Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
File: i90UJnygnMoHmH6ySP91hWkRpHQ.mft (raw, json)
Hash identifier: Jt+ISS43mhtbzwoGbc00P9KAjWh19AkNVVi6pCHsGgA=
Subject key identifier: CB:56:85:49:A1:A0:11:C0:06:8B:93:90:F2:C0:37:44:AB:22:EE:74
Authority key identifier: 8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
Certificate issuer: /CN=8bdd14267ca09cca07987eb248ff75856911a474
Certificate serial: 01961A35C38A4CD9B6706467E57145FCEAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
Manifest number: 08B3
Signing time: Wed 09 Apr 2025 11:00:53 +0000
Manifest this update: Wed 09 Apr 2025 11:00:53 +0000
Manifest next update: Thu 10 Apr 2025 11:00:53 +0000
Files and hashes: 1: i90UJnygnMoHmH6ySP91hWkRpHQ.crl (hash: cHUaMCraaQGcFhmVHbCgtS5V0LFk7UdpmcTmI+jfzks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:35:c3:8a:4c:d9:b6:70:64:67:e5:71:45:fc:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd14267ca09cca07987eb248ff75856911a474
Validity
Not Before: Apr 9 11:00:53 2025 GMT
Not After : Apr 10 11:00:53 2025 GMT
Subject: CN=cb568549a1a011c0068b9390f2c03744ab22ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:d4:0f:15:df:6a:85:47:c1:56:90:03:e0:
22:88:7b:3f:f1:b6:c9:f8:bb:6a:eb:87:18:f8:3b:
1b:ab:f1:28:91:fe:51:95:72:8e:66:52:81:62:ab:
9a:9c:32:f9:e8:9e:b2:73:d3:9a:e9:ab:6d:29:ef:
43:f5:d2:bd:f4:c8:68:86:98:8c:06:a3:84:00:cb:
b8:9d:a7:fe:9d:a1:17:39:5c:c4:f7:2f:c9:8c:85:
9e:0f:c8:9c:d8:36:47:90:84:f6:c4:12:65:a6:c2:
ad:3a:db:5e:17:33:73:36:9b:f5:e8:1d:93:57:dc:
e3:ae:e3:95:f0:9a:80:8b:0d:14:cf:8d:53:8a:44:
0e:98:05:af:a4:5b:fe:61:30:34:be:71:4d:5a:f8:
38:50:c3:fc:74:d8:76:12:b1:11:53:e4:95:99:d0:
46:21:7a:04:02:96:6e:97:7c:39:05:b8:cc:cf:88:
46:e1:80:b4:a7:a7:87:07:45:b0:8d:b5:43:21:bb:
8f:fc:f5:90:58:e0:06:bf:4e:80:cc:f7:02:a2:a5:
ff:8a:66:19:0b:2f:3e:79:e9:cd:7b:33:88:21:61:
a2:5e:43:ee:18:63:b9:2f:2b:03:dc:ce:b1:b8:fe:
b4:d5:a8:20:84:03:5d:7e:f3:9b:94:91:36:e0:82:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:85:49:A1:A0:11:C0:06:8B:93:90:F2:C0:37:44:AB:22:EE:74
X509v3 Authority Key Identifier:
keyid:8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:d8:dc:40:55:fa:68:9a:23:c5:89:e7:11:df:c3:7a:d1:
87:b0:06:bb:77:f0:4b:ce:a2:9e:f0:d8:fe:59:e2:72:65:6c:
77:e1:41:2f:a7:cd:4b:e6:45:0b:d3:21:8e:7a:19:68:44:45:
27:e6:9f:d5:5b:2b:4b:bf:a2:e7:2b:d5:bf:a1:30:08:5e:6a:
ea:6e:6f:be:11:a6:09:5a:9d:cd:60:f4:92:a9:71:75:71:c2:
ce:51:73:8e:9e:a7:ff:c0:05:d1:05:15:6a:82:d6:f0:0f:fd:
c4:64:ff:cb:63:10:1f:c7:53:5b:dd:c2:16:36:9d:99:8d:3a:
3d:b6:7b:46:55:b8:66:84:f0:33:c4:67:1e:fc:98:b6:f1:d8:
3d:99:68:14:e6:60:81:fd:57:f5:ea:94:d0:05:cd:70:07:a4:
d8:14:a7:74:00:21:06:d0:e8:9d:f8:85:bf:4e:c9:48:c6:bd:
45:09:4e:77:a3:bd:dc:10:0a:85:66:3c:68:86:7d:5b:82:bf:
3f:91:31:c1:04:9a:e0:9b:a3:c4:58:7d:dd:df:82:13:96:37:
f0:56:84:a7:2b:5e:60:58:ec:56:d7:0a:e3:f7:9c:37:b7:0e:
45:6f:87:56:16:7e:6f:ca:5a:96:a7:47:5f:bb:a6:08:88:80:
8f:ef:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:32 2025 by rpki-client