Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
File: MKJtC08pGQMd0kUy3hy9aujaCLU.mft (raw, json)
Hash identifier: beUQihGLPcjLdVxaGxmav5G7HmSdvxIqPAlOXyqVWz0=
Subject key identifier: 76:F2:68:21:B8:67:4B:2A:3E:FF:B2:4C:7E:FD:12:84:CE:EC:07:56
Authority key identifier: 30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
Certificate issuer: /CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Certificate serial: 0196B66BDA321F226EA0081A5E785E644E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
Manifest number: 0A1B
Signing time: Fri 09 May 2025 19:00:43 +0000
Manifest this update: Fri 09 May 2025 19:00:43 +0000
Manifest next update: Sat 10 May 2025 19:00:43 +0000
Files and hashes: 1: MKJtC08pGQMd0kUy3hy9aujaCLU.crl (hash: sWdAs7lGc18xn8q8F2d7VOntaRAOLOVExL1XzUiBCLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:da:32:1f:22:6e:a0:08:1a:5e:78:5e:64:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Validity
Not Before: May 9 19:00:43 2025 GMT
Not After : May 10 19:00:43 2025 GMT
Subject: CN=76f26821b8674b2a3effb24c7efd1284ceec0756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:ee:d5:a6:d1:58:34:6a:33:72:c7:36:94:
6a:fd:a6:59:04:1a:8c:f8:5e:04:82:aa:10:12:74:
9d:b9:a6:d1:5f:44:cc:71:75:1c:1f:0a:0f:7e:89:
ae:b8:15:8b:d0:43:c3:9d:88:3c:eb:45:47:41:a0:
3d:f1:1c:a2:51:a8:74:8b:84:cd:af:18:91:b5:e5:
2b:b7:9d:34:d1:eb:85:c0:46:ee:78:70:fa:e7:e9:
5a:b8:61:a1:dd:b2:20:f7:e6:d7:51:01:43:04:d0:
92:62:70:00:14:72:0b:2a:65:5d:82:56:4f:9c:c0:
1e:86:1b:08:4e:a5:e5:9d:14:c5:b1:17:46:11:59:
3c:77:c5:a5:e1:eb:fe:7b:60:f2:dc:d2:68:b8:11:
2d:be:14:3c:43:b1:49:29:5d:9e:fc:ce:0d:eb:d3:
25:a2:e7:2f:a3:ec:6b:3d:56:50:38:0c:7e:33:20:
c5:ed:15:b4:60:38:f3:fb:6f:2d:72:c3:74:46:0a:
b3:f3:ac:8b:f3:93:ec:0b:e8:b0:30:1b:b8:40:3f:
ee:aa:f1:c8:09:1a:c4:3e:b3:64:d7:62:87:35:b6:
e3:c3:ef:6e:73:41:9f:03:3a:17:9f:08:bd:67:95:
9d:9e:5e:2f:d7:4b:5a:03:0d:46:db:44:4a:c4:8a:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:68:21:B8:67:4B:2A:3E:FF:B2:4C:7E:FD:12:84:CE:EC:07:56
X509v3 Authority Key Identifier:
keyid:30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:12:14:f9:e5:dc:e3:b6:fd:02:04:a7:70:37:eb:3c:1a:ba:
db:3d:0c:e7:ea:8e:49:4c:c5:49:12:c0:fd:e4:41:c6:e8:bf:
2a:c3:9c:e3:4d:d5:90:06:d8:cd:cf:9d:23:7d:0a:f2:8d:5d:
cc:61:b2:78:5f:5e:6e:82:b4:2e:f0:85:07:9e:fc:57:aa:c7:
e5:2d:45:50:3a:7b:40:24:e9:90:61:88:44:75:a5:31:34:79:
6b:87:d9:3f:b8:33:33:c7:a5:99:f0:86:81:46:0c:e2:17:d1:
24:2b:95:2b:6c:fe:09:4a:71:b2:97:e1:d4:45:5e:78:92:66:
7d:a0:14:4a:de:b7:a5:c2:e2:b0:8d:99:49:30:c1:21:07:0c:
dc:7b:1c:bb:4e:38:ad:51:78:1a:e4:15:e1:30:70:97:58:97:
ea:66:bb:5f:7d:84:36:fd:5b:e3:dd:2e:17:86:d1:5c:97:a7:
7b:b0:cc:81:90:4f:2e:49:49:20:a8:28:58:47:96:d5:7c:dc:
ba:e9:95:2e:cc:8f:4f:32:3e:26:81:b1:c2:fa:84:bd:24:43:
66:b8:b6:fa:c7:96:29:ca:1a:ae:b5:fb:69:88:0c:91:00:2e:
d9:8f:d0:f0:3a:68:a9:10:3d:63:41:3f:ae:41:c5:42:ba:08:
6e:aa:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:45:46 2025 by rpki-client