Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: o8lOotwxJx+j9Yol2IHuz5unGbSeCL0g1aVq5H3jEbc=
Subject key identifier: 8D:B7:0C:DB:57:5F:73:1C:80:80:86:FA:82:BC:E1:BB:56:BE:5C:48
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 01962F74B22E0C3B9A5A90ADCBBF831FBAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 40
Signing time: Sun 13 Apr 2025 14:01:38 +0000
Manifest this update: Sun 13 Apr 2025 14:01:38 +0000
Manifest next update: Mon 14 Apr 2025 14:01:38 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 3QKOXlNRbDVrDeTSZDltdA0ZGr08bhQT873yNyDLoOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:b2:2e:0c:3b:9a:5a:90:ad:cb:bf:83:1f:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Apr 13 14:01:38 2025 GMT
Not After : Apr 14 14:01:38 2025 GMT
Subject: CN=8db70cdb575f731c808086fa82bce1bb56be5c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:86:a3:39:94:e5:ef:b4:b3:4c:3b:ca:1e:
f1:0a:ab:b5:b1:77:cb:77:25:5d:0e:f1:ca:b8:3d:
37:bd:1a:10:e8:a9:5d:cb:35:54:a0:a4:22:57:26:
44:05:d5:df:0e:7a:de:ea:29:ea:ae:06:c3:9e:fb:
a1:96:e8:ef:58:95:a8:e0:bd:55:09:6c:34:a7:72:
ef:be:e6:c4:cb:94:d0:f3:45:44:6b:33:4e:ca:f2:
42:d7:53:ac:7b:a4:55:57:51:53:1c:a4:b8:98:88:
3b:19:a8:bf:14:59:d1:d2:1d:84:c9:61:6d:9c:4a:
9d:69:68:80:95:51:82:de:6c:4d:e7:f7:d6:d2:f0:
c1:7f:46:02:66:51:06:bc:2f:17:82:cf:40:47:a9:
b2:67:86:74:08:89:5d:9c:8b:1d:55:a9:37:27:86:
78:37:c7:89:7f:6a:eb:48:91:4d:dc:6d:3d:60:23:
ec:80:a1:c0:c4:2e:96:57:b1:2e:34:0b:a7:2f:cb:
33:03:d1:b2:2f:24:d3:41:7e:9f:58:de:ac:d8:7f:
24:66:61:09:65:a6:0d:7e:0b:a2:f4:b3:45:e6:02:
cb:8d:05:a0:71:18:bd:cc:33:50:15:67:3d:b4:bc:
57:50:8e:6a:07:18:25:6b:e4:b7:d4:bb:ba:4c:38:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:0C:DB:57:5F:73:1C:80:80:86:FA:82:BC:E1:BB:56:BE:5C:48
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:59:99:ba:e4:89:75:00:c8:0e:5f:db:b7:73:2c:a9:9f:a8:
bb:94:f7:64:dc:28:81:a3:79:1f:fa:00:6f:1a:2b:2d:2d:8e:
80:08:e8:f9:ff:22:9b:e2:3d:0b:76:f9:df:24:e6:09:20:b1:
5b:c2:d4:a5:89:13:89:d6:6e:aa:5f:9a:6a:72:30:76:8a:7a:
bc:85:39:18:7b:ab:e5:98:ec:2c:90:f2:75:0d:d3:0d:1c:17:
79:19:aa:07:e8:fa:0a:1d:b8:e0:0c:1f:ec:03:c4:b2:0a:06:
58:cd:b9:0d:2b:f8:42:99:51:a2:2e:3d:0f:16:b3:1f:91:70:
ac:52:f4:55:75:d7:86:64:6e:2e:e4:4e:a8:31:c7:aa:65:81:
e9:1f:de:81:bd:3c:a8:d3:76:ad:56:4e:10:ee:ce:00:66:4f:
dd:c1:97:3b:90:c1:82:71:57:32:0a:3f:ca:ce:28:e6:d8:ce:
76:94:45:d0:5b:f6:76:94:6a:e2:96:6e:77:a6:52:5c:d5:81:
f2:dd:76:f2:81:50:b6:d0:b3:f1:fa:16:fd:73:0d:41:47:5a:
7d:9b:56:74:09:06:d3:b2:90:93:97:d4:97:60:84:1c:d8:d4:
0f:d3:bf:e0:27:ba:9f:e1:37:38:0e:07:52:5f:db:bc:f9:ca:
c2:b6:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net