Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9781cf-e965-4743-bf40-83ab410f1854/1/9HyBuZaN2HTadQIZl7SSyxFaHgA.mft
File: 9HyBuZaN2HTadQIZl7SSyxFaHgA.mft (raw, json)
Hash identifier: EuOStRIv5Eys7ZLzuR4n+cPPJ3cmzLz6T78GoQklZY0=
Subject key identifier: 1E:BA:9F:88:0F:3C:2B:B1:6B:3F:3F:0C:D5:56:80:EC:20:1C:A4:8B
Authority key identifier: F4:7C:81:B9:96:8D:D8:74:DA:75:02:19:97:B4:92:CB:11:5A:1E:00
Certificate issuer: /CN=f47c81b9968dd874da75021997b492cb115a1e00
Certificate serial: 0188E25C3F5D3FBA4759910EFF37AE7C3DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9HyBuZaN2HTadQIZl7SSyxFaHgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9781cf-e965-4743-bf40-83ab410f1854/1/9HyBuZaN2HTadQIZl7SSyxFaHgA.mft
Manifest number: 01
Signing time: Thu 22 Jun 2023 09:07:56 +0000
Manifest this update: Thu 22 Jun 2023 09:07:56 +0000
Manifest next update: Fri 23 Jun 2023 09:07:56 +0000
Files and hashes: 1: 9HyBuZaN2HTadQIZl7SSyxFaHgA.crl (hash: cIur7GJGUuAVPHFWJknZ7d/lFxskf+fyTFiRi3KlqMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:5c:3f:5d:3f:ba:47:59:91:0e:ff:37:ae:7c:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47c81b9968dd874da75021997b492cb115a1e00
Validity
Not Before: Jun 22 09:07:56 2023 GMT
Not After : Jun 23 09:07:56 2023 GMT
Subject: CN=1eba9f880f3c2bb16b3f3f0cd55680ec201ca48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:f3:8d:4f:41:09:bd:2f:a4:c4:54:39:93:
e6:b3:ac:47:b9:42:56:e7:2d:91:ae:b0:57:6b:87:
dd:c7:82:ff:9e:6c:23:8e:2a:bd:b4:de:04:e5:9a:
3e:9a:c2:b5:a4:9e:ba:ae:db:2a:dc:a0:b1:28:dd:
36:45:dc:c4:5f:a1:39:62:4b:79:63:34:32:81:19:
90:d4:73:ee:b4:76:e0:45:6d:35:df:18:87:19:f9:
12:b2:bd:7a:09:b0:91:f7:bc:c8:f4:8e:3f:a4:20:
de:6b:ed:96:2e:3f:1d:5b:f6:4b:e2:63:94:d9:bd:
d3:d9:ff:40:13:e4:d9:22:6d:6b:37:e5:c6:db:7f:
be:a3:2c:7b:8d:24:00:e0:fa:59:36:32:14:09:b3:
dc:52:32:d6:20:b7:62:03:d9:1d:2b:61:7d:12:33:
df:8f:01:33:c4:94:b0:8d:db:49:92:10:55:28:b4:
95:50:b5:99:97:75:35:ca:6c:dd:e2:b3:4d:b5:ea:
cb:c1:27:3b:a5:16:05:92:04:1c:01:b3:ce:83:10:
4a:8a:54:6a:1f:2b:ae:94:b9:8a:f1:f6:97:2e:39:
a3:da:2d:f7:4c:af:94:71:c6:6d:cd:52:36:0a:8b:
1a:82:d5:18:27:5a:46:06:79:ab:5a:e1:70:d9:a8:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:9F:88:0F:3C:2B:B1:6B:3F:3F:0C:D5:56:80:EC:20:1C:A4:8B
X509v3 Authority Key Identifier:
keyid:F4:7C:81:B9:96:8D:D8:74:DA:75:02:19:97:B4:92:CB:11:5A:1E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9HyBuZaN2HTadQIZl7SSyxFaHgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9781cf-e965-4743-bf40-83ab410f1854/1/9HyBuZaN2HTadQIZl7SSyxFaHgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9781cf-e965-4743-bf40-83ab410f1854/1/9HyBuZaN2HTadQIZl7SSyxFaHgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:10:09:a3:18:e3:76:19:ad:d5:b1:6d:ec:97:d7:23:25:
dc:f4:89:2c:1c:ca:f2:55:11:7c:21:4b:81:c1:2b:5a:17:35:
eb:f9:a2:d6:53:57:6a:8c:89:a1:5b:61:29:82:65:9a:5f:26:
18:42:86:54:18:d6:57:b9:b3:a0:45:c7:69:b8:35:4b:dc:f8:
51:49:40:9e:d7:f4:9a:2b:f3:9f:80:a8:5a:98:bf:a8:46:20:
e5:2b:e2:f0:82:df:32:09:32:a7:b3:31:03:7d:ab:2d:ab:73:
bd:49:62:20:20:35:99:0e:78:c8:3f:60:4a:62:df:77:fe:a6:
ba:2b:5d:19:30:f2:6c:35:42:24:ef:49:95:8c:f7:9f:f9:d4:
ac:95:1d:61:d3:75:96:a1:b7:03:c0:5a:03:0d:97:6b:c5:a9:
55:02:47:87:cd:90:c7:0b:63:83:62:41:76:33:e6:5b:26:38:
82:3b:43:cf:ac:8e:90:65:d5:27:2e:44:d9:1c:46:f9:94:7d:
ca:3e:04:3b:1b:46:03:9b:83:56:47:2c:5c:08:da:5b:70:4d:
95:83:ab:d8:87:da:1e:85:d5:9e:01:3a:88:0a:59:20:94:83:
02:89:44:ec:1a:04:6d:3a:8e:b6:36:1e:3d:e0:1e:ac:d5:95:
c7:7e:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:57 2025 by rpki-client