Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: kMriqgUPG11fl3LyKeDsxhGjPZPqiNaPCYjS2UNjaFs=
Subject key identifier: 2C:ED:00:DD:F1:1C:80:33:57:AB:1E:23:67:10:70:C4:4B:96:3F:2F
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 01962E61766ADC74735619733625DE5E6137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 1232
Signing time: Sun 13 Apr 2025 09:01:01 +0000
Manifest this update: Sun 13 Apr 2025 09:01:01 +0000
Manifest next update: Mon 14 Apr 2025 09:01:01 +0000
Files and hashes: 1: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: RyYgfU+Pn3/AUxFQdx9KXPRWMZvzrnQ+aJkUvdvlmIg=)
2: EMEQainrdjhvrSxfRt2EdTwfFho.roa (hash: MgfrBxxTqDVEh7a/Ypney2yykLPSmFU/4+sRkVkl74s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:76:6a:dc:74:73:56:19:73:36:25:de:5e:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Apr 13 09:01:01 2025 GMT
Not After : Apr 14 09:01:01 2025 GMT
Subject: CN=2ced00ddf11c803357ab1e23671070c44b963f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:cb:f0:d3:68:44:52:48:4c:4a:ad:5f:e4:
f2:22:70:6c:e0:bc:b4:f0:8a:48:a6:f6:da:fa:67:
0d:6e:7f:bd:01:7b:77:08:3a:fc:c6:c1:68:9d:33:
43:ea:86:e5:2b:6a:17:d0:55:4a:a6:57:41:33:0b:
82:b6:43:56:31:f0:b6:f9:45:88:29:6d:62:6d:ad:
31:58:2b:3a:9f:a7:f9:eb:1b:95:4a:2f:8a:3b:88:
76:59:70:84:ba:65:f8:35:e2:69:55:40:6d:27:da:
67:01:8c:f5:b7:c9:d7:52:d4:49:ab:9f:1b:ab:9e:
ab:ed:a1:cf:a7:f7:a2:0b:79:30:dd:6c:5b:d5:81:
17:04:db:19:1b:d1:0d:ab:34:14:20:df:39:23:bb:
47:96:db:19:e7:2f:26:ef:1b:9e:6b:a5:96:b5:dc:
31:eb:43:97:d6:a8:bb:af:ce:5d:75:84:bf:49:f1:
ee:d0:08:d0:b1:20:26:67:d6:eb:e4:45:44:95:4b:
7a:15:84:49:91:e4:cf:e1:0d:08:b3:61:dd:4d:36:
17:62:7d:84:0a:17:ae:09:0c:c2:a9:fa:73:d6:d9:
54:0a:fe:8a:7c:ea:d3:50:43:09:f3:ac:36:9e:c4:
ee:8d:84:38:ef:42:dd:cd:55:e7:43:ed:9f:a6:9e:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:00:DD:F1:1C:80:33:57:AB:1E:23:67:10:70:C4:4B:96:3F:2F
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:8b:68:73:2e:06:b8:f9:63:29:0a:78:6e:b5:88:37:61:
e7:6d:0b:fd:4d:26:98:dc:25:0c:90:5c:e0:11:19:05:ee:93:
f1:26:44:cf:f6:21:f1:c7:30:07:09:04:09:3d:c5:d8:e7:b1:
74:a1:37:a8:76:7a:d2:87:a8:6c:b1:f4:13:a9:4a:a3:82:60:
5f:15:8d:b2:e8:f4:4a:53:d6:69:ae:08:0c:51:10:d9:4e:94:
19:54:a5:2a:82:7b:e2:b4:64:a9:eb:34:e0:00:a5:4a:1a:ed:
97:0d:40:20:e9:f4:8e:89:21:f6:36:c1:fa:c6:00:5e:19:68:
c7:a5:4e:7b:61:be:9e:ac:90:d7:c3:b4:98:4a:88:c4:d8:56:
d9:56:d2:36:37:f3:c4:15:1e:79:a1:36:9e:db:c4:a4:1c:63:
3b:ee:96:28:ae:01:e5:82:eb:86:6a:3f:41:73:87:c6:69:0e:
c0:81:ad:73:e6:fc:f9:1e:14:5b:db:cd:40:cd:ef:33:38:16:
f8:d4:66:54:a7:6d:db:9c:33:cf:3f:57:76:c7:51:04:fe:9a:
67:70:d9:7d:73:9f:1e:4b:43:26:29:b9:6a:8b:1d:40:0a:52:
13:d3:ab:27:51:e4:74:96:86:db:b2:5c:36:98:57:58:73:fc:
aa:b2:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net