Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
File: 0PncQczPGwp4tNaiRk59u8YhwCE.mft (raw, json)
Hash identifier: hq0reG9S0U71Q74PBUg5RY5viRE+ohMTLmkMOg1FsFU=
Subject key identifier: 82:74:B6:E8:F2:51:60:78:0C:67:92:14:22:C3:57:B3:17:C0:2B:F2
Authority key identifier: D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
Certificate issuer: /CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Certificate serial: 019758002DD530AB6439A809DEEA146323BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
Manifest number: 0518
Signing time: Tue 10 Jun 2025 04:01:36 +0000
Manifest this update: Tue 10 Jun 2025 04:01:36 +0000
Manifest next update: Wed 11 Jun 2025 04:01:36 +0000
Files and hashes: 1: 0PncQczPGwp4tNaiRk59u8YhwCE.crl (hash: Ydpd54G/z1M6i8U9/mIPVSe2BJB8qiK5fSs4x3GGh0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:2d:d5:30:ab:64:39:a8:09:de:ea:14:63:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Validity
Not Before: Jun 10 04:01:36 2025 GMT
Not After : Jun 11 04:01:36 2025 GMT
Subject: CN=8274b6e8f25160780c67921422c357b317c02bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:d4:10:9e:11:e5:05:55:81:89:94:d2:4a:
08:21:8e:38:1e:3c:82:80:12:d1:08:19:db:1b:eb:
7f:25:88:82:4b:b4:17:82:6d:76:13:cf:3c:3a:bf:
47:ce:18:93:b1:25:09:9f:84:93:84:8f:20:e3:da:
50:86:37:d2:74:00:87:aa:45:9d:62:a9:53:43:e5:
47:fa:1a:26:88:a6:3e:76:4b:1b:c5:3e:e8:fd:08:
52:10:16:89:a0:c7:0d:e6:56:ae:c5:49:e0:fb:5f:
37:ad:8b:74:e4:d5:40:c7:3f:29:7c:57:6a:79:15:
c6:cd:29:fe:56:29:c9:81:0c:bb:0a:44:23:99:2c:
d8:62:85:31:b8:6b:48:84:bd:f1:60:b3:6a:76:12:
93:49:6c:27:c8:f5:85:db:8c:ab:9f:7c:65:7c:d0:
58:0f:74:d0:bc:45:0b:78:ec:4f:0e:79:b0:12:0f:
c9:37:38:85:e8:58:71:90:8f:57:ed:d3:8e:ac:83:
64:53:fd:18:df:9d:59:da:27:54:70:e1:66:1e:35:
74:a8:0e:7b:35:90:a0:de:6f:d4:68:9f:95:09:06:
14:8b:03:0a:83:7a:17:db:53:ca:d5:6c:31:b7:9c:
d7:b5:11:da:b9:28:f6:e7:ff:43:22:2e:57:d9:34:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:B6:E8:F2:51:60:78:0C:67:92:14:22:C3:57:B3:17:C0:2B:F2
X509v3 Authority Key Identifier:
keyid:D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b2:f2:ee:28:64:88:25:fa:96:37:f1:8e:9e:e3:23:d9:f6:
53:b7:d4:63:b3:52:3f:2b:b4:7c:c3:19:a3:03:cf:77:fa:10:
92:8c:8f:62:c7:bc:d1:67:e5:c3:cc:04:a8:4c:38:b8:41:68:
15:8e:71:32:a1:c5:1e:2e:c3:ec:3c:a6:08:de:7b:07:4b:05:
0f:4f:ca:34:a7:33:3e:f7:8b:af:ce:19:88:19:fe:c4:38:bb:
04:d6:c2:89:d4:9f:70:2f:52:b1:92:f2:db:67:d9:51:16:b8:
08:f5:0d:88:57:39:4b:49:d4:df:85:44:c5:84:95:65:c9:19:
f4:b3:88:68:45:7d:33:7c:de:dd:d8:0a:87:48:aa:18:ec:cf:
e9:c8:70:be:1e:12:c4:2b:6e:cf:99:50:cb:84:7c:ec:b5:68:
25:26:98:34:a1:7a:66:76:08:8c:e1:cf:95:5a:58:c6:1f:63:
24:8c:d6:34:20:93:3a:3e:33:d0:29:db:7b:06:b8:f5:9c:25:
46:90:57:e6:40:fa:d3:83:3c:8c:82:f5:23:ee:96:65:13:d4:
04:69:c3:3e:19:37:8c:10:b9:de:e5:b3:10:3d:1d:81:1b:dd:
71:dc:1f:be:43:73:d9:18:9c:ec:72:89:79:00:7c:62:d2:21:
14:d7:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:44:30 2025 by rpki-client