Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: vqO9wk/tCsDfYEDOdK4YOXqsp/txv6mpet27RhK8yOk=
Subject key identifier: CB:A3:04:34:47:79:EE:4C:11:AF:AA:0F:50:23:0D:FE:27:9F:B3:61
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 019A006C3846413A5FF085A2096FB1D2A7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0E1D
Signing time: Mon 20 Oct 2025 07:01:23 +0000
Manifest this update: Mon 20 Oct 2025 07:01:23 +0000
Manifest next update: Tue 21 Oct 2025 07:01:23 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: CquCbZfI3k1o5gWq5k56LiYUcZrj4H9hJpqftgKjw1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:38:46:41:3a:5f:f0:85:a2:09:6f:b1:d2:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Oct 20 07:01:23 2025 GMT
Not After : Oct 21 07:01:23 2025 GMT
Subject: CN=cba304344779ee4c11afaa0f50230dfe279fb361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:14:b6:c1:54:ed:bf:2f:d1:23:f5:c7:83:
94:24:b1:26:19:c9:ff:bf:9a:b5:de:57:96:54:19:
5a:16:aa:20:19:e8:94:5d:7d:7b:5d:3b:31:73:d8:
be:5f:c6:fa:e7:9b:1e:ec:54:f4:c4:be:8f:12:75:
8b:c5:86:39:d5:2a:57:bc:60:0d:e9:41:d0:91:5d:
b2:2c:e5:49:eb:2e:16:8f:d7:36:4b:5c:a1:a8:de:
39:12:53:bb:9d:24:d1:5b:0e:22:a1:c8:4c:a7:84:
4d:9b:04:7a:9a:67:af:e7:a6:76:3a:38:db:08:12:
55:65:00:07:bc:1c:06:98:72:b3:5d:2f:b0:db:4c:
d3:ac:79:61:e3:ff:67:45:82:e6:98:62:0d:36:a4:
ce:c3:b3:1c:63:e2:57:7e:19:9d:00:bc:db:39:a4:
7e:22:65:1f:ca:a2:3f:cd:85:06:5a:08:0b:cc:ea:
32:52:c4:2a:72:ef:f6:7b:7c:8c:3a:f3:e1:56:45:
18:64:08:34:e4:a1:f8:b3:46:5e:d3:eb:f3:6f:83:
d9:4c:08:7a:46:97:6a:2a:8c:78:bb:3e:70:14:59:
b2:3b:53:25:d7:64:a8:cb:7e:e4:3a:a1:e5:8f:61:
b9:b6:72:99:08:17:cf:fc:b7:91:44:b1:c0:d1:7d:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:04:34:47:79:EE:4C:11:AF:AA:0F:50:23:0D:FE:27:9F:B3:61
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:36:47:8e:d2:53:04:bf:a5:fd:ef:e8:ff:83:d1:e5:99:
a5:c0:a6:45:a2:8e:1d:22:c7:f1:fa:22:a0:a3:a2:e0:66:33:
e5:69:44:64:cd:e8:9d:c2:a5:28:d0:2b:6e:40:db:96:d8:68:
d7:30:af:7c:1b:38:ce:29:24:78:98:ee:ca:09:83:80:4a:1c:
f3:5c:b9:f9:f7:e9:00:4e:be:2d:93:b2:6a:61:ad:37:9d:27:
f8:d4:4e:c7:66:95:29:78:a6:8b:1f:bd:bd:cf:f3:bf:fc:0b:
db:8a:dd:56:ef:6c:dc:7e:41:b0:dd:c9:46:73:2b:10:aa:a4:
63:8f:bb:9a:3d:1c:1c:82:ea:e2:a9:b4:e8:7f:02:8a:d1:d0:
2f:66:88:a8:0c:e2:e5:7b:d0:0c:86:fa:4f:20:93:a5:97:ce:
c8:c3:f2:eb:b3:08:0c:77:d2:ce:37:5d:de:f8:b7:cf:24:04:
7b:1e:a7:09:6f:3c:75:c4:51:31:e2:19:53:5b:6c:a8:fe:d6:
8a:cb:b0:69:51:f8:1d:e3:d7:eb:9e:18:fd:d9:67:0c:10:b8:
3a:ee:e7:fd:54:9a:e4:ca:98:f9:69:2d:fe:2a:8a:b2:40:ac:
d8:d6:07:61:2d:8c:86:e0:4a:6d:19:69:bf:1a:dd:18:80:fb:
d4:07:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:46 2025 by rpki-client