Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9fa8a-7d99-48bb-8daf-4659bed944dd/1/unu30OqUsRfnn1IlHeufXgOImik.mft
File: unu30OqUsRfnn1IlHeufXgOImik.mft (raw, json)
Hash identifier: Sl5u5wQFjxMXJHT9rOPoMa1B5aMgHC/5zkN0Ck8uJLg=
Subject key identifier: EE:2A:0C:CC:A7:5A:B0:08:5B:90:3D:C2:35:CC:E6:3A:5C:33:21:BC
Authority key identifier: BA:7B:B7:D0:EA:94:B1:17:E7:9F:52:25:1D:EB:9F:5E:03:88:9A:29
Certificate issuer: /CN=ba7bb7d0ea94b117e79f52251deb9f5e03889a29
Certificate serial: 0197334EE72771B96E299444E3FE5958A3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unu30OqUsRfnn1IlHeufXgOImik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9fa8a-7d99-48bb-8daf-4659bed944dd/1/unu30OqUsRfnn1IlHeufXgOImik.mft
Manifest number: 3A
Signing time: Tue 03 Jun 2025 01:01:38 +0000
Manifest this update: Tue 03 Jun 2025 01:01:38 +0000
Manifest next update: Wed 04 Jun 2025 01:01:38 +0000
Files and hashes: 1: unu30OqUsRfnn1IlHeufXgOImik.crl (hash: lE2XK6RbHuJ4bO/1fAcND8M0I17N6xlUqxo5oeZZbDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:33:4e:e7:27:71:b9:6e:29:94:44:e3:fe:59:58:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7bb7d0ea94b117e79f52251deb9f5e03889a29
Validity
Not Before: Jun 3 01:01:38 2025 GMT
Not After : Jun 4 01:01:38 2025 GMT
Subject: CN=ee2a0ccca75ab0085b903dc235cce63a5c3321bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:69:ff:07:de:bb:19:74:0d:ed:f1:f8:5a:
36:8a:fd:a8:fe:d5:df:56:13:c0:f1:d6:a1:c7:26:
28:e5:6e:f4:04:2a:ea:e4:9d:87:67:76:ee:5c:61:
f8:17:e5:b6:77:0c:a8:60:f2:c2:67:19:8c:92:89:
f7:72:1e:30:32:df:f5:98:34:d0:87:31:0e:34:61:
67:a4:fb:69:0b:e2:bf:3d:52:e0:2d:8b:f7:a6:cc:
9a:dd:9d:2b:4f:5c:7d:05:63:98:bf:47:fc:b1:fa:
f3:1d:6b:cc:d7:78:65:5c:20:26:e2:0d:c9:29:70:
d0:89:40:b5:b6:40:1f:a4:22:15:1a:c4:b9:89:a1:
5a:cd:45:49:7f:a7:d4:7a:6b:ee:0e:16:e2:3e:5c:
28:2a:43:83:c0:54:1f:e5:a0:37:4e:3c:f5:90:70:
42:33:3e:72:6e:38:e8:38:2c:51:ee:e9:84:b6:b7:
6f:3e:03:a8:8a:f9:15:45:a4:68:ae:6d:b3:46:4d:
ce:60:3b:f3:02:85:e5:88:9c:25:37:fe:02:08:0e:
02:3e:4b:ef:ed:29:5a:e6:dd:fd:4c:ee:18:06:e8:
fb:14:7c:3b:2b:bc:22:d6:bf:d6:29:10:32:16:e3:
7a:38:0f:d6:21:92:2d:11:c7:3a:f1:49:f6:50:3d:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2A:0C:CC:A7:5A:B0:08:5B:90:3D:C2:35:CC:E6:3A:5C:33:21:BC
X509v3 Authority Key Identifier:
keyid:BA:7B:B7:D0:EA:94:B1:17:E7:9F:52:25:1D:EB:9F:5E:03:88:9A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unu30OqUsRfnn1IlHeufXgOImik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9fa8a-7d99-48bb-8daf-4659bed944dd/1/unu30OqUsRfnn1IlHeufXgOImik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9fa8a-7d99-48bb-8daf-4659bed944dd/1/unu30OqUsRfnn1IlHeufXgOImik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7b:8b:9e:7e:88:ce:bc:79:07:38:d7:de:e6:9b:bc:5e:ba:
25:0f:b7:54:cc:34:9d:9b:5c:09:cb:87:ff:34:bd:b0:dc:2a:
41:d5:06:7d:c1:db:2d:15:1f:2f:ae:11:df:c9:00:8e:7c:3d:
c1:11:7c:eb:68:82:89:5c:58:38:8e:0f:92:fc:34:02:be:8f:
7b:0b:f2:67:b3:7e:e2:a2:23:ce:5a:5f:40:6a:ae:09:97:2f:
09:57:26:2d:4b:2b:70:ab:a3:84:13:f6:01:54:9e:6a:12:91:
77:80:4a:e9:76:ac:89:0d:44:df:dd:1d:c0:59:b6:26:53:66:
0d:54:9b:99:b7:a2:c6:46:8c:e5:6c:de:3d:6f:78:83:05:17:
b9:37:c0:82:49:11:a0:46:34:f2:a5:f7:e3:24:63:d1:50:2d:
ad:62:90:50:cd:59:bd:82:21:68:d6:00:d2:f2:37:4f:04:a9:
2b:53:e9:69:f8:e9:06:d9:db:c4:96:2a:ba:8d:ad:d5:80:81:
72:e1:c8:73:3c:c5:62:21:c3:d4:4d:ca:1a:8c:4e:d5:1c:73:
88:61:2e:9a:02:cc:d4:82:0c:61:b6:4c:21:03:66:53:0b:27:
1a:bd:3a:3a:15:88:e8:ef:6a:1a:fb:04:64:5e:7e:89:c0:dd:
8e:05:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:11:06 2025 by rpki-client