Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: tqZDx/in2wxka6QuAu6I3tva5QshPmJYL4RVrLdy54M=
Subject key identifier: 55:EB:4B:2C:05:31:B2:58:66:83:4B:AB:9C:D9:F2:38:D1:10:8B:7B
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01962E98F72889FA1592EFCEB85585F9ACDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 14B8
Signing time: Sun 13 Apr 2025 10:01:38 +0000
Manifest this update: Sun 13 Apr 2025 10:01:38 +0000
Manifest next update: Mon 14 Apr 2025 10:01:38 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: DIMKDFV7P2v55krdyw1xp95oDoUzBuWg6RJreVRAn6Y=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:f7:28:89:fa:15:92:ef:ce:b8:55:85:f9:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Apr 13 10:01:38 2025 GMT
Not After : Apr 14 10:01:38 2025 GMT
Subject: CN=55eb4b2c0531b25866834bab9cd9f238d1108b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:d4:a0:a3:77:ba:50:20:22:08:7b:2c:b5:
44:94:78:0d:bf:32:5a:a3:7f:8b:b8:0b:4f:8a:16:
13:c8:97:c9:20:1e:7e:d0:1c:b0:a4:8a:c0:41:6b:
86:98:f0:5f:87:f5:89:08:be:f2:bf:88:43:7d:2b:
89:22:4c:5f:19:2d:6f:94:e8:20:51:e8:7b:fc:4e:
13:84:73:64:11:83:c1:27:c0:ab:30:b8:f0:02:9d:
cb:81:f5:14:dd:3a:8e:f4:ed:63:b4:77:02:50:e0:
4e:c8:c9:12:56:fc:0e:ab:c7:63:ee:c7:32:39:59:
7f:a4:9c:4b:26:bf:71:ef:4d:84:95:e3:0f:ef:03:
3b:43:89:53:8f:54:a3:94:fd:66:cd:84:47:dd:1b:
3a:2e:22:c0:9f:7e:68:15:f9:8b:e1:ce:aa:dc:5d:
9c:83:b8:61:dc:6e:16:0d:b4:e5:3d:f5:25:0f:cc:
76:bb:30:a0:42:45:e2:a7:a6:a1:a6:2c:97:4a:19:
62:a9:8d:24:b7:63:b4:22:35:e3:65:da:fb:9d:cf:
e3:62:63:7b:bb:aa:ef:cc:ef:0e:73:a9:96:f5:ae:
72:01:c2:44:f7:47:c6:6e:d4:8e:78:27:c0:70:f7:
83:64:78:01:41:3c:3a:38:a9:90:08:1e:01:be:b9:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:4B:2C:05:31:B2:58:66:83:4B:AB:9C:D9:F2:38:D1:10:8B:7B
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:74:59:8d:c4:6e:7e:bd:61:89:e0:54:5d:2a:89:50:42:8e:
c8:69:cc:cc:48:4f:3c:2c:74:37:fe:88:d8:25:45:84:14:b2:
87:1c:8c:e1:f6:d7:51:8d:cf:c2:5c:20:3b:26:5b:3c:a2:05:
0e:74:9d:b8:af:d6:d5:79:ac:46:80:d7:e0:45:91:68:9e:4f:
13:90:48:80:76:de:ba:d4:d5:1d:e4:72:b2:81:ec:f7:c8:ae:
cc:34:26:56:f7:55:74:e6:e4:12:dc:b6:c8:69:a8:21:51:45:
85:f8:2b:88:1d:11:04:1f:d2:30:bf:3c:03:e7:e3:3d:8c:92:
aa:ff:2c:a7:49:77:8b:0f:b3:8a:c0:ce:4a:09:ef:29:e7:e3:
17:e1:5f:dc:02:f7:eb:ef:c3:b3:3e:8f:f4:08:97:c2:12:65:
9f:aa:7d:9d:1e:18:0c:3b:a0:8a:d6:32:cf:a0:bd:02:c5:0d:
66:54:7a:5a:6b:bb:21:58:09:3c:02:86:78:a4:7a:c1:0e:23:
0e:eb:70:fd:49:ea:8a:8b:ed:73:b4:ac:c5:ff:7c:32:2b:62:
2d:f9:57:90:4b:31:f4:25:4c:ca:f1:c7:56:f7:cc:9e:12:c6:
13:17:14:89:7e:02:11:cb:cc:bd:51:6e:33:62:85:08:1e:16:
3f:16:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net