Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File: PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier: oz1eyLJxIQDJkvOurKMMccxWyoHwGBbjx0uKWGgFU20=
Subject key identifier: 68:1C:17:05:12:CC:72:82:3B:A4:C5:1C:CE:5D:90:D6:5B:63:3F:52
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer: /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial: 019881D486C32ACAEF1AFC780710444AF2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number: 0CAC
Signing time: Thu 07 Aug 2025 00:00:45 +0000
Manifest this update: Thu 07 Aug 2025 00:00:45 +0000
Manifest next update: Fri 08 Aug 2025 00:00:45 +0000
Files and hashes: 1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: mVAiYAh3Yz7Xp+Tm9qL/KnCZsSSSacCOpgALyGMGgVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:86:c3:2a:ca:ef:1a:fc:78:07:10:44:4a:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Validity
Not Before: Aug 7 00:00:45 2025 GMT
Not After : Aug 8 00:00:45 2025 GMT
Subject: CN=681c170512cc72823ba4c51cce5d90d65b633f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:a5:6c:66:12:29:07:56:64:81:83:57:ce:
5c:81:a3:b9:1a:51:66:a6:c0:16:63:f3:46:8a:fc:
b0:38:ed:43:d9:8f:99:0e:80:a7:49:ab:41:b8:09:
f1:20:13:9f:d6:49:3f:ea:43:26:9c:7e:98:31:e1:
1b:bf:e5:86:0e:2e:1a:8a:87:cc:af:f4:f3:73:40:
f4:18:91:77:f4:28:ef:f1:12:f1:04:a8:fa:3c:39:
80:1a:08:f6:9d:fa:71:b5:9b:97:6e:a3:de:9b:e5:
41:89:46:ca:1b:a5:b9:76:46:56:ba:cb:67:e0:ca:
18:f4:b1:8a:70:44:c9:b6:76:4a:dc:99:cc:62:55:
8e:ac:07:ad:d9:13:c5:9b:6f:55:e1:78:ec:9a:e0:
32:fe:45:4c:b6:2e:b9:65:1e:5b:71:71:35:15:e4:
51:40:b1:29:5f:77:c9:7a:27:08:36:59:b3:3c:ec:
77:11:2d:c9:28:36:cf:c5:e3:2a:03:f9:12:16:86:
65:cd:67:6c:a3:78:11:d8:27:b0:dc:5b:6d:a2:d2:
74:27:20:a8:8f:1a:78:8f:31:f3:d1:af:7f:e7:98:
39:16:46:82:55:77:4f:07:e1:6a:31:4f:bf:96:3a:
1e:37:9f:6e:7d:e5:9f:59:30:14:d2:11:88:aa:95:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:17:05:12:CC:72:82:3B:A4:C5:1C:CE:5D:90:D6:5B:63:3F:52
X509v3 Authority Key Identifier:
keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:d8:a2:e1:e8:b4:7c:48:db:11:cf:b8:af:3b:f7:54:e2:
40:0c:42:be:1a:9c:5a:36:d1:df:e6:f3:89:51:66:cf:55:64:
fb:b1:69:c7:5d:62:58:f1:a7:3a:28:f4:4e:b5:10:65:6d:29:
56:2d:ed:d3:1c:f0:aa:50:26:ef:57:e3:56:b9:f8:e0:fd:24:
6b:b3:ac:0d:ac:5a:cf:66:25:dd:e4:60:69:6b:22:05:ae:c2:
71:c1:b9:ba:c1:53:4a:7e:5a:9d:55:f8:d5:b2:0e:73:c3:02:
f2:ec:9f:bd:30:2d:db:4d:63:49:a0:30:b9:51:0e:d1:3b:50:
f6:42:31:cd:a0:70:51:20:b6:39:28:f8:7a:4e:ad:cf:d4:6b:
ef:ec:e6:98:b6:68:39:47:75:96:f6:aa:ff:3e:82:00:72:4b:
30:06:3a:e2:2a:02:ab:81:55:37:51:15:25:ef:a4:b8:0f:f1:
cb:9b:dd:ee:83:33:cc:bb:7e:c3:13:8d:bd:9a:3b:d1:bf:da:
9f:93:a9:8a:37:52:2a:14:cd:5e:35:82:8a:9f:76:42:83:b7:
56:e4:3f:8b:4f:47:c6:61:8b:d2:00:00:57:37:dd:21:9a:02:
c6:9e:9a:67:63:5f:df:a1:42:cf:ee:71:76:ad:ea:88:96:75:
a5:58:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:20 2025 by rpki-client