Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File: G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier: QQUrb3pyNnw4VVmyfhn9ZLi0A8Itodv5gjHYIBFCBzE=
Subject key identifier: 69:70:C5:1D:69:54:3B:02:5A:2F:10:1C:C6:FA:D4:6E:FB:24:6C:2A
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 0197586D6ADC6D252062D440A45499D2C113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number: 158F
Signing time: Tue 10 Jun 2025 06:00:55 +0000
Manifest this update: Tue 10 Jun 2025 06:00:55 +0000
Manifest next update: Wed 11 Jun 2025 06:00:55 +0000
Files and hashes: 1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: e5NMcJa2BAXr1F0LjtiPmjA7G9iEq0g5biRJ9BdPhhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:6a:dc:6d:25:20:62:d4:40:a4:54:99:d2:c1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jun 10 06:00:55 2025 GMT
Not After : Jun 11 06:00:55 2025 GMT
Subject: CN=6970c51d69543b025a2f101cc6fad46efb246c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:4e:ad:e6:11:d1:ef:e0:2e:96:40:e3:97:
47:1c:fb:84:fd:70:13:9d:c2:92:c5:a5:0c:1e:2e:
c6:12:29:3d:40:28:ee:0c:e7:c9:5f:7c:c9:c2:d1:
26:0c:45:38:fd:07:f9:8e:54:c9:8e:0d:c0:ee:a6:
ef:cf:38:df:03:bf:8f:01:3f:3d:bd:12:fc:30:86:
49:29:3f:00:e0:87:53:7b:cc:f0:f7:72:23:24:7a:
06:f8:e3:48:7b:e7:d0:b6:cd:77:ed:97:e2:6b:69:
6e:f3:28:db:92:60:0b:3d:94:1f:e0:03:ec:05:43:
f1:6b:1f:1e:b2:f1:ac:ce:31:41:25:43:6b:44:8b:
43:3e:e2:e8:33:4e:46:f8:20:a3:e4:c5:e4:9b:19:
f5:7c:54:e8:44:dd:21:30:7d:17:8e:8e:ff:ea:ff:
94:26:44:8e:02:cd:fe:67:95:24:f8:15:ae:08:84:
45:cc:cc:7e:e7:7b:08:a9:d1:0b:cd:57:ed:7b:2d:
d6:9f:18:e5:d2:a6:16:36:3e:5d:b1:65:7f:1b:e2:
42:e9:4b:8e:0b:da:33:e8:01:e6:74:67:d4:1e:57:
a7:cf:a8:4d:4e:4c:d2:74:5a:77:97:c3:cb:75:4c:
68:6f:6f:c3:6e:20:5d:32:6f:a9:0c:b7:d4:d8:15:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:C5:1D:69:54:3B:02:5A:2F:10:1C:C6:FA:D4:6E:FB:24:6C:2A
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7c:6f:e7:da:ce:5b:b4:9c:74:bb:5a:a9:ba:b9:0b:f0:d3:
60:d6:bb:f5:f9:e4:5a:0e:1d:7e:a7:5d:16:3a:84:e1:d1:61:
b5:d8:13:49:f4:1f:1a:70:75:36:2b:04:51:36:b1:cb:4d:71:
83:c6:81:d3:85:f5:80:d0:54:a9:72:b7:15:13:13:86:b5:06:
ea:e9:af:b3:5f:64:47:98:4d:14:6c:f5:3e:10:be:cc:9f:7f:
9e:5d:7f:ac:7b:98:eb:1c:8d:d5:44:ae:8a:29:56:97:a5:9a:
49:fe:8e:cd:13:a2:ef:b4:9c:93:76:f0:b2:c4:17:38:c7:23:
aa:c1:07:f7:d7:98:c0:ec:dd:48:ff:4b:c7:15:08:46:8e:23:
0b:7a:00:e4:de:ec:e0:e0:dc:89:09:35:4b:ca:7e:d9:e7:4e:
f5:eb:44:95:28:aa:f8:61:29:84:bc:90:bd:69:7e:8c:90:e3:
51:7f:4a:12:2c:60:35:da:fb:3f:3d:6b:ee:2a:16:c5:af:ed:
5e:7c:48:04:9c:b8:ed:8a:42:3b:34:57:36:3f:b5:a4:77:e0:
07:60:0b:b3:ab:af:4b:4e:79:0f:c7:ed:db:e9:24:62:32:12:
68:2f:fb:5e:7e:4f:7e:a1:75:ee:e7:2c:1c:ab:8e:4e:b9:06:
f5:28:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:40:16 2025 by rpki-client