Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: KMyP1E4z5vpHwqdfJwmjoSwNslkQwoZu6ctWTUrDyJc=
Subject key identifier: 09:44:7E:A6:24:30:C3:38:9E:DE:D8:BB:D1:86:54:47:D2:61:36:83
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01962F3D636E11C937072579BB41ADEA1A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 02E5
Signing time: Sun 13 Apr 2025 13:01:14 +0000
Manifest this update: Sun 13 Apr 2025 13:01:14 +0000
Manifest next update: Mon 14 Apr 2025 13:01:14 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: 5qraTQk8+DUrbX2z6Se16CbvescgbPJV8vMsAWoZsGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:63:6e:11:c9:37:07:25:79:bb:41:ad:ea:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Apr 13 13:01:14 2025 GMT
Not After : Apr 14 13:01:14 2025 GMT
Subject: CN=09447ea62430c3389eded8bbd1865447d2613683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:c9:3c:e9:9b:6e:59:7a:12:0d:7d:dc:d8:
66:4d:a3:04:d6:a5:a2:db:39:2d:10:77:43:10:5a:
3c:93:11:7c:bf:9a:fd:85:dc:d7:30:ca:8d:08:9c:
5f:a7:3f:68:bd:37:fb:fe:46:9a:ad:22:92:d3:22:
bc:8d:21:c9:56:10:7e:2a:b6:f4:eb:83:f1:89:8f:
4d:33:fb:03:04:0d:e9:7a:6b:68:5a:c9:fb:29:cf:
2f:99:34:8c:7e:b4:91:20:2a:3d:b3:29:64:07:e3:
8f:9f:82:1e:ee:7b:7a:0d:10:a4:86:d8:8e:d6:37:
43:5b:c3:c6:9c:4e:e7:46:8e:ca:e5:1e:74:1f:af:
9e:ee:48:7d:33:87:4f:3e:5f:8d:9b:ba:7a:0f:80:
9e:b2:39:19:92:89:d3:2a:18:b2:be:bc:a1:95:b2:
6e:55:ef:dc:c7:6d:08:6b:41:ff:f0:98:dc:e2:bb:
d4:b8:2b:27:74:40:cb:9c:7f:85:41:b4:aa:c5:68:
5d:4c:8c:b1:ed:2a:0f:03:32:0d:01:f5:93:d9:ff:
dc:f1:d5:83:7e:6f:53:92:4a:48:44:25:cf:9c:2f:
19:0a:7f:20:61:a4:11:a0:7c:04:99:28:39:bf:f9:
a4:49:92:93:fe:88:0f:5b:6f:27:23:26:f7:3c:b9:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:7E:A6:24:30:C3:38:9E:DE:D8:BB:D1:86:54:47:D2:61:36:83
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:07:7c:b1:0d:f3:fe:fc:94:8f:cc:6c:9d:a3:a6:8a:8c:
81:2f:e9:78:2e:83:67:56:17:de:de:31:73:d8:0d:c4:75:22:
45:10:a5:39:32:f1:99:cd:9c:4b:35:fb:85:0e:6c:90:97:cc:
31:a2:80:3c:c2:7b:a8:aa:9f:e2:49:fd:a2:5f:55:51:92:a4:
4a:74:af:a6:9b:1c:5d:a5:bd:b6:cf:c3:2d:67:12:43:6d:5e:
96:a1:29:0b:55:f9:bf:07:fb:82:e8:97:d0:fa:1b:f5:7f:b6:
0d:d4:73:8f:97:b8:cb:02:0a:da:52:b8:c3:68:78:1c:8d:34:
c6:97:3d:23:46:55:ca:a4:c8:f7:4e:4e:de:71:b2:34:a7:fb:
9d:0f:aa:81:71:b6:19:1f:ca:48:52:1d:d2:5e:1e:5d:3c:79:
8e:38:32:5f:d8:da:7f:cf:65:ee:1c:c4:03:23:9a:4e:3b:de:
6a:92:f6:50:71:92:a7:5c:a3:61:2f:2b:34:16:5e:27:9f:b2:
16:18:bb:2b:06:84:34:91:e4:44:b9:59:32:2e:de:4e:a8:51:
9f:85:40:65:c3:4b:e1:56:21:e8:e2:d9:44:a2:ea:e6:10:d2:
3d:0a:b4:b8:89:07:50:7d:1b:75:a8:59:49:63:d1:5f:9f:ae:
68:0a:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net