:7a:1e:
45:72:76:a2:3c:99:87:c2:1b:ac:a7:fc:cc:3e:09:
6e:85:a8:30:c0:68:fd:cf:5a:bf:df:9f:eb:8c:d0:
5a:69:ee:97:1d:69:66:c9:45:89:56:8f:f4:a2:87:
96:4e:84:4b:6d:8d:d6:21:81:7e:21:6f:ed:1c:c2:
96:58:5d:7c:32:9b:e8:3f:3d:c6:ab:55:5c:90:80:
96:8e:51:3e:20:d5:b1:d6:42:b3:13:52:58:e0:7f:
c0:1d:f9:e4:6e:47:e2:01:9e:ab:92:e6:13:28:8a:
b9:6f:78:8e:00:6f:cf:f7:15:a8:28:85:bb:c2:26:
1c:46:fc:a8:12:cb:54:14:d4:61:a0:bc:cf:fe:5a:
b0:0d:c3:d6:08:52:cc:fe:a1:62:d4:a6:d7:7c:75:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:C8:35:25:20:F7:66:38:5A:5E:8D:66:C5:29:FD:98:45:46:98
X509v3 Authority Key Identifier:
keyid:A5:15:04:70:B6:39:0E:55:F7:45:E1:0A:FB:66:49:1E:C0:5E:12:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/pRUEcLY5DlX3ReEK-2ZJHsBeEgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:61:49:c3:32:f7:c2:e3:b4:ad:0d:3f:fb:6e:d8:2c:cf:6a:
77:d8:83:41:a1:a3:d8:ca:0c:54:19:da:ac:f1:c0:a4:f4:20:
0c:9d:10:e5:05:ed:ed:06:13:f9:59:72:60:ec:32:c9:9c:c5:
6b:f3:8f:b3:f6:30:ee:9b:b3:f3:00:e5:d3:60:62:e1:8d:63:
25:af:53:84:67:3e:31:90:63:c4:07:b5:b6:2d:23:17:93:d7:
80:a3:60:0d:c1:da:7b:a6:5b:58:a4:e7:7d:91:64:98:68:6a:
64:8f:a6:35:63:0a:1f:51:25:a3:bc:23:c1:ea:bc:15:57:5d:
ff:72:0b:e6:14:d3:ee:ae:22:13:25:29:60:92:91:00:7b:cc:
c7:5b:bf:d5:7f:38:ba:12:17:3d:c8:df:79:5a:d2:b2:20:9c:
bc:16:83:76:97:79:6c:c2:d4:63:96:67:9a:21:f6:f1:75:0c:
b8:a5:5d:92:0c:cb:82:b0:89:83:3d:09:89:87:84:0f:1f:b7:
31:ac:3b:4e:d9:15:ad:d5:37:75:5c:93:ed:51:93:e8:df:84:
76:92:e4:8e:6b:22:0b:c3:d6:7b:47:eb:a2:65:a5:b0:44:1c:
31:d7:f7:6a:8e:8c:23:d2:31:05:f1:5a:29:c9:74:e2:25:7c:
e9:47:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:40 2025 by rpki-client