Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: u6suDz8o7er5KgpEtsWzDgRhed77djuLj0yn3kFBadk=
Subject key identifier: 2E:51:E4:3A:71:32:3A:BE:AD:58:BA:B7:B7:19:85:27:76:2E:8F:A1
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 01962E989C2E4ECAF7BB4C45FD15D71A720F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0A74
Signing time: Sun 13 Apr 2025 10:01:15 +0000
Manifest this update: Sun 13 Apr 2025 10:01:15 +0000
Manifest next update: Mon 14 Apr 2025 10:01:15 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: gzQJ0xVb9oX3jJtH/nnq4SwZ+a1Mn8bRJQiNAzHgBQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:9c:2e:4e:ca:f7:bb:4c:45:fd:15:d7:1a:72:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Apr 13 10:01:15 2025 GMT
Not After : Apr 14 10:01:15 2025 GMT
Subject: CN=2e51e43a71323abead58bab7b7198527762e8fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:f6:34:8f:d6:a4:89:37:a4:44:11:a4:63:
4b:f8:e2:17:32:9a:e5:42:a7:03:10:aa:45:fa:17:
4c:6a:48:9d:f8:d9:ea:65:d6:3e:76:93:6b:36:b0:
d7:fc:40:76:81:03:ba:ad:87:18:09:be:4d:83:6b:
48:02:8c:43:84:b6:b7:d0:62:2f:e0:17:0e:50:2f:
72:2a:2e:08:4b:e2:ee:d1:5a:c3:23:e5:4b:a7:04:
ba:c5:af:a1:95:ac:bd:aa:ff:c1:71:10:25:9d:df:
aa:9a:2d:2f:d3:0f:ef:0f:5f:f4:2e:15:a2:62:40:
34:3b:45:60:ad:be:e3:09:a5:69:08:ed:36:45:20:
8c:29:6c:d9:f9:ff:20:bb:40:57:33:a7:11:e2:46:
fa:68:7d:ac:e4:e0:52:ad:4b:d7:47:47:e5:ce:52:
43:90:ab:85:81:b1:65:b9:e9:2c:4a:c0:2e:38:16:
65:d8:98:57:f5:6d:59:6e:b6:9b:cb:58:74:26:bc:
5c:65:b4:a0:44:5d:d8:99:30:f4:ff:fc:cb:21:e0:
38:e5:d3:bc:e7:52:65:6c:32:0b:00:59:8e:8a:72:
48:4a:23:f6:d1:4c:59:2c:a0:af:cf:38:ab:01:e6:
fe:3c:f9:50:e3:e7:17:ca:64:f8:b0:2b:47:f8:c3:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:E4:3A:71:32:3A:BE:AD:58:BA:B7:B7:19:85:27:76:2E:8F:A1
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a5:dd:c8:95:75:b3:ed:84:97:9a:e7:ed:73:00:56:a8:53:
d8:be:c7:d9:ff:01:01:ef:00:a6:bb:0d:94:1c:65:d7:eb:6b:
bd:ec:c9:14:5f:58:b0:e8:e6:d1:db:e6:ba:f0:2a:28:50:56:
9d:d3:63:98:b9:89:85:42:ce:8b:7b:e0:a9:73:29:31:6e:2d:
c7:05:93:05:2b:0b:b6:c1:4c:18:57:bd:a7:e3:97:86:42:05:
7b:03:40:12:06:90:d3:8a:78:99:01:d9:2e:c5:65:df:3a:bd:
dd:93:2b:3a:80:17:73:28:96:cd:40:3d:9e:a1:df:0c:a1:98:
6a:15:a2:75:f3:83:fc:1b:dc:8a:ea:17:a9:25:dc:4b:94:87:
ff:77:6c:a3:3c:e0:6b:a3:ab:3d:c6:05:67:f9:03:52:06:1e:
94:4f:38:24:b6:c8:e1:d7:bf:44:7f:c7:b2:5e:6e:e9:9e:c9:
f2:ae:3e:a1:41:f8:5f:37:38:a1:1a:a6:b8:6b:79:ba:d0:5d:
8a:77:0b:37:25:1d:20:7d:2d:05:d2:5c:b7:8f:80:be:5f:71:
9c:ce:de:fc:59:87:b4:41:9a:26:cf:ca:d2:dc:b1:b3:61:dd:
d2:c0:b0:fa:1d:49:9f:a8:03:8c:74:88:e4:c2:59:67:f6:e9:
df:2a:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net