Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: YpQBmPGGMLfzMQJh6MPyvavzNVGix6YdVrqzDs28Kkk=
Subject key identifier: D9:DB:57:1D:38:5C:D1:4C:AD:5E:17:CC:D0:84:C9:F0:DC:D4:C9:DF
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01962DF43E64BD1EC6E833536B8FBD9DC717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0AEA
Signing time: Sun 13 Apr 2025 07:01:43 +0000
Manifest this update: Sun 13 Apr 2025 07:01:43 +0000
Manifest next update: Mon 14 Apr 2025 07:01:43 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: c6Kp4WZSCNPsFaRPV2qlg7vxma7nDPIaAT03OIxBWH4=)
2: DQo4EErqs46yA4QIpyLHGlOprVU.roa (hash: jpEUtUNk7NIqvU0XQCmCZgYXNkApAZ2zVdQgWdhDGWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:3e:64:bd:1e:c6:e8:33:53:6b:8f:bd:9d:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Apr 13 07:01:43 2025 GMT
Not After : Apr 14 07:01:43 2025 GMT
Subject: CN=d9db571d385cd14cad5e17ccd084c9f0dcd4c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:f5:c8:2b:74:4f:9d:ee:af:2e:28:63:04:
d2:07:ed:68:f1:2f:0a:3b:7c:97:bb:8a:7b:42:42:
16:d9:86:ec:d6:e1:84:21:67:b6:30:1c:2e:f7:d2:
15:c4:c8:db:15:8a:34:3f:63:a7:5e:c9:2a:65:51:
fe:6c:79:56:5f:e1:0e:1a:d6:95:a5:c7:00:9a:81:
f4:34:43:1e:91:41:c5:77:23:cc:22:1b:e3:91:47:
a1:85:53:1c:eb:44:61:4d:85:28:3e:9b:66:82:1b:
a1:e9:e6:fb:6e:d6:b0:c8:87:2f:0d:f0:7f:98:ef:
80:fc:f9:b1:51:d7:91:a3:ac:87:af:11:9b:d8:c0:
1f:dd:78:b3:25:06:46:02:15:0f:30:a2:82:01:d9:
ee:3f:98:79:54:98:cf:af:f6:2b:ca:a7:e8:86:9d:
b7:4a:b0:5d:ef:e2:b3:16:80:ad:f5:af:83:2e:96:
d7:08:ee:60:76:7e:2d:f5:88:25:3d:48:6d:bf:c8:
56:fe:57:79:fe:86:36:9d:6c:08:9d:0f:05:e2:1d:
99:78:54:84:95:ed:07:b2:11:66:c5:d2:05:34:62:
ef:a3:8c:03:8f:cb:bb:49:90:d6:96:c0:f8:56:97:
f9:56:a1:13:30:79:82:d4:3a:49:ff:a8:5b:c0:c0:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:57:1D:38:5C:D1:4C:AD:5E:17:CC:D0:84:C9:F0:DC:D4:C9:DF
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dd:dc:e3:51:5a:a0:19:b7:dc:04:bb:54:c3:e1:2d:46:cd:
e3:8b:d7:cf:95:83:30:57:65:be:dd:40:30:ac:b5:a5:4f:44:
15:b8:15:8f:e5:bb:f8:68:b5:a1:46:03:bd:3b:c3:e6:29:32:
45:d2:d0:fb:3a:ef:4d:fa:09:9c:cc:45:c7:50:42:fd:09:5e:
9b:ef:00:07:a0:de:5b:06:6c:44:f4:9f:d4:f8:6a:a0:a3:cd:
02:2c:c9:3f:8f:e8:02:cf:fa:52:d6:16:7c:86:c0:fb:9d:b4:
de:74:b2:81:c8:b6:9b:01:9e:87:18:e6:26:7e:0f:7e:bb:01:
13:93:ee:ac:8b:cc:18:07:e1:33:06:0a:47:0a:1d:33:a8:d1:
b0:3f:fd:05:60:b6:7d:a2:14:ae:48:4c:36:61:6c:60:ff:62:
20:f9:28:2d:1b:9b:c4:cb:ed:66:16:12:40:da:70:00:62:6c:
02:83:50:61:02:24:12:35:b7:75:5d:00:70:d3:a1:71:f9:4d:
3c:c9:20:50:19:66:5d:d0:12:43:b6:46:e1:ea:5e:ef:94:bc:
3c:e1:a1:d1:cf:37:1c:b2:4e:7e:b4:53:9c:49:84:30:ef:07:
2c:dc:f9:0d:c7:cd:07:06:37:86:16:6e:be:c5:6e:bc:1e:a1:
ff:15:cd:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D5kvR7G6DNTa4+9nccXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjdhN2I5ZGU3NjdlYjk3ZGI2NGU1MTY0Nzg0OTQ2MzNi
ZDU0ZWEwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EyhkOWRiNTcxZDM4NWNkMTRjYWQ1ZTE3Y2NkMDg0YzlmMGRjZDRjOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46H1yCt0T53ury4oYwTSB+1o8S8K
O3yXu4p7QkIW2Ybs1uGEIWe2MBwu99IVxMjbFYo0P2OnXskqZVH+bHlWX+EOGtaV
pccAmoH0NEMekUHFdyPMIhvjkUehhVMc60RhTYUoPptmghuh6eb7btawyIcvDfB/
mO+A/PmxUdeRo6yHrxGb2MAf3XizJQZGAhUPMKKCAdnuP5h5VJjPr/Yryqfohp23
SrBd7+KzFoCt9a+DLpbXCO5gdn4t9YglPUhtv8hW/ld5/oY2nWwInQ8F4h2ZeFSE
le0HshFmxdIFNGLvo4wDj8u7SZDWlsD4Vpf5VqETMHmC1DpJ/6hbwMAVSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnbVx04XNFMrV4XzNCEyfDc1MnfMB8GA1UdIwQY
MBaAFOBnp7nedn65fbZOUWR4SUYzvVTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYt
NzY4ZjNkNmVlMTllLzEvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYtNzY4ZjNkNmVlMTll
LzEvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht3c41Fa
oBm33AS7VMPhLUbN44vXz5WDMFdlvt1AMKy1pU9EFbgVj+W7+Gi1oUYDvTvD5iky
RdLQ+zrvTfoJnMxFx1BC/Qlem+8AB6DeWwZsRPSf1PhqoKPNAizJP4/oAs/6UtYW
fIbA+5203nSygci2mwGehxjmJn4PfrsBE5PurIvMGAfhMwYKRwodM6jRsD/9BWC2
faIUrkhMNmFsYP9iIPkoLRubxMvtZhYSQNpwAGJsAoNQYQIkEjW3dV0AcNOhcflN
PMkgUBlmXdASQ7ZG4epe75S8POGh0c83HLJOfrRTnEmEMO8HLNz5DcfNBwY3hhZu
vsVuvB6h/xXNKA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net