Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
File: C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft (raw, json)
Hash identifier: RVdruHDudSkPhMi3f5HI0NdSZMuR/1Mib0VWFZ5bUe0=
Subject key identifier: BD:1B:19:72:4A:44:D9:B9:AC:66:CB:FC:27:61:A8:24:F2:40:7D:0C
Authority key identifier: 0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
Certificate issuer: /CN=0bc731353731d27d89c578285469c68c5d57ad09
Certificate serial: 0195C6BDBF8C50941C3847E8B9D861B4B9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
Manifest number: 0643
Signing time: Mon 24 Mar 2025 06:01:18 +0000
Manifest this update: Mon 24 Mar 2025 06:01:18 +0000
Manifest next update: Tue 25 Mar 2025 06:01:18 +0000
Files and hashes: 1: C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl (hash: OOTQGNa2IUy40ia0wcvaYSt6GoPbPqwfbio8WOH3yWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:bd:bf:8c:50:94:1c:38:47:e8:b9:d8:61:b4:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc731353731d27d89c578285469c68c5d57ad09
Validity
Not Before: Mar 24 06:01:18 2025 GMT
Not After : Mar 25 06:01:18 2025 GMT
Subject: CN=bd1b19724a44d9b9ac66cbfc2761a824f2407d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:ba:bf:3a:99:61:30:26:dd:14:da:5e:db:
5b:f5:5d:cc:5e:55:41:cd:cc:f5:de:72:10:31:cc:
48:58:01:00:5a:43:37:91:a7:46:fd:7c:d5:1e:d8:
0b:21:8b:21:25:f9:ad:c3:6c:10:ed:13:ed:65:8a:
ac:a2:1a:5d:75:cc:42:84:9f:c2:88:e4:8d:93:e4:
49:8e:51:16:6f:a4:4a:eb:cf:90:bc:b7:b5:03:f1:
03:e5:2d:13:78:45:a7:49:ab:c8:01:e7:21:72:fa:
34:21:1e:55:ff:6f:be:5c:bb:4a:94:87:48:95:0a:
0c:ca:c3:75:55:0e:4c:14:4a:13:fa:80:7d:5d:5a:
08:ad:0f:c5:fe:cd:59:19:49:f4:9c:4e:dd:85:fa:
85:d8:b9:b0:d6:a8:02:5a:0b:62:17:68:6a:74:a1:
b0:39:1d:a6:f9:c4:4e:ec:7c:29:49:ec:d6:4a:d0:
b7:1f:d1:15:ef:67:85:94:65:ef:87:49:76:c1:c0:
86:22:f2:a7:76:f6:91:a0:9e:6f:bd:e6:9b:bc:1f:
84:15:a2:3e:4e:ab:41:bf:fb:27:81:15:f8:72:bb:
b0:ef:74:20:d8:9e:e0:76:0f:95:8f:7a:39:e8:00:
83:25:28:07:cc:12:bc:92:40:b7:90:98:e3:90:1b:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:19:72:4A:44:D9:B9:AC:66:CB:FC:27:61:A8:24:F2:40:7D:0C
X509v3 Authority Key Identifier:
keyid:0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:74:d1:03:27:19:a9:4f:d6:12:05:f5:5e:04:1d:8d:ca:
3a:e8:50:7a:72:ac:af:4d:53:f1:e9:78:47:64:98:3c:18:ea:
67:f3:73:85:22:11:e3:68:a4:48:db:09:fd:f6:07:0b:c8:7a:
4e:65:22:8d:78:29:71:c7:95:2d:80:df:21:00:fb:40:52:d3:
01:1d:25:b9:5b:d6:d7:24:d2:42:e4:5b:34:c9:e3:d1:ec:43:
1a:5c:a5:7d:fc:bc:8f:bd:3b:b5:c4:18:05:1c:a1:e7:5a:19:
55:7a:7b:87:d2:05:db:af:aa:16:30:12:00:64:3c:6c:4b:af:
31:ae:f1:05:ad:44:8b:19:3c:e1:73:fb:f7:6c:2c:77:81:67:
45:d3:68:98:ac:f6:3d:09:82:f1:f9:37:ad:22:a8:0f:be:b2:
5a:a5:63:4c:75:c1:85:0f:2b:df:da:69:17:bc:6b:61:8c:d4:
39:ab:f4:0c:66:a2:75:d3:c2:f9:68:4a:dd:90:44:68:66:69:
ad:10:03:34:1d:6d:ba:f8:30:68:8d:4b:15:c9:94:64:22:88:
7b:8a:28:72:df:de:d4:91:3c:73:7c:a8:88:1d:d4:ad:88:41:
d8:e8:98:8b:1f:d4:43:61:bf:96:f8:fa:99:3c:63:16:7c:be:
9e:35:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:19:33 2025 by rpki-client