Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: 5gkfkgh7555EBb39kfVkfA03nbOvokjfIgD217XeDeM=
Subject key identifier: 24:6D:25:AA:DE:F4:B0:77:C2:D3:18:1F:6C:31:85:F8:19:6E:B9:30
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 01962E999DC5FCB7CF3AA46FD5C3FBE330B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 14ED
Signing time: Sun 13 Apr 2025 10:02:21 +0000
Manifest this update: Sun 13 Apr 2025 10:02:21 +0000
Manifest next update: Mon 14 Apr 2025 10:02:21 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: d6Fi4JXNr6fHyMgsp+MSvIXf3vSWNI6IEmM1Zn1XWEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:9d:c5:fc:b7:cf:3a:a4:6f:d5:c3:fb:e3:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Apr 13 10:02:21 2025 GMT
Not After : Apr 14 10:02:21 2025 GMT
Subject: CN=246d25aadef4b077c2d3181f6c3185f8196eb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:39:6e:bd:be:d5:a5:ca:7d:4c:4f:fd:c7:
ad:d3:b8:ce:91:d6:17:96:22:5d:5e:f2:e7:24:3b:
00:52:bd:e8:5e:12:fc:f0:7d:05:5b:25:7f:80:14:
29:c0:7d:0a:bb:ca:61:49:27:d0:c4:98:42:52:1c:
7b:b4:e6:57:45:39:aa:66:ea:35:50:1c:f1:e3:56:
d1:e1:b5:30:b5:69:3f:94:ec:14:ba:e1:b3:67:74:
8c:51:aa:e2:50:31:c5:e3:31:ab:af:27:0c:f4:75:
19:ed:a4:bc:39:9e:fc:46:de:25:bb:3e:c0:cd:51:
aa:a6:d4:ed:e4:b5:7c:95:32:1c:93:e9:ce:9f:7b:
d4:9d:57:48:af:60:7a:e3:d9:aa:a1:9f:5b:62:ea:
ab:1c:9f:45:a1:5b:02:82:f7:a0:09:ff:68:5d:25:
c9:6c:d3:3a:f2:8b:f9:80:70:6a:16:61:cd:51:9c:
17:2c:78:fb:c5:60:bf:fd:d0:1d:31:89:cc:10:aa:
fd:de:8d:c9:ac:ce:42:cf:f2:90:fb:62:3a:34:e0:
e1:6c:82:91:75:c7:93:75:39:2e:ed:91:eb:06:0e:
a1:df:c7:f4:ac:5c:80:5d:90:a6:7c:0a:0d:c1:bf:
ed:36:47:d6:07:f8:6a:db:cb:22:05:e5:95:78:6d:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6D:25:AA:DE:F4:B0:77:C2:D3:18:1F:6C:31:85:F8:19:6E:B9:30
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:03:79:64:7b:8a:63:2d:d6:14:9e:d9:54:50:4f:1c:03:02:
e6:73:ee:69:11:56:6e:fb:1d:33:df:e2:46:7c:27:74:ab:93:
82:77:f9:0e:85:90:74:a3:31:7f:c4:12:64:72:fb:5b:11:7a:
34:f2:7d:28:bc:25:36:79:9c:0c:36:44:04:7a:fa:cc:17:63:
22:6e:cd:e0:4d:dd:d5:ce:66:3e:1e:6b:d6:dd:4b:c4:17:d1:
dc:e1:ad:97:49:aa:c8:37:aa:2d:ec:56:8a:6a:e3:25:c0:e0:
f6:68:ee:c2:52:6e:2f:5f:03:23:57:57:30:dd:e6:c1:eb:05:
94:af:ae:d6:a9:64:93:6f:5b:2a:a5:ec:47:c0:bb:63:4a:ca:
80:87:15:d2:0e:ee:22:2c:f4:d2:87:6a:17:bd:f0:51:96:f2:
94:58:a0:e3:bf:03:76:b3:67:1d:09:c8:5d:da:8f:e5:7a:0c:
c7:fd:3f:53:75:34:40:94:20:d6:8a:6e:09:5d:b4:0f:92:16:
e9:68:52:d9:96:ce:5d:ca:2f:41:1c:f2:b9:c3:18:ee:17:1b:
d0:0c:0a:df:06:d6:e4:57:be:85:ce:7d:68:3b:0b:8a:03:eb:
f8:96:9e:ae:00:16:0f:7e:63:a2:e7:b0:4d:b5:b8:cd:30:53:
71:e0:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net