Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: nIIrbjyLYLUyAufr3Gr4Z4y6juZU90pfSU01Aw0X81s=
Subject key identifier: 67:35:16:E3:65:DF:56:AC:F0:4F:9B:75:15:6F:CF:E4:8F:7B:9A:C4
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01962E992ACC3F1956CE8596B877BE486CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0669
Signing time: Sun 13 Apr 2025 10:01:52 +0000
Manifest this update: Sun 13 Apr 2025 10:01:52 +0000
Manifest next update: Mon 14 Apr 2025 10:01:52 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: fPHap2q3LvHB0bu/0mKbqfPi0k8J1bNFyppUAeTqFL0=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:2a:cc:3f:19:56:ce:85:96:b8:77:be:48:6c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Apr 13 10:01:52 2025 GMT
Not After : Apr 14 10:01:52 2025 GMT
Subject: CN=673516e365df56acf04f9b75156fcfe48f7b9ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:59:33:c6:6c:82:28:1a:08:fc:9a:ca:26:
6c:69:cd:7e:35:4b:24:3f:20:f8:06:be:83:b1:0c:
45:cf:d1:0b:84:46:c2:b4:f4:4e:46:11:1a:61:81:
05:97:f5:7a:b3:aa:5a:63:03:1d:8b:d6:a9:04:4e:
65:35:7b:af:39:c4:fe:ae:04:c1:79:95:95:93:b9:
e3:1e:13:d6:bb:5a:a3:74:d4:3b:2e:6c:c9:7b:5a:
d6:af:67:f2:73:c1:04:da:00:98:78:66:bb:6b:75:
b0:35:b4:1f:5e:51:19:f2:e1:14:12:e3:9e:7e:0c:
34:b0:73:c9:aa:8e:38:c3:37:f6:4b:f5:7b:61:f2:
a2:fa:9d:0d:3b:30:94:2b:f1:69:2a:d4:be:b9:e8:
ca:da:b3:be:10:12:57:5f:26:fe:d1:e8:a1:36:5b:
95:25:96:58:fa:81:4e:75:4f:c0:06:07:6b:3e:44:
ed:55:4d:e4:9e:e2:3a:19:c6:a9:31:40:87:12:7a:
34:14:65:0d:4e:5e:5b:53:c6:04:1d:e1:ab:a3:01:
f6:f5:27:59:db:17:7a:5a:a6:6b:0c:8a:43:ba:d6:
30:59:41:16:09:2a:3d:7c:67:d7:23:a3:3d:96:49:
41:ba:87:1b:b4:eb:ce:5d:db:ce:b7:2a:b1:71:1f:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:16:E3:65:DF:56:AC:F0:4F:9B:75:15:6F:CF:E4:8F:7B:9A:C4
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:f5:fd:d9:4b:df:10:9b:de:7a:48:ef:9d:90:67:89:c5:
98:0c:c0:ac:53:b7:6b:76:c2:1e:2d:d7:5f:cc:40:2e:64:87:
7b:14:e7:ac:f9:3a:ca:42:ee:0c:ee:7e:8a:07:68:d4:dd:85:
56:94:49:de:d4:a6:f1:d2:d5:92:49:fb:d9:97:f8:27:57:27:
2d:8b:62:23:7e:86:90:f2:f6:53:eb:29:09:d6:d3:e0:35:b2:
13:3d:38:82:9a:8b:82:f8:25:be:81:f3:31:00:17:7f:d1:58:
b8:97:d4:6e:01:73:6e:71:df:fc:22:bc:ad:41:a7:71:2a:b2:
e8:d3:26:02:31:63:9f:3b:e1:c7:c8:76:c7:53:f8:4f:0f:34:
47:bf:a4:63:64:5e:8f:71:22:cf:4f:4d:34:01:7a:61:f6:44:
85:48:0f:5e:71:b9:1f:e9:e3:4d:30:2d:c3:4e:ca:55:20:56:
3f:dd:c1:10:94:20:d0:ae:04:c4:7d:e8:1e:35:40:99:12:09:
81:73:c5:90:ac:c7:4e:49:f6:93:ff:fa:1f:9c:ae:93:40:3f:
78:d9:82:a5:ee:c8:09:d1:c2:fa:3d:d6:56:8a:c4:25:23:e1:
58:bd:a0:95:28:0e:cc:f2:2e:98:68:2e:a1:d6:d7:82:2b:8d:
12:7b:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net