Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
File: MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft (raw, json)
Hash identifier: 1pf6ZGIYYsGlA8+rprx9sbL0fz3zleHz34BqSGh2kbc=
Subject key identifier: 35:3A:24:96:EC:44:16:62:A7:31:0D:10:E3:FC:68:25:46:0E:6F:6A
Authority key identifier: 32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
Certificate issuer: /CN=32a3b1f1b591268697c1044fb97584539aa78685
Certificate serial: 019660CDF60FA683F6C08BA7BFEB35D31066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
Manifest number: 0FB8
Signing time: Wed 23 Apr 2025 04:00:32 +0000
Manifest this update: Wed 23 Apr 2025 04:00:32 +0000
Manifest next update: Thu 24 Apr 2025 04:00:32 +0000
Files and hashes: 1: MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl (hash: 78gFSj3Wiz6JImaT7lhQYeWzAPx9tH7hLdiGWuW33Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:cd:f6:0f:a6:83:f6:c0:8b:a7:bf:eb:35:d3:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a3b1f1b591268697c1044fb97584539aa78685
Validity
Not Before: Apr 23 04:00:32 2025 GMT
Not After : Apr 24 04:00:32 2025 GMT
Subject: CN=353a2496ec441662a7310d10e3fc6825460e6f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:49:5a:9c:e7:97:ce:49:d3:6d:b8:5e:6b:
f8:59:88:df:3f:15:ca:57:dd:e1:50:c5:4a:d2:14:
02:ee:0b:89:18:86:40:48:63:0c:f7:1c:cb:82:a7:
f4:0a:31:b9:da:09:d9:71:90:a6:71:e6:4a:ad:b8:
35:8f:47:d5:08:69:3c:ab:49:8a:6b:56:bc:d1:39:
31:55:85:a4:5d:67:a4:81:3c:fc:3b:ec:62:b4:53:
c6:ab:17:b8:99:ac:5f:59:2f:6f:a8:d9:95:c6:92:
77:b1:5b:e0:04:fd:80:8b:5f:84:40:30:51:6e:41:
ad:c6:1d:95:a3:d9:7e:29:e6:6e:49:ca:8c:c4:41:
ee:93:38:f0:4d:19:96:ee:b2:d9:d4:e1:7a:b8:2b:
24:72:f5:2e:26:03:14:04:35:cc:e3:c7:9f:04:00:
0a:8d:8a:df:ed:6a:4d:7d:9a:ca:72:2f:06:86:cd:
37:37:9f:5f:e0:29:7f:3c:4a:dc:2b:44:21:f2:95:
64:34:2b:de:39:0e:c0:75:5a:fb:1b:d7:14:ab:aa:
e8:bd:af:e7:1c:91:c6:8b:ca:b4:57:ca:02:34:86:
eb:57:11:d6:26:57:48:d2:00:8b:ba:7b:9f:f9:ce:
c1:11:0b:fa:d8:c3:4b:ea:24:37:ca:94:27:fd:50:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:24:96:EC:44:16:62:A7:31:0D:10:E3:FC:68:25:46:0E:6F:6A
X509v3 Authority Key Identifier:
keyid:32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:07:65:35:37:16:f5:7f:7a:ef:62:5f:a7:43:5c:8a:11:0f:
93:f3:6d:95:af:2f:6a:d4:fd:dc:fa:a6:70:a2:52:0e:06:a0:
fd:b5:b5:f9:15:e4:6f:67:cf:33:54:50:cc:f2:df:18:1d:9d:
6f:2f:4e:d8:f1:9c:da:d9:f7:9f:e5:60:f5:1c:f4:5a:98:b0:
e5:4d:a8:47:83:e2:d9:90:62:0d:30:28:55:d9:ef:87:8d:1a:
2b:f6:1c:e4:b3:96:d0:9d:7d:d4:3f:8b:2e:b8:47:24:26:73:
36:8e:20:f3:79:76:0d:8f:e0:e1:b7:23:be:54:26:a2:b6:94:
21:27:e7:35:ae:e4:a8:46:92:96:fc:3e:b1:64:91:1c:a4:cc:
cd:da:a8:bb:fe:cd:f2:01:72:91:31:7b:66:ad:0b:22:9f:5a:
a8:f3:c3:fa:83:73:a9:b4:98:39:70:a5:1c:f2:b0:f7:22:68:
9f:79:56:55:9a:52:3b:dc:70:e9:6c:66:60:1d:fb:16:ec:4f:
01:3c:e1:2d:fc:70:67:2e:34:ab:9d:1f:ce:15:9e:91:a1:cc:
ac:2f:03:e8:b8:ef:4c:ab:72:b5:d8:65:35:e2:5f:76:52:b7:
14:5c:de:2d:c5:bf:2b:24:7e:7e:a5:2c:5d:b4:95:7e:4b:63:
b4:f7:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:20 2025 by rpki-client