Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: 54/4q3vy8FxhTdrIyYPc8+BIdKmI9lJV+1H+AOtsA2Y=
Subject key identifier: 32:AB:68:A2:3D:F8:A1:F4:22:84:11:64:49:F1:DF:80:21:DE:4A:9E
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 01962F74C7CB61B9C3E69B7FFC11C3EE7FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 135D
Signing time: Sun 13 Apr 2025 14:01:44 +0000
Manifest this update: Sun 13 Apr 2025 14:01:44 +0000
Manifest next update: Mon 14 Apr 2025 14:01:44 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: y9B5ZkUHVSz6tvbhzSVYFc/KWKCu6IiPIh6nCVHqWq4=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:c7:cb:61:b9:c3:e6:9b:7f:fc:11:c3:ee:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Apr 13 14:01:44 2025 GMT
Not After : Apr 14 14:01:44 2025 GMT
Subject: CN=32ab68a23df8a1f42284116449f1df8021de4a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:93:65:3f:dc:de:f3:1e:ed:33:71:6a:eb:
37:53:0d:a5:6c:24:a4:eb:e2:36:17:43:ae:28:dc:
b5:df:f8:05:95:0d:11:25:69:53:bb:8e:4a:77:40:
de:cb:e3:7b:be:7f:1e:1b:e6:be:7f:b1:11:0f:c4:
b7:3b:fa:b9:69:06:6b:25:41:28:59:c7:30:63:a3:
41:30:46:db:f2:2a:0a:b6:ad:62:90:e1:5a:24:9a:
32:51:66:81:6f:43:be:2f:dd:f4:e2:36:ae:4f:0e:
84:b3:23:c3:66:88:93:94:a7:c0:38:a3:e9:af:d8:
8b:cd:23:85:e1:d4:11:41:19:93:cf:61:bd:33:99:
b9:67:3c:ba:57:3b:16:9c:c0:c0:65:90:3f:8a:cc:
61:8b:40:87:83:48:26:7e:70:d8:11:86:57:01:7d:
6f:ec:37:d6:6d:40:fc:33:d5:86:d7:0f:87:1c:f9:
37:38:9f:a3:63:bf:78:49:58:3b:e1:94:f1:e6:89:
76:8a:25:ef:e8:34:9c:6f:e3:8f:16:23:f3:6a:db:
f8:e7:e9:52:28:a3:3d:47:88:d6:ea:5c:a9:83:f8:
35:6a:b0:17:80:de:ec:14:3c:fb:04:05:bb:e9:cf:
ff:85:f9:bc:c3:e6:36:9a:13:df:9c:46:83:49:f4:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:68:A2:3D:F8:A1:F4:22:84:11:64:49:F1:DF:80:21:DE:4A:9E
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:42:f3:cf:e6:fb:e4:a8:9a:11:a2:c9:1f:b6:f7:c4:5e:
10:71:74:b7:87:f5:b6:53:b9:41:ad:72:2c:d2:05:fd:b4:e6:
e5:eb:55:d2:b7:13:c2:ab:6c:f4:4e:b1:80:4a:e1:83:ba:a5:
0c:45:fc:93:59:c6:9b:17:c7:14:e8:11:e0:bd:f5:fc:80:a8:
6a:2d:29:7e:b1:9d:eb:b9:ce:e0:88:87:2f:85:b3:22:d9:6e:
39:2b:8e:e4:c7:76:a1:af:d7:3b:65:58:c0:41:99:9f:64:45:
05:fb:9d:b3:00:2d:c1:99:8c:3b:e3:b7:e5:67:5a:db:fb:51:
01:b5:08:13:82:f8:93:a2:ef:c4:96:ec:be:1a:b0:09:eb:24:
aa:3f:ea:34:58:6e:e8:3d:22:9a:36:c7:7f:43:71:aa:d9:82:
e5:e3:f0:81:58:e3:43:7d:95:2a:79:55:2d:42:13:40:53:28:
cf:75:9b:12:1e:95:32:54:ea:28:33:cf:df:6c:cc:5d:7a:23:
33:a6:de:e6:cc:10:e4:35:69:d8:f5:ba:dd:ce:7a:2b:f4:f2:
cd:00:0e:38:36:4b:79:99:f7:ff:4c:05:a0:58:66:04:8c:c2:
a5:46:9c:0b:48:49:bc:23:42:d8:da:00:5f:e4:46:9a:78:6a:
a3:27:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net