Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.mft
File: mYyRekX-DfOt1DMxy7S5UHwcv_s.mft (raw, json)
Hash identifier: L1wuBnzgAS4yxXiBQSQgqyLg937AALkXU/Mq3uA77co=
Subject key identifier: 21:52:DC:4F:4D:58:63:BD:23:F4:7E:57:7E:4A:2E:81:D6:21:4D:63
Authority key identifier: 99:8C:91:7A:45:FE:0D:F3:AD:D4:33:31:CB:B4:B9:50:7C:1C:BF:FB
Certificate issuer: /CN=998c917a45fe0df3add43331cbb4b9507c1cbffb
Certificate serial: 0197416A995D990D3B31C9733582C1F6F172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYyRekX-DfOt1DMxy7S5UHwcv_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.mft
Manifest number: 01
Signing time: Thu 05 Jun 2025 18:46:34 +0000
Manifest this update: Thu 05 Jun 2025 18:46:34 +0000
Manifest next update: Fri 06 Jun 2025 18:46:34 +0000
Files and hashes: 1: mYyRekX-DfOt1DMxy7S5UHwcv_s.crl (hash: X6xkQSjmn0m6IUld5yIy/6IW5Qein7Z4mGFjWItQmzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:6a:99:5d:99:0d:3b:31:c9:73:35:82:c1:f6:f1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998c917a45fe0df3add43331cbb4b9507c1cbffb
Validity
Not Before: Jun 5 18:46:34 2025 GMT
Not After : Jun 6 18:46:34 2025 GMT
Subject: CN=2152dc4f4d5863bd23f47e577e4a2e81d6214d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:a5:59:28:79:9e:98:9b:67:60:3d:f0:2c:
7d:64:d4:bf:a4:0a:94:c5:74:03:28:b6:df:5c:d8:
48:4b:0a:38:b4:95:51:b7:ac:4b:f0:d2:82:e8:ab:
8d:68:2c:ea:43:ea:da:7b:34:ad:0c:b8:c1:24:72:
cf:af:bf:06:c7:1e:8f:88:a0:ec:ff:41:ff:06:f2:
81:d7:53:6c:cd:00:18:6b:41:e3:2a:c4:9a:03:ee:
59:df:da:c8:c3:9d:59:55:52:2c:d7:99:a6:c8:71:
dd:b9:6f:e3:fe:72:f4:c1:c2:f6:16:4b:a3:c1:96:
a4:24:85:77:ec:5e:d8:79:dc:06:13:f4:7e:cc:9d:
a7:1b:dc:3c:b3:2c:23:25:7d:7f:9c:0d:b7:76:42:
73:8a:a6:3a:9c:0d:b9:57:fa:44:bc:6f:84:e9:f8:
dc:77:92:60:47:95:2c:23:1a:6f:df:9c:ca:49:30:
cb:b5:1a:50:75:88:dd:c4:87:fa:c2:b6:ce:c9:10:
fe:a3:13:b3:71:94:60:63:e0:a2:24:d7:db:31:a2:
5d:18:a9:7a:cf:dc:d6:af:3a:37:6e:c3:4b:cc:2b:
96:66:6b:96:bf:0e:3b:c0:69:bd:d0:d6:1b:6d:0a:
4b:d3:c6:ab:dd:2a:6d:15:b8:c0:92:b8:eb:77:eb:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:DC:4F:4D:58:63:BD:23:F4:7E:57:7E:4A:2E:81:D6:21:4D:63
X509v3 Authority Key Identifier:
keyid:99:8C:91:7A:45:FE:0D:F3:AD:D4:33:31:CB:B4:B9:50:7C:1C:BF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYyRekX-DfOt1DMxy7S5UHwcv_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4f73bf-b18b-47ed-b571-58d0029af976/1/mYyRekX-DfOt1DMxy7S5UHwcv_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:5c:57:41:0d:c5:84:c6:5c:f1:05:2d:2c:d7:a2:00:0d:
70:cf:d3:48:67:d8:08:c0:3e:2c:29:03:17:45:aa:b4:ff:fe:
23:46:bf:db:03:06:86:b3:82:80:c2:ac:9f:9f:5b:aa:9c:1d:
a7:2b:1c:b6:d8:c2:d3:ff:e5:c3:f9:97:13:7c:46:91:9d:ee:
fb:0c:53:ff:50:16:c7:33:e3:90:e9:d5:bb:59:5c:91:6d:bd:
d7:ea:dd:3a:1a:ac:af:d9:71:bc:54:49:1c:38:2a:84:0a:cf:
90:79:8c:55:f9:3d:6a:01:e9:43:fe:35:11:4c:14:56:f5:10:
22:fb:f4:14:0d:b7:90:47:29:cd:4d:f8:a5:94:e3:e1:29:e7:
c9:b1:2a:61:0b:cc:f2:bb:e2:ea:15:04:51:1e:b9:78:e8:cf:
1f:7f:ba:40:67:7c:78:0d:fa:ca:a0:55:2d:84:1f:f3:62:8b:
8c:1f:6a:ae:5f:07:c2:8f:c1:ff:81:8c:22:f7:05:64:5d:cb:
89:d3:ca:fc:d5:7f:0e:a7:44:7d:85:86:81:9c:4f:aa:0b:75:
e8:a3:4b:54:a3:da:12:2d:17:ff:a2:d8:f4:56:ec:74:2f:38:
76:59:1c:cd:25:df:6c:44:f3:92:40:fa:c7:01:e2:e0:2a:23:
50:54:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:49:41 2025 by rpki-client