Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
File: iJYJKGnErm7cu2IlXiBVC4WWzdw.mft (raw, json)
Hash identifier: E2oaFx6MTl9mC+0eFtO2CWITo058l4Ee3eQiLSNbgJ4=
Subject key identifier: CD:C8:0F:DF:37:63:51:B4:5B:68:69:3E:D1:F8:66:41:DA:24:86:D8
Authority key identifier: 88:96:09:28:69:C4:AE:6E:DC:BB:62:25:5E:20:55:0B:85:96:CD:DC
Certificate issuer: /CN=8896092869c4ae6edcbb62255e20550b8596cddc
Certificate serial: 0195CC88F9DDBBF83FD2A98346D07E8B5400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJYJKGnErm7cu2IlXiBVC4WWzdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
Manifest number: 07C0
Signing time: Tue 25 Mar 2025 09:01:23 +0000
Manifest this update: Tue 25 Mar 2025 09:01:23 +0000
Manifest next update: Wed 26 Mar 2025 09:01:23 +0000
Files and hashes: 1: iJYJKGnErm7cu2IlXiBVC4WWzdw.crl (hash: wj0KXYhiqQ/LFA78THXFMOrplbUYJjPfA7j1aWRoBB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:88:f9:dd:bb:f8:3f:d2:a9:83:46:d0:7e:8b:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8896092869c4ae6edcbb62255e20550b8596cddc
Validity
Not Before: Mar 25 09:01:23 2025 GMT
Not After : Mar 26 09:01:23 2025 GMT
Subject: CN=cdc80fdf376351b45b68693ed1f86641da2486d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:bb:6b:cf:0c:f8:a0:f6:09:c4:13:e8:2a:
2c:55:fc:c3:cf:2a:85:7c:68:2d:71:c1:43:00:b5:
e0:eb:18:a7:b1:28:b3:8d:1f:d6:ca:ec:f4:fa:62:
8d:53:71:86:2e:2b:33:fc:db:69:13:7e:8c:19:1d:
9d:6c:0e:8f:49:cc:5b:ca:f2:bd:fc:7e:26:40:20:
1d:a1:b6:60:dd:c4:38:cd:53:a0:4c:51:0c:fb:55:
55:03:e5:46:cc:7f:e5:f9:39:d1:5a:2f:6c:1e:aa:
dc:5e:3a:af:d7:7a:bb:2b:b2:f8:be:a7:16:d8:f7:
4a:92:a9:f5:a1:55:0a:da:90:ff:f8:0a:f7:e6:c5:
b1:bc:1c:2f:cb:27:d7:15:46:29:1a:47:32:5e:65:
3f:37:b5:29:9a:93:22:33:f2:3a:ca:2f:df:6e:bf:
a8:e1:6b:02:dd:96:09:91:67:b5:08:92:b2:d3:b0:
96:ab:3b:2f:4b:79:a2:3e:b2:81:0d:e9:e2:a7:21:
7d:04:2f:7a:33:f2:33:ed:16:3a:f8:c5:ea:95:e3:
04:33:80:7a:9f:cb:e0:5a:49:4b:96:aa:2c:2d:e2:
48:13:08:db:b9:ef:00:14:04:ca:2b:aa:fc:c0:b1:
0f:d3:cf:29:81:44:c0:d6:d6:1e:9c:34:69:0d:5e:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:0F:DF:37:63:51:B4:5B:68:69:3E:D1:F8:66:41:DA:24:86:D8
X509v3 Authority Key Identifier:
keyid:88:96:09:28:69:C4:AE:6E:DC:BB:62:25:5E:20:55:0B:85:96:CD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJYJKGnErm7cu2IlXiBVC4WWzdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:83:22:00:66:5e:ac:85:d1:67:56:2a:97:c8:23:b0:8f:
69:e8:18:5f:59:7e:a0:5c:b6:f8:b4:66:53:ff:50:95:81:8a:
b8:b0:95:0c:38:80:0e:41:1c:0e:05:c9:26:17:d1:63:3a:52:
eb:2c:34:25:36:ef:cb:d6:6a:8f:9d:67:f2:18:0e:8c:0f:20:
e1:49:8d:c2:cd:cc:c2:30:4c:aa:3c:20:ed:73:10:29:92:a4:
1f:5d:b1:d4:f3:68:bc:fd:f8:3f:b4:24:76:49:96:7a:74:62:
bb:ef:32:7d:89:73:58:9d:84:0e:68:5d:7d:88:a5:06:5f:de:
d1:f8:41:d9:7a:31:1f:f2:16:84:18:d0:bf:e3:0d:6f:cf:6d:
2a:f2:36:f4:04:de:db:ee:d0:4a:be:b4:e7:86:79:73:4d:fc:
7b:87:16:9a:b7:19:90:70:dc:be:05:05:c8:80:1d:46:73:72:
a7:9a:fc:a3:4a:7b:19:53:08:8d:19:cc:aa:88:32:c6:f9:ae:
f2:eb:f4:36:8d:18:c7:0c:40:87:2c:ee:c2:64:bd:a8:ec:9a:
a6:8d:d9:f3:7d:24:2d:95:68:43:02:4a:44:90:d4:77:80:85:
6d:2f:0c:1b:13:e6:11:a1:b4:85:63:d3:38:a7:c7:a4:52:db:
38:3e:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:46 2025 by rpki-client