Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File: jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier: /GRa5FpG9HpHB/F3jOGjk8IdgHHwPjWDtDHLhr7Gi70=
Subject key identifier: D5:00:F4:5B:63:9F:D1:94:65:1A:F8:6E:BB:E6:19:CD:28:BB:32:33
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer: /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial: 01978B110A83483E4D8851B9CBE70B683437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number: 0CFA
Signing time: Fri 20 Jun 2025 02:00:39 +0000
Manifest this update: Fri 20 Jun 2025 02:00:39 +0000
Manifest next update: Sat 21 Jun 2025 02:00:39 +0000
Files and hashes: 1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: 5uRYJpqMFnV1y3VMEfNGWpe/zEnS948DehvUGjsG8Is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:0a:83:48:3e:4d:88:51:b9:cb:e7:0b:68:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
Validity
Not Before: Jun 20 02:00:39 2025 GMT
Not After : Jun 21 02:00:39 2025 GMT
Subject: CN=d500f45b639fd194651af86ebbe619cd28bb3233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:d3:43:26:f8:0b:30:62:0d:fe:98:f7:33:
0e:75:ac:8f:fe:aa:24:c4:d4:c1:38:ea:c3:6d:97:
b0:21:b7:d3:dc:fc:a5:81:94:00:ff:d2:a6:3d:7f:
9c:f6:51:b0:bc:cc:ff:bd:8f:dd:f8:81:5a:e8:57:
55:22:41:31:b4:7c:51:9e:29:7e:29:17:12:c9:1e:
13:06:5d:47:3f:7f:9c:f3:0b:cb:38:dc:81:12:40:
fd:69:d1:0c:38:18:d2:5f:78:db:10:85:18:97:78:
65:c2:10:2e:2f:a1:b2:cc:35:a3:1c:45:fc:d5:34:
a3:4a:38:fc:87:f9:73:1a:ef:26:57:bc:7f:c1:78:
51:2f:cf:c5:99:be:9a:d3:55:29:d5:c9:1e:ba:bd:
c7:fa:fe:93:f4:59:3d:c7:8c:6d:a3:2d:23:ec:68:
fa:bd:3f:31:3c:ec:91:f0:3c:5c:ba:fa:01:24:02:
cb:77:4a:14:4e:ab:c9:d8:eb:9b:27:a0:ed:bb:d9:
1c:65:41:73:e9:cd:20:ef:67:25:fc:4a:c8:a2:64:
30:22:a5:b4:95:06:73:bd:f5:72:02:b7:67:07:ca:
a3:f4:7a:c1:4a:36:7f:dc:13:7f:10:98:ab:14:d0:
eb:ac:e1:61:43:4d:f4:29:47:a9:61:a4:4f:48:ef:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:F4:5B:63:9F:D1:94:65:1A:F8:6E:BB:E6:19:CD:28:BB:32:33
X509v3 Authority Key Identifier:
keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:86:2a:ef:47:56:06:5c:1c:c4:39:b5:ed:01:c1:0f:9b:
3f:e2:af:92:bb:e7:65:29:57:df:7e:93:0d:f6:8e:32:a5:63:
11:88:d3:fe:9e:63:06:ad:f6:94:bd:a7:e2:40:ce:c1:c4:38:
87:e6:93:fd:d4:7e:17:02:55:91:74:51:82:6c:3a:d5:2d:56:
1b:a9:db:fe:21:e8:2b:f6:28:56:a5:04:f3:58:0e:66:9a:1f:
ab:63:96:97:7e:02:f6:28:93:30:04:36:5e:c2:69:ee:97:17:
cb:bc:59:14:de:f3:d4:f8:02:86:39:f3:dd:3c:1b:02:80:2b:
b9:98:07:5d:94:7b:19:98:e7:25:b0:c8:d8:72:30:f7:35:53:
0b:a3:b2:ef:19:cf:01:4f:40:30:73:8e:f1:3b:a7:3d:90:1f:
fd:e6:c3:d4:b3:64:4e:51:f4:f0:9c:7c:ea:b3:cc:eb:91:42:
f7:3c:ac:36:c9:27:a0:09:c2:58:f3:81:ee:57:fe:56:9d:39:
d7:16:21:ce:35:1d:4b:b8:c0:61:3b:02:cf:90:28:36:8b:68:
20:e9:3e:cf:2a:90:7d:ab:a4:c6:05:30:da:ad:19:db:5b:f4:
99:0e:7d:eb:35:f1:59:26:ad:36:e7:63:6e:69:f7:99:19:0a:
ab:3b:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:25 2025 by rpki-client