Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
File: sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft (raw, json)
Hash identifier: zhKXGBpPKzG0Bs1An1yO3Cvb1gYhuKXiQ/AOUni62Qc=
Subject key identifier: 99:9B:BB:83:99:FF:1E:F1:C9:64:46:5A:CD:DA:17:9D:A7:F0:AF:75
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 0197ECB33D8EB320C349BD7F37B0170583BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
Manifest number: 152B
Signing time: Wed 09 Jul 2025 01:00:59 +0000
Manifest this update: Wed 09 Jul 2025 01:00:59 +0000
Manifest next update: Thu 10 Jul 2025 01:00:59 +0000
Files and hashes: 1: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (hash: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=)
2: sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl (hash: P/d4ObTcqicunmNkUOWPE4/2/kL6NGh2OOuH+oI0eYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ec:b3:3d:8e:b3:20:c3:49:bd:7f:37:b0:17:05:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jul 9 01:00:59 2025 GMT
Not After : Jul 10 01:00:59 2025 GMT
Subject: CN=999bbb8399ff1ef1c964465acdda179da7f0af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:f4:94:e7:fe:92:43:72:bb:be:21:67:a9:
d2:3f:b8:f5:92:01:8a:82:29:27:a4:52:16:8b:1d:
e0:12:ca:b3:04:54:2f:8b:df:10:7f:4c:85:05:56:
83:28:9b:f5:92:f7:67:78:51:e5:1a:f0:b1:c1:da:
b9:1d:99:00:e3:92:56:c0:d4:91:97:3b:e2:d7:79:
8f:98:b0:6e:5f:8d:75:cb:e8:68:bd:d4:ef:8c:46:
f2:6d:41:22:d1:a4:fe:99:8a:80:73:83:95:9f:78:
7f:5c:10:f4:98:bf:c9:5c:68:f6:16:66:f6:23:54:
30:be:6c:60:42:e0:75:15:61:97:06:ce:4d:23:4a:
8d:6e:aa:e4:2c:09:22:57:e4:59:f1:53:18:70:2e:
20:7f:23:4a:0a:8f:b5:cf:e4:4f:0b:28:1b:2a:0b:
51:d4:4f:85:c1:e0:6b:28:0e:99:ce:8d:ab:3c:01:
68:b0:63:3b:19:ff:cd:82:04:1a:6d:59:6d:56:2e:
51:58:ff:2b:06:1e:e5:c6:f5:89:cb:d2:da:d9:8e:
3a:99:57:f7:a7:51:13:f6:f2:c0:a2:7f:d1:93:62:
5b:3b:03:0e:89:f8:14:85:45:61:b7:42:f4:51:a9:
37:b4:87:4c:d5:b5:33:9f:25:d6:e2:73:3c:2a:b8:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:BB:83:99:FF:1E:F1:C9:64:46:5A:CD:DA:17:9D:A7:F0:AF:75
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:5b:a6:0f:89:bc:e6:0b:51:e7:34:30:91:45:a4:ca:d0:
a5:3f:de:a1:de:84:c2:35:c9:c5:3f:f6:28:9a:84:d7:c0:32:
2b:43:59:cd:c3:9e:c8:12:56:3b:f0:71:e1:ff:d1:5e:01:28:
a6:f7:07:15:eb:33:84:b3:73:ce:20:fa:ac:0d:0d:7f:14:21:
08:b1:b6:b3:e0:e8:aa:a3:90:0d:c2:2d:c1:75:31:45:1a:72:
db:52:ff:8f:2d:fd:df:7d:36:85:f5:83:87:2a:3a:36:da:cf:
2f:9b:68:4a:a2:b1:6a:c1:12:87:f5:07:aa:b5:26:7d:96:1e:
ab:63:53:64:1f:51:3a:02:41:92:eb:46:b0:34:e0:a3:66:6c:
88:69:59:7f:d5:5d:85:ba:c5:74:01:4a:fb:15:e5:60:4f:60:
84:50:ee:79:f6:cd:9b:1b:65:0b:43:d6:37:3b:b4:2f:6d:10:
e9:1a:ff:52:b7:21:56:de:cb:ac:0d:54:63:22:22:d8:65:cd:
c3:59:c0:29:0c:86:e0:f0:b9:ec:26:0a:f5:5a:44:54:b9:4e:
19:56:a9:f8:d2:9f:ec:2c:ee:38:55:f0:c5:58:0f:51:63:2a:
95:1d:0b:9d:8a:d3:a6:a6:ea:2e:df:32:98:e4:20:62:19:93:
f4:0b:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:10 2025 by rpki-client