Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: 4M8mno4dZaGzJ/M6hwqFyO9dhnbuMUBBzlISEEju1Pw=
Subject key identifier: 21:4A:2F:AF:F2:D0:22:F8:72:70:34:A9:F7:0A:1C:82:50:B1:E6:76
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 01962E2B0732B1A7431C12E088D41962A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 08:01:33 +0000
Manifest this update: Sun 13 Apr 2025 08:01:33 +0000
Manifest next update: Mon 14 Apr 2025 08:01:33 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: 0P9aT+C5N8Zd5cqMWxaXK+U7PByTtXMLeDEO5lasvVk=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:07:32:b1:a7:43:1c:12:e0:88:d4:19:62:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Apr 13 08:01:33 2025 GMT
Not After : Apr 14 08:01:33 2025 GMT
Subject: CN=214a2faff2d022f8727034a9f70a1c8250b1e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:9d:3c:60:3a:e6:59:f0:65:3c:4b:7b:54:
13:e5:48:3b:28:e1:fb:7c:44:7e:10:d2:a2:be:5f:
a6:b2:4c:60:b4:11:8d:b1:08:eb:43:7a:55:9e:ed:
19:49:33:9c:4b:93:96:f8:86:7e:e6:73:94:bc:76:
d7:42:0e:0e:e0:19:21:7d:3c:54:b3:f8:94:46:07:
7e:c2:15:6d:1e:76:50:e0:2c:13:87:a2:5c:45:56:
99:70:69:16:09:b5:e1:1e:6e:bd:65:0b:16:7d:8e:
6b:e0:c6:81:58:6d:d1:52:db:27:68:62:07:31:95:
42:ee:d2:22:0c:09:36:ab:9a:2d:bf:4f:57:0f:5d:
aa:bf:a1:58:51:1f:5a:80:81:9a:18:15:1d:85:b0:
c5:7a:55:95:51:cc:9a:7d:5e:80:ce:0d:d6:50:8e:
95:c4:19:70:4b:a7:60:ec:4a:c7:78:ec:b1:42:26:
ab:4e:fa:db:28:95:73:0d:29:e1:9b:78:3e:c8:a5:
ab:45:52:a0:2d:71:e1:4e:ba:b4:aa:88:fe:4b:94:
6e:13:d2:70:9f:eb:3b:15:b0:06:57:76:52:01:ba:
ee:31:fe:e5:8c:a1:d3:fc:50:75:f2:fb:7e:ba:51:
21:10:63:3e:84:a2:fc:47:d9:70:ce:f4:a9:90:46:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:2F:AF:F2:D0:22:F8:72:70:34:A9:F7:0A:1C:82:50:B1:E6:76
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:aa:c6:93:78:20:d4:f5:dc:00:94:fd:42:47:15:31:3c:ce:
bc:68:c5:d7:f5:f9:0d:48:ec:05:56:f2:fa:40:3c:28:8e:20:
22:b7:ef:77:77:e3:50:9c:77:6e:4e:e9:63:0e:57:6e:51:4e:
28:55:2f:a8:da:8c:b8:5a:0e:2d:67:14:f4:43:94:c2:7b:2b:
93:e5:39:f0:cd:66:98:38:dd:58:e7:2c:db:19:22:6c:e4:d1:
c4:7a:ac:db:29:a3:ac:70:13:00:5c:80:2c:d2:00:92:24:ea:
8d:3f:81:56:99:5f:e8:bd:f4:96:f0:43:cc:f1:fc:a6:2d:f3:
60:e8:8f:0d:4a:9d:81:7e:b4:11:52:c0:22:d7:1a:80:9a:17:
61:6d:28:d2:4a:14:15:56:48:be:57:e5:43:1a:1f:0d:4d:45:
c1:db:98:a9:76:ee:ff:f8:0e:58:91:c3:c4:e7:c1:d6:8b:fd:
a4:ea:8e:1b:3c:55:9f:73:56:5e:cc:7e:4b:f2:91:b7:c4:58:
5e:94:81:4f:97:73:88:5d:38:86:90:a9:96:0c:d4:21:5e:cf:
15:a5:19:c2:18:40:f7:4a:f7:ac:99:aa:a8:ee:11:64:54:17:
f9:df:c8:22:6c:af:2e:69:3d:9c:c3:c7:e5:0f:39:30:bd:5f:
33:8a:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net