Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: nlkRbHxt+CdaFGlgkHh2UzMAxCoSeJklP4Urf+mojbs=
Subject key identifier: 5C:96:5E:EC:BD:00:75:B3:93:51:F9:82:06:87:A2:BB:5F:BB:89:9C
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01962DF3EE6926E77F3096CD0F948C242301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1291
Signing time: Sun 13 Apr 2025 07:01:23 +0000
Manifest this update: Sun 13 Apr 2025 07:01:23 +0000
Manifest next update: Mon 14 Apr 2025 07:01:23 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: L+KvCQybf/91PSxeSvJeVTO0fp/1hcVM2xzBbhz2ZVg=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:ee:69:26:e7:7f:30:96:cd:0f:94:8c:24:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Apr 13 07:01:23 2025 GMT
Not After : Apr 14 07:01:23 2025 GMT
Subject: CN=5c965eecbd0075b39351f9820687a2bb5fbb899c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:14:c4:d4:23:fe:39:a8:d2:d1:f1:52:42:
5b:18:3b:5f:46:5f:4e:af:cf:a8:ec:3f:cf:01:d2:
eb:1d:3a:81:95:b4:f9:a3:ed:a5:d4:e7:fd:61:39:
76:bc:a3:4e:d4:f2:d2:df:5e:f9:bd:a0:de:49:5d:
15:0c:7a:85:18:e5:e6:c2:41:da:5a:f4:a1:79:bb:
70:ec:d5:cb:c2:c0:f6:fc:90:cd:fa:b2:73:38:41:
09:cb:c6:52:10:79:cd:84:2c:05:94:91:2e:9b:a4:
21:fb:f8:c3:aa:ee:5a:5d:2c:03:ed:ab:28:c9:cc:
66:d8:3a:27:52:0b:06:12:db:46:68:15:f9:5d:26:
fa:9b:2d:0e:3c:c9:9c:a0:c4:6c:ca:6d:1b:36:ce:
ea:ff:50:76:cb:3d:ef:0f:7f:53:41:73:00:2c:8e:
77:60:50:2c:73:ea:2a:62:a6:34:cd:5d:66:77:b0:
82:46:d8:11:3c:04:f0:be:65:25:d4:81:0a:80:7d:
34:85:fb:51:52:00:4c:69:71:00:bc:21:5f:3b:08:
d5:f9:d1:e3:7e:cf:69:5d:0d:f2:a5:a5:c1:d8:c7:
19:4a:d1:2f:bc:eb:d9:b6:fc:da:c3:07:17:d1:de:
fd:48:95:d5:c6:a5:e6:ca:9c:c5:a4:72:2f:95:64:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:5E:EC:BD:00:75:B3:93:51:F9:82:06:87:A2:BB:5F:BB:89:9C
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:17:e4:fc:88:dd:a5:15:b1:67:b1:e4:7c:76:ef:ba:ca:
23:8c:d2:41:51:06:bd:6a:0a:20:f8:4a:ee:ae:0e:1f:50:49:
e0:c2:f8:11:f9:56:be:74:8a:23:00:f1:59:72:96:e2:85:36:
07:d4:bb:45:26:36:ba:2e:03:ea:71:7c:6e:b6:20:6f:08:e9:
46:a5:66:87:54:b7:8b:9d:d0:29:dd:59:37:ec:3f:a6:d5:59:
55:7b:84:b3:b0:5f:c1:94:c8:6a:76:87:14:09:e9:f2:cf:b8:
d0:6d:64:8e:74:aa:c2:35:75:c4:1d:d0:07:aa:f3:df:d0:ae:
bd:0d:75:56:46:00:7e:50:0e:b4:f0:0b:e9:84:9a:de:6e:21:
a7:d6:77:a7:f1:51:51:2d:29:ed:fd:4d:cd:62:e8:9d:11:63:
12:f1:75:a2:f7:08:62:72:3a:ee:93:bc:a3:8d:d1:c6:97:72:
12:01:82:43:0c:60:ad:a8:b0:e2:00:1e:1c:51:8c:97:ce:12:
57:fc:7b:d9:e7:f8:71:cd:31:25:44:fc:c6:4b:c5:3e:69:ad:
fc:3e:0a:16:ee:01:e3:50:9c:85:2f:52:e8:00:21:d7:58:fd:
56:0d:b6:9c:4d:12:47:a2:71:0f:62:83:dc:5b:db:e1:ef:52:
a3:b7:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net