Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: MomhpBVfJjSDDxOl2F4sGqXW0PGF9pPu2u7uVD9xLs8=
Subject key identifier: DC:5D:18:F0:B6:73:79:70:47:BB:91:8C:96:E0:A0:26:62:FC:E3:29
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01962F74A76361FAEDD42A5BCF52ADDBEDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 14:01:36 +0000
Manifest this update: Sun 13 Apr 2025 14:01:36 +0000
Manifest next update: Mon 14 Apr 2025 14:01:36 +0000
Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: egFpzLd9nbnkuhv6snxaL38kM8zeMjVqoVvuqIqWdQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:a7:63:61:fa:ed:d4:2a:5b:cf:52:ad:db:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Apr 13 14:01:36 2025 GMT
Not After : Apr 14 14:01:36 2025 GMT
Subject: CN=dc5d18f0b673797047bb918c96e0a02662fce329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:d2:18:ae:ff:e1:2e:03:f1:01:01:c2:28:
7f:ae:b8:d2:5c:1d:b8:9d:f9:2b:df:f6:c3:26:36:
92:51:ee:c3:6d:ea:23:e3:c5:fb:44:b4:d6:45:49:
53:a4:a6:37:bf:d8:f6:6d:01:96:6a:54:43:48:63:
a6:1e:0e:68:7e:f2:1f:8e:cc:8b:ab:34:31:55:8f:
27:01:9e:fe:67:16:2d:60:f1:c6:ee:dd:d4:3c:cc:
1d:fb:70:3f:6c:4c:2a:52:73:02:2c:68:ee:25:61:
c6:f6:f3:96:6a:4a:be:d9:f6:c6:7b:cc:19:0c:9a:
c6:4c:f2:5f:94:db:f1:69:3c:2c:3e:2e:b6:aa:95:
bc:48:3b:2f:aa:f9:32:46:0b:dc:1b:e2:3d:01:b1:
5a:44:3e:90:d8:12:4c:5b:b6:01:80:c0:b4:a9:dd:
7f:3d:74:1e:e0:7c:6b:ab:4d:61:30:d9:b4:f3:fe:
3a:6a:a2:f1:03:60:a3:51:cb:62:44:d5:d6:bb:55:
09:ad:ef:a1:16:ff:b2:73:67:c1:33:8b:12:91:c9:
be:f4:e5:1e:56:5d:76:62:14:b2:a8:0a:eb:87:b6:
73:7e:24:b3:38:28:1a:08:aa:ab:a9:50:8a:15:7b:
6a:41:5e:4c:00:2a:46:e7:3b:3c:71:33:1d:34:01:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:18:F0:B6:73:79:70:47:BB:91:8C:96:E0:A0:26:62:FC:E3:29
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:00:f0:14:a5:b6:14:ad:6b:2c:8d:53:82:ce:ed:24:10:
29:12:20:7b:07:fd:2a:76:40:38:59:91:3f:62:c1:10:42:8c:
81:77:25:32:b6:c1:bd:9a:1d:a6:25:54:6c:ce:84:d9:aa:3e:
4e:47:1b:9a:a8:fb:2e:28:f3:32:bd:20:75:f4:4a:6a:21:d0:
bf:4e:9b:ef:19:5b:cc:dd:39:a9:41:d8:51:57:77:67:3d:36:
dc:9d:2c:ee:dc:9d:12:f5:b3:0b:01:77:b1:29:dc:0f:2a:f3:
28:0f:c2:fb:1c:e0:2e:d8:81:29:78:ca:f2:14:32:5a:34:46:
b3:48:af:3a:9a:a1:99:9d:7f:8f:b7:df:df:f7:99:c1:28:d3:
48:58:9f:0c:67:a4:cf:c9:de:39:69:6e:f2:75:d4:dd:70:90:
9d:fe:69:b4:26:0f:56:8a:4c:ed:ec:6c:98:83:5d:96:14:d3:
0b:1f:8c:fd:67:4f:fb:56:24:1c:3b:a6:ad:98:ac:e5:48:ab:
86:39:e8:b4:fd:22:11:a1:b7:73:06:fe:bb:4e:ab:af:0d:1b:
e1:b3:28:1f:e8:95:fb:47:cb:60:c7:e5:03:92:ae:56:d9:70:
35:4f:d7:25:35:b3:a2:11:c8:aa:3a:87:47:e8:e0:0f:e2:6a:
3b:7e:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net