Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: nPe26tEPcifOhgC63qTlzoWaoWTMIik62hVCmH9NlL0=
Subject key identifier: DB:4B:84:81:3A:E4:6C:80:2D:DA:12:5E:DE:42:3A:34:EC:6A:DC:EE
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 01962E98EAD4A7E4C8592F004C64B3A3DE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 0F5A
Signing time: Sun 13 Apr 2025 10:01:35 +0000
Manifest this update: Sun 13 Apr 2025 10:01:35 +0000
Manifest next update: Mon 14 Apr 2025 10:01:35 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: EJ9B0nggK1cw/A5ea9R22lHIQoZ6jaGn2GkCXU4BwHs=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:ea:d4:a7:e4:c8:59:2f:00:4c:64:b3:a3:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Apr 13 10:01:35 2025 GMT
Not After : Apr 14 10:01:35 2025 GMT
Subject: CN=db4b84813ae46c802dda125ede423a34ec6adcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:84:c0:92:23:cc:dd:04:64:0e:34:8f:cd:
97:04:a6:00:bd:3c:44:af:e0:1b:ea:d3:bf:bf:fc:
ad:1b:c2:f1:04:82:2f:70:f1:13:ed:2b:4d:44:8b:
cd:a3:fd:24:97:fe:6f:be:ac:d5:b1:01:2a:83:e8:
3b:28:6f:a3:b7:85:26:ea:88:b1:65:02:ed:f9:fc:
82:92:fa:44:b6:9f:f3:bd:23:7b:28:8d:15:66:3e:
fb:3c:dd:a8:30:74:92:5c:2b:53:34:87:90:30:86:
90:fc:97:d1:df:a4:ef:47:f2:65:ba:bf:83:9a:29:
e3:c6:f2:10:a1:1a:5e:b6:94:51:5f:17:1c:4a:b2:
f5:12:4f:0f:b4:e9:c3:a7:10:bd:4d:9c:b3:88:f6:
de:5c:c8:1b:75:3f:03:d8:e4:75:73:f4:97:ae:5d:
c3:18:f3:21:90:5b:3b:56:b9:63:e1:6f:2b:52:f3:
6c:84:5a:97:38:eb:cb:c7:71:0d:63:1c:c4:b5:88:
c7:0f:99:81:57:98:fc:5d:07:38:5e:1f:cf:ce:1a:
e0:69:73:74:68:e8:c1:4a:6f:4a:a1:d9:2a:db:14:
05:1d:8d:3e:34:96:0f:1d:7c:d1:ba:c2:ea:ff:97:
56:47:0e:a8:0f:a3:71:4e:ba:05:02:70:ec:0a:35:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4B:84:81:3A:E4:6C:80:2D:DA:12:5E:DE:42:3A:34:EC:6A:DC:EE
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7c:27:0e:36:e0:dc:f8:75:95:d6:ab:b6:85:4a:16:b9:a4:
5d:d5:b1:e2:f3:54:32:1b:43:05:1f:66:99:4c:1d:69:35:99:
31:a4:06:e3:53:e7:7c:11:ec:e1:25:c3:d2:59:61:33:6c:12:
a6:09:6a:12:e0:fa:e5:8e:04:ad:76:e9:e1:32:9d:5c:49:32:
0d:a2:87:ff:74:68:50:ec:ec:0f:90:e6:04:8e:fc:f1:2f:be:
aa:93:8a:ad:e8:f6:de:8f:f8:95:2e:6f:25:ad:bc:1e:61:96:
76:00:20:43:95:87:28:ac:6f:b2:a2:0f:24:61:04:0c:f7:52:
61:51:f0:96:bf:c0:c5:5a:58:d7:d8:1c:62:c0:b2:8e:f2:5e:
9e:fe:df:d3:5e:f5:c4:3f:63:ad:00:4b:b0:6c:c4:1d:92:43:
a5:2f:b0:5b:5c:25:4b:bc:b3:41:79:29:0d:2d:a4:e4:81:26:
b4:51:e2:33:0a:d0:c3:5e:a7:3f:fe:05:0b:53:11:e5:14:04:
c1:e1:00:0b:6e:04:da:2e:18:db:05:cc:3f:a0:b5:64:d3:47:
6d:ba:1a:f6:bf:86:8b:7d:74:62:be:40:55:5c:0d:99:b3:ee:
98:4c:a5:b2:8c:b5:43:9f:98:9a:40:fa:a8:73:50:15:21:0c:
b6:e7:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net