Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: 2RXuYqGljnAS9rY/oryJ6KdctKdnHQpnXAya8utRZbM=
Subject key identifier: 39:0E:08:08:45:34:03:74:3F:64:1E:F2:FD:AF:91:D8:08:CD:47:FB
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 01962FAB300994F43FA7BA46D719F7534886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 10BE
Signing time: Sun 13 Apr 2025 15:01:10 +0000
Manifest this update: Sun 13 Apr 2025 15:01:10 +0000
Manifest next update: Mon 14 Apr 2025 15:01:10 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: 27yl9De5B0TugXJ9Ds4WXFwb70Y92j01lWwcmqt1wZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:30:09:94:f4:3f:a7:ba:46:d7:19:f7:53:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Apr 13 15:01:10 2025 GMT
Not After : Apr 14 15:01:10 2025 GMT
Subject: CN=390e0808453403743f641ef2fdaf91d808cd47fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:9c:0b:f9:e6:4d:81:6a:45:06:b2:ad:16:
e5:42:fd:ab:b2:b5:78:00:27:4d:b8:30:b4:4f:44:
ed:e3:c9:29:f2:3c:38:d4:db:e5:d1:3b:32:51:a2:
9a:57:51:79:59:bf:a3:c7:ce:d0:d5:79:d7:ea:bd:
46:4b:47:b5:da:e5:e6:65:7e:ab:b2:1c:c4:56:28:
c4:92:3f:9e:25:8f:7b:f3:ed:88:56:4d:a3:c5:26:
09:5b:fd:f0:38:af:65:da:ef:95:23:03:b5:1c:b4:
2a:dc:41:10:3b:af:bf:92:7c:ab:18:08:e7:53:6e:
c9:0c:5f:9b:70:5f:eb:96:f9:cc:7b:1b:a6:35:6f:
a6:5a:c8:72:83:7b:4e:04:ee:d4:2e:66:13:85:b6:
98:56:9d:52:8f:83:59:f4:e4:db:da:58:01:1d:fa:
14:dc:96:64:2e:3e:99:e5:0a:97:62:25:26:4f:45:
dc:a5:02:55:00:7b:f2:a7:b5:b0:5c:8b:25:b6:b6:
30:4b:2b:e2:c5:58:40:5d:94:eb:d3:95:84:5f:01:
64:bb:30:95:59:a6:7e:92:33:af:79:19:11:d4:fe:
1c:83:f9:50:79:a1:a2:11:3e:80:a0:57:56:b7:b2:
6c:64:2b:3d:35:4b:ce:e1:9e:51:a2:21:05:b3:1c:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:08:08:45:34:03:74:3F:64:1E:F2:FD:AF:91:D8:08:CD:47:FB
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bf:0f:fa:66:78:4f:51:d2:a6:7d:a0:fa:1c:55:03:ab:5a:
1b:37:f0:80:9c:37:c4:f5:8c:49:fd:87:44:a7:3d:37:e2:89:
4a:d4:50:ef:4c:61:63:b1:3c:b8:d4:23:2d:ff:26:42:f3:00:
2b:a0:a7:e5:e7:09:a0:50:fe:be:d2:43:d4:e6:51:19:aa:af:
d3:a5:21:ff:4f:5d:d5:c9:8e:ad:19:6c:05:d7:2e:10:e5:e8:
bc:3e:68:1c:58:36:87:a2:c0:d0:a1:03:4c:d9:22:7d:fa:81:
5a:b9:07:b3:d8:71:a1:10:76:af:8d:fb:bb:66:1d:31:b5:4a:
64:69:52:1f:29:03:76:e2:73:be:32:ff:69:ad:af:78:0b:22:
38:49:f3:14:34:da:e4:1c:16:06:e5:8b:00:41:d5:29:2c:99:
c6:e7:9d:e1:2f:e7:3a:52:ae:50:2e:a2:e4:52:3b:69:e7:26:
e7:f4:66:db:33:40:f4:26:bf:0c:8b:07:b0:ed:f0:6b:2c:bb:
d1:fb:56:be:df:54:7f:ad:59:fe:9b:0f:d7:0b:b1:b0:f8:b7:
4e:bc:fb:31:00:11:a8:6f:74:48:aa:19:50:3d:f0:26:21:9b:
9f:3e:da:3c:3e:9a:b3:a5:cb:20:9c:79:83:76:3a:ab:65:76:
45:2e:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net