Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.mft
File: MmnMKRuiYPxxEYaE57MC9QzpYo0.mft (raw, json)
Hash identifier: n9VLqpCo34BLs/anwrN4NQRPWii58THBIFk+jG7Y2ys=
Subject key identifier: A0:25:2C:1C:56:D0:37:8D:27:88:D6:DD:88:A5:6B:F8:8D:21:D9:7F
Authority key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Certificate issuer: /CN=3269cc291ba260fc71118684e7b302f50ce9628d
Certificate serial: 079DEE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.mft
Manifest number: 08CB
Signing time: Mon 28 Mar 2022 04:00:28 +0000
Manifest this update: Mon 28 Mar 2022 04:00:28 +0000
Manifest next update: Tue 29 Mar 2022 04:00:28 +0000
Files and hashes: 1: MmnMKRuiYPxxEYaE57MC9QzpYo0.crl (hash: qZziFmUa0Te6Xe/83+dAY5i1LOGbgOVzmkTvhcu4QWA=)
2: QIDf4Iu_RdrYgyyIuj6gJ-4zRDM.roa (hash: gPzwG8Qs6NsEggCNX7yZgHvjhLMScjcNOKXedwp4M5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127790605 (0x79dee0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Validity
Not Before: Mar 28 04:00:28 2022 GMT
Not After : Mar 29 04:00:28 2022 GMT
Subject: CN=a0252c1c56d0378d2788d6dd88a56bf88d21d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:b8:8c:ab:d7:72:6f:b4:b9:91:e3:6a:d8:
77:6f:66:1d:78:9b:15:2a:4d:c6:d0:94:dc:4d:6e:
cd:93:67:45:dc:ec:86:0f:15:31:af:09:d6:8f:16:
ba:90:15:32:03:2d:59:19:19:14:b8:ce:e0:5c:67:
8c:f8:1c:70:4c:fc:28:aa:49:84:fa:c2:68:87:a8:
9f:14:b1:57:e5:c9:1f:23:92:d3:ef:1e:6f:6c:f9:
94:39:89:39:75:38:e7:0d:93:06:a9:5e:bd:66:e1:
31:f4:0c:cc:49:50:c6:bc:5b:88:0d:0d:b2:86:0e:
7e:55:97:b5:62:06:7a:04:5f:f2:0f:b2:ba:2f:59:
ab:1f:12:b2:3f:8c:c7:50:b0:a3:34:85:24:22:dc:
1f:6d:c7:a0:9f:a9:e5:6b:ec:58:48:0b:0c:81:33:
b6:33:56:e2:05:9b:8a:c0:51:f2:8a:6b:1f:82:98:
0f:6a:0c:81:35:b5:c7:a1:ad:d3:92:de:16:49:c4:
bb:1f:e2:26:8a:93:8d:02:78:58:34:39:e8:6f:0a:
00:3e:4f:7a:76:19:92:62:39:9e:cc:9c:1e:f5:9b:
63:dc:db:46:c3:ee:c1:e5:aa:58:e5:ce:44:71:ae:
05:5d:aa:13:b6:d0:d9:c6:df:1c:ed:22:10:56:27:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:25:2C:1C:56:D0:37:8D:27:88:D6:DD:88:A5:6B:F8:8D:21:D9:7F
X509v3 Authority Key Identifier:
keyid:32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:b0:5c:bf:79:4d:96:1e:c2:a3:31:ed:1f:f6:63:68:4a:
71:05:bb:f6:3d:e6:36:70:83:dd:be:1a:b4:2c:c2:37:d7:dd:
30:1f:4f:43:2a:01:6d:6c:cb:a2:52:8c:75:32:a9:e6:80:3f:
71:42:34:ef:6a:da:04:5a:ba:22:d4:df:e3:e5:8b:24:99:18:
0e:22:5f:2d:10:83:8f:c8:9b:c7:69:67:bd:ad:46:7d:b7:fc:
9e:d1:ad:61:99:b3:00:6e:cb:59:04:91:be:cc:29:e2:d6:4d:
67:95:b6:84:d3:42:c2:9d:93:bd:df:d2:d5:b7:9c:8d:ae:02:
5e:25:66:3a:6d:92:69:b8:27:55:fd:30:da:2c:28:9c:e7:0e:
5b:51:31:17:85:2a:5b:8d:e8:88:77:56:f4:d5:f5:cf:37:90:
6f:08:ef:21:89:8c:da:71:9f:3f:6c:89:fb:f4:c3:ad:f1:05:
27:ba:25:99:12:9b:cf:37:80:40:67:70:73:88:6c:e2:38:55:
0b:57:a7:46:42:06:68:10:f4:0c:ee:6d:2b:46:46:93:50:07:
2e:88:4c:86:a1:c4:b1:fb:f6:f7:6d:f8:d7:a4:b7:ce:31:26:
e0:72:ce:31:2f:67:51:17:2b:50:4e:34:0e:70:d9:48:d3:eb:
a5:1a:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:50 2025 by rpki-client