Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: clzjrRo18T2ArZ1GgC8orjLGdcP14cvl5UW4RFkpyhc=
Subject key identifier: AC:1C:1C:F2:4A:D0:4A:B1:A6:43:57:AF:D5:07:93:31:65:03:69:FD
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 01962F74BED6B9DF9CD9F0FD4EB91D92888D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 123F
Signing time: Sun 13 Apr 2025 14:01:42 +0000
Manifest this update: Sun 13 Apr 2025 14:01:42 +0000
Manifest next update: Mon 14 Apr 2025 14:01:42 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: HYeJZTfF0ig1CGqld3lJ3QHbRmpaFtODxwkBjTPIhno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:be:d6:b9:df:9c:d9:f0:fd:4e:b9:1d:92:88:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Apr 13 14:01:42 2025 GMT
Not After : Apr 14 14:01:42 2025 GMT
Subject: CN=ac1c1cf24ad04ab1a64357afd5079331650369fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:4b:98:3b:21:92:00:30:3c:78:1b:4d:6b:
a0:6c:92:1f:39:68:31:c1:28:05:cf:ea:3f:38:97:
6b:50:83:7b:22:51:db:e8:4c:7f:44:5d:39:09:85:
62:49:0a:97:fc:1b:8a:ae:c3:93:41:d5:3a:2a:a0:
2d:b4:cc:af:f1:57:22:b2:ae:67:0d:a8:48:25:62:
10:30:9e:9e:c8:f7:24:3c:00:c2:f8:40:5a:44:b7:
e7:41:c2:e0:6b:6a:33:56:6c:5d:0b:01:ad:0a:41:
eb:67:29:8a:90:a1:44:68:cd:cf:91:f8:84:79:a2:
83:58:d9:2f:19:49:32:92:2b:86:1d:e7:72:38:a5:
5d:04:ad:0c:24:8e:1e:de:9b:2c:84:5e:ce:e9:8b:
97:03:db:22:7c:4f:34:b7:fa:9b:73:99:6f:3d:76:
68:6f:c1:c9:12:ee:90:88:8d:1c:6c:1f:3f:f5:30:
c9:35:ba:a2:1d:cc:07:2e:f9:ba:0b:b7:21:c6:2a:
0b:b1:32:dc:88:13:21:3c:73:6a:46:01:33:d0:db:
e4:0d:9d:1a:d5:69:6a:f2:62:c3:ba:70:9f:27:f8:
5f:13:4d:34:96:8b:92:6b:0b:2f:ef:b9:24:b4:97:
8f:0f:1f:8e:07:c5:8a:f5:3f:7f:92:39:1f:ec:43:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1C:1C:F2:4A:D0:4A:B1:A6:43:57:AF:D5:07:93:31:65:03:69:FD
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ad:c5:b0:04:9b:11:b7:61:db:a4:69:2b:da:8c:f2:b3:98:
e8:9c:d7:b3:64:7a:a6:c0:26:2f:e3:80:f0:dc:2d:23:d4:5c:
b6:7e:9d:d9:c0:36:83:3f:b3:5d:89:fe:c6:ba:5f:15:7e:10:
a6:4d:73:86:a2:85:87:d0:69:90:0a:be:90:16:12:b1:ec:16:
05:31:6d:fd:13:7a:9c:0a:37:28:c4:79:80:c7:cc:29:f4:3d:
2b:f9:d4:c4:42:38:dd:56:21:12:77:8b:64:d8:08:f6:c0:65:
53:d1:ac:37:2c:ab:5d:32:8f:f9:e6:39:04:65:69:de:31:eb:
1d:88:68:9f:7e:49:c3:a1:d0:99:96:5b:dd:26:08:25:1b:01:
72:e7:c8:99:2b:7c:e1:af:f5:a2:42:d3:a6:69:97:9f:d9:ef:
32:38:69:14:29:49:04:50:e0:42:20:98:ce:4c:08:42:0a:b1:
56:ab:4e:58:de:ee:6e:bb:38:45:19:cb:98:95:35:43:a4:e0:
5a:c7:0c:9c:3c:20:77:a7:0a:ba:b8:5d:30:95:f3:8e:fa:20:
db:73:02:d5:4a:d1:9b:98:7c:f9:8d:50:c2:59:68:3a:e1:cc:
f5:f3:f8:55:ba:4b:3a:d2:1e:81:4d:67:e8:51:ab:d7:a7:63:
72:65:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net