Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
File: XVn0kNO2myLh4nwya69yMRBW3bg.mft (raw, json)
Hash identifier: 4wdqRacMGwCwV39k0oB+Ud3twxixmKo50gOhG2IFtto=
Subject key identifier: 98:90:CA:AD:09:EB:2F:B8:4F:F4:5F:AC:E6:33:75:70:43:12:E2:82
Authority key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
Certificate issuer: /CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Certificate serial: 01962F073F4D7645D989005F0DA74E86E6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
Manifest number: 0974
Signing time: Sun 13 Apr 2025 12:02:06 +0000
Manifest this update: Sun 13 Apr 2025 12:02:06 +0000
Manifest next update: Mon 14 Apr 2025 12:02:06 +0000
Files and hashes: 1: VRTGeEzF5FtK76qOfPyLSRNqkOo.roa (hash: pOO7nnFTp0Qht5tDg13SMXctJEqxWl0GtVbovHy2WzY=)
2: XVn0kNO2myLh4nwya69yMRBW3bg.crl (hash: s9c/tZVPgovn6emcfFCgQzfT6CInyZ1Bbj0w9g6vD1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:3f:4d:76:45:d9:89:00:5f:0d:a7:4e:86:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Validity
Not Before: Apr 13 12:02:06 2025 GMT
Not After : Apr 14 12:02:06 2025 GMT
Subject: CN=9890caad09eb2fb84ff45face63375704312e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:cf:c4:36:50:d9:1c:f6:13:71:cc:ff:17:
a7:bf:1f:40:cb:10:41:25:14:40:45:cd:cf:dc:22:
18:e0:6e:dd:fe:4c:38:54:22:a7:ee:e6:71:6e:78:
33:24:6e:9e:85:b6:36:f5:db:e5:79:e6:3b:d7:85:
eb:70:e0:76:33:37:3b:5d:21:46:47:38:89:8f:6a:
f7:1f:1b:b2:df:a2:a1:11:2e:a6:ff:5c:5f:81:02:
c2:2a:b1:81:d2:8e:f3:ea:2a:1a:ea:26:0d:4a:7c:
1a:bd:1e:2a:96:4d:0c:9a:2e:e5:d2:79:24:49:24:
0d:28:81:ff:80:ae:9d:b1:b4:58:7c:ca:3b:a9:6c:
09:35:be:09:c3:36:97:7c:73:c9:70:ea:25:41:53:
dc:a2:1a:4c:cb:37:c4:04:c8:e9:5e:ed:db:6e:4a:
01:78:8e:80:c3:f5:b3:31:f6:5f:5d:34:d0:2d:bf:
ea:da:3a:34:fd:04:ca:d4:db:30:1d:7b:21:82:b2:
c6:a8:f4:af:80:27:98:ce:c9:b4:a1:95:46:57:3e:
03:ba:87:4e:6c:4c:53:12:48:e4:84:4c:0d:37:b0:
e4:aa:d6:0a:86:9a:f8:ab:63:2b:2d:72:57:2b:f2:
25:d8:5c:7a:d8:90:40:ac:4e:9a:fd:e2:ac:27:36:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:CA:AD:09:EB:2F:B8:4F:F4:5F:AC:E6:33:75:70:43:12:E2:82
X509v3 Authority Key Identifier:
keyid:5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:7a:aa:5c:f2:f9:24:7d:18:29:b4:46:34:77:92:32:fa:
9e:cf:85:1b:bc:aa:f7:56:3a:99:75:a3:d1:3f:19:05:08:f2:
59:66:8e:2b:fe:a8:d1:29:11:69:23:97:4b:f7:f5:63:cc:4c:
6e:41:72:0e:f1:67:be:9a:6c:8d:de:c5:2c:34:a2:60:9e:23:
34:e0:72:f0:e9:2d:94:ee:4d:0c:06:29:03:44:fb:51:a9:cc:
08:60:c4:05:81:05:0e:fb:b3:22:1a:6b:af:43:c9:9b:f3:f1:
61:c2:bf:54:0f:67:37:91:aa:c8:14:e1:f6:20:4e:ae:5d:51:
6f:08:cf:5a:be:87:b6:77:fe:e5:02:6a:f1:76:d6:fe:1e:87:
6c:64:20:ca:cb:97:2f:43:5b:de:09:1c:2c:55:72:0a:0b:f1:
24:ec:41:f7:89:d5:2d:e4:03:d1:c1:8b:96:e4:ee:1d:ac:91:
64:e4:03:c3:0a:be:52:85:89:f6:8e:eb:10:75:39:a4:f2:b7:
d8:f7:48:1b:dc:16:db:bf:c3:fd:a5:7c:c6:a0:6a:c0:a9:3c:
a5:33:60:82:d7:25:ac:10:95:03:53:ec:c9:3e:5e:d1:e3:7e:
f1:ac:81:8c:da:d3:34:be:37:3f:bb:63:89:5e:a7:e2:b1:9b:
1e:27:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net