Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: tDqH3yzpz2fDIyrZv5Ij2Ppv680LeQKs6U8LzNLx9vw=
Subject key identifier: F4:C9:55:09:C2:2E:25:2D:1D:2C:BA:FF:8B:64:6A:2B:63:84:DA:67
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 01962E998FAF34FB3680EB366A30975636C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 10:02:17 +0000
Manifest this update: Sun 13 Apr 2025 10:02:17 +0000
Manifest next update: Mon 14 Apr 2025 10:02:17 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: jTjR1pw0cztziTIJYKHeyQ0VWDkdEXUUSEH0kFPYDuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:8f:af:34:fb:36:80:eb:36:6a:30:97:56:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Apr 13 10:02:17 2025 GMT
Not After : Apr 14 10:02:17 2025 GMT
Subject: CN=f4c95509c22e252d1d2cbaff8b646a2b6384da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:de:20:08:13:f9:85:f7:62:24:03:1c:dc:
2e:72:68:c4:57:b2:39:69:10:7f:46:43:00:93:9b:
a6:4c:f0:f0:e2:3f:f5:9b:55:6a:71:28:71:66:2c:
9b:95:05:3d:ba:e3:03:df:c1:69:0d:f0:ab:88:d7:
d4:44:23:56:db:72:3a:90:96:f9:9a:9a:c4:6b:d6:
98:12:66:9b:68:cb:6a:d6:4d:da:70:3b:68:7e:2e:
da:4c:1f:19:e0:87:46:10:9b:f4:01:e3:4d:f8:f3:
65:0d:2c:cb:c4:6c:0c:51:0d:ca:41:26:57:29:6b:
44:6b:ef:05:84:f8:cb:92:a5:c7:3b:c1:d1:d8:55:
f8:99:b4:66:56:c0:53:46:9e:92:d7:f3:bc:39:6e:
71:06:bb:1f:79:a1:9e:fa:9c:60:a0:ec:ce:a4:b6:
12:ef:6f:0f:95:3d:98:83:3a:c8:1e:27:07:68:57:
48:c2:0b:c7:22:c0:e1:11:d9:77:fe:8f:22:15:9f:
45:ea:84:51:4f:ad:47:52:63:16:a3:a1:ca:72:5c:
b9:aa:45:02:86:b0:e9:f5:e8:7d:94:f5:56:5c:d2:
c8:ec:9b:21:34:a9:36:49:2c:6d:78:b2:4d:e9:d5:
1f:e8:40:c6:c9:08:7b:e5:07:c8:c3:b3:70:f8:4d:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:55:09:C2:2E:25:2D:1D:2C:BA:FF:8B:64:6A:2B:63:84:DA:67
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:cf:58:c1:62:c4:fc:e1:47:55:f6:e8:3f:d3:a2:f2:02:
9e:ed:df:96:be:0d:54:54:76:c7:7c:f3:da:6a:6f:33:39:ba:
6f:2a:39:e2:74:75:bf:56:ce:e4:86:19:b2:00:7b:13:97:40:
11:5d:20:94:de:ab:5a:08:cc:44:93:4b:09:0a:8c:e8:71:e7:
5f:13:0f:d3:9f:0e:87:1e:72:22:88:e1:98:b2:5c:b4:31:47:
61:35:cc:78:d6:6a:c2:ae:7c:94:c6:89:a8:26:fb:22:90:5a:
6a:e1:ab:54:7c:09:a1:f6:85:a2:33:41:6b:ad:e0:61:13:b1:
41:81:65:e6:e6:20:da:57:d1:7d:fb:a6:3b:56:96:5a:c6:9d:
9a:99:7f:26:85:b6:bd:46:95:ab:3b:4c:a1:e3:11:19:a5:4a:
67:07:61:c0:05:28:84:fd:d0:64:a8:b1:4f:5e:06:d2:34:c5:
cc:a0:80:82:a2:82:4c:d4:de:f4:2f:61:5e:87:88:7b:8c:85:
58:74:14:87:d7:77:7b:2d:db:05:a4:48:15:4d:b0:ec:62:ad:
cd:22:6f:3f:b6:ba:a6:1b:9b:af:d8:2c:71:9c:fb:8c:3a:aa:
46:9e:d6:6a:62:e5:df:85:8e:87:b2:9d:9f:63:34:b2:7f:25:
86:8f:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net