
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: 1O0BQykzzxU4QvPwI825CHBgaLV5+Y2P2+IDjsIeSLU=
Subject key identifier: 42:7E:4A:08:37:CD:4A:16:1E:17:34:F6:DD:45:2E:4A:5E:56:F8:7C
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 01962E2B11E9FBC5AF5CEB08FAB6625165F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 0208
Signing time: Sun 13 Apr 2025 08:01:36 +0000
Manifest this update: Sun 13 Apr 2025 08:01:36 +0000
Manifest next update: Mon 14 Apr 2025 08:01:36 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: 3ZvuTmDhLSKknObdi2eY83tnf42vSsV9AUYWopv3cew=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:11:e9:fb:c5:af:5c:eb:08:fa:b6:62:51:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Apr 13 08:01:36 2025 GMT
Not After : Apr 14 08:01:36 2025 GMT
Subject: CN=427e4a0837cd4a161e1734f6dd452e4a5e56f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:b8:46:19:a1:1b:d2:98:3d:43:00:c2:93:
5d:17:f4:51:c7:51:50:e6:0e:eb:7c:40:47:d5:58:
ed:af:86:7f:33:0e:12:da:bb:fe:c0:22:0e:dc:d3:
f1:5b:55:0a:34:36:41:53:59:2e:16:ea:17:66:01:
3e:05:0d:5c:68:a9:7f:d7:6d:3f:ab:be:5a:47:b2:
e0:bb:b0:06:4f:23:c2:cb:61:5e:0e:73:f4:aa:64:
69:37:0a:21:38:7c:d8:7e:24:a5:8e:09:4f:ad:18:
66:a9:91:24:4b:d9:61:e3:40:10:dd:38:cd:2e:58:
ab:c2:c4:d4:5c:75:10:53:f5:63:ad:cb:88:1f:18:
1c:08:2e:90:a4:d5:d1:70:9d:99:53:be:f4:82:94:
49:22:66:df:97:f1:53:c1:be:25:37:aa:37:80:95:
9b:48:39:ca:c2:36:08:37:c9:5a:b4:5d:08:01:41:
fc:d3:2e:0b:13:98:9c:e7:ff:f6:97:e7:94:3f:0c:
3b:b1:39:f4:30:42:47:ec:bf:17:6a:d6:24:82:71:
fa:51:7a:ce:d8:64:c9:28:6e:c0:80:7f:4e:53:0e:
c8:9e:bf:6e:5e:79:12:53:71:3e:77:e7:a2:fa:d8:
fa:94:aa:0b:57:9c:45:26:be:85:15:30:68:05:59:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7E:4A:08:37:CD:4A:16:1E:17:34:F6:DD:45:2E:4A:5E:56:F8:7C
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:64:6e:ae:f5:cf:ac:de:6f:c0:ba:2d:81:ac:53:df:53:2c:
40:68:85:06:f9:54:8c:f4:11:93:35:4b:b7:da:be:16:96:7e:
19:de:a5:2e:e0:b3:73:9d:57:af:b3:a1:26:d2:e5:4e:a5:67:
fd:df:1e:93:65:84:b2:b3:cb:a4:c4:52:95:66:2e:f5:b4:4a:
e0:f1:61:48:a1:00:46:09:5b:1d:2a:0f:73:52:27:69:bc:91:
b2:8b:43:34:32:fc:02:2d:70:d3:cd:31:4c:69:44:1f:d2:95:
50:2a:a5:e0:c5:ed:02:b4:b9:3b:1d:1d:94:38:96:3e:15:cd:
3c:97:ec:ee:c6:f4:44:96:93:38:b3:31:c4:ae:22:6e:58:92:
ba:0a:e5:3a:84:0c:0c:79:bd:24:51:10:3a:d2:90:9e:57:55:
35:44:c0:22:3f:b4:86:cd:b1:d2:1e:72:ef:ef:fd:c2:83:8d:
00:86:d2:b6:84:b5:cf:5f:73:ce:71:30:77:fe:00:4b:3c:6a:
b7:67:54:cf:02:6f:a8:17:cb:38:d4:5d:ef:6d:a2:4d:6f:94:
d2:c4:6b:e9:5e:26:e5:c9:ae:75:7b:13:05:14:8e:61:60:1b:
ad:23:3e:0d:52:79:49:2b:c1:7c:5a:33:0f:14:80:ff:4f:8b:
ab:e3:ac:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxHp+8WvXOsI+rZiUWX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5
NGY4MmUwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
Eyg0MjdlNGEwODM3Y2Q0YTE2MWUxNzM0ZjZkZDQ1MmU0YTVlNTZmODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlia4RhmhG9KYPUMAwpNdF/RRx1FQ
5g7rfEBH1Vjtr4Z/Mw4S2rv+wCIO3NPxW1UKNDZBU1kuFuoXZgE+BQ1caKl/120/
q75aR7Lgu7AGTyPCy2FeDnP0qmRpNwohOHzYfiSljglPrRhmqZEkS9lh40AQ3TjN
LlirwsTUXHUQU/VjrcuIHxgcCC6QpNXRcJ2ZU770gpRJImbfl/FTwb4lN6o3gJWb
SDnKwjYIN8latF0IAUH80y4LE5ic5//2l+eUPww7sTn0MEJH7L8XatYkgnH6UXrO
2GTJKG7AgH9OUw7Inr9uXnkSU3E+d+ei+tj6lKoLV5xFJr6FFTBoBVlWYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ+Sgg3zUoWHhc09t1FLkpeVvh8MB8GA1UdIwQY
MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt
NDM1YWYxNGFhMDdhLzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh
LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmRurvXP
rN5vwLotgaxT31MsQGiFBvlUjPQRkzVLt9q+FpZ+Gd6lLuCzc51Xr7OhJtLlTqVn
/d8ek2WEsrPLpMRSlWYu9bRK4PFhSKEARglbHSoPc1InabyRsotDNDL8Ai1w080x
TGlEH9KVUCql4MXtArS5Ox0dlDiWPhXNPJfs7sb0RJaTOLMxxK4ibliSugrlOoQM
DHm9JFEQOtKQnldVNUTAIj+0hs2x0h5y7+/9woONAIbStoS1z19zznEwd/4ASzxq
t2dUzwJvqBfLONRd722iTW+U0sRr6V4m5cmudXsTBRSOYWAbrSM+DVJ5SSvBfFoz
DxSA/0+Lq+OstQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net