Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: 234K4WC6HJQavEh6/32TQbJXf/ApRkCWUbFXmC6A9LM=
Subject key identifier: 78:19:A3:52:67:9B:4E:E1:6A:5F:A0:D7:6F:63:21:43:1C:A9:05:26
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 01962E6194896DC1B5F1107DE297AB079C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 09:01:09 +0000
Manifest this update: Sun 13 Apr 2025 09:01:09 +0000
Manifest next update: Mon 14 Apr 2025 09:01:09 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: llvPgdGIvK7e1vBXp06Uggik64yvBQeSvAqWe5skQOU=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:94:89:6d:c1:b5:f1:10:7d:e2:97:ab:07:9c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Apr 13 09:01:09 2025 GMT
Not After : Apr 14 09:01:09 2025 GMT
Subject: CN=7819a352679b4ee16a5fa0d76f6321431ca90526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:60:fc:29:d1:af:6c:43:15:6c:be:88:20:
7a:0f:8d:76:7b:6f:c4:68:77:5b:57:d5:e2:d4:e8:
8b:ee:9b:69:88:1e:ff:31:4a:e3:93:4f:fd:83:4e:
cc:8f:3d:a0:80:43:c6:76:56:af:f2:2b:95:59:e9:
8a:15:5f:20:13:14:cc:4e:26:72:b9:ba:5f:93:48:
1b:a8:a9:5c:51:da:1b:a5:dc:9d:6d:09:16:b2:66:
ac:f2:85:e4:23:c3:61:8a:df:0d:1f:f0:3e:e5:3c:
7f:bb:13:3e:fb:0d:6c:54:a1:c2:cd:9c:0b:de:95:
ef:dd:06:a1:28:f4:0d:b3:05:3e:99:6b:67:f5:5a:
40:08:cb:b0:0c:51:e1:84:b0:ba:e0:7e:f9:04:ef:
96:da:20:22:92:f6:f4:38:65:eb:cd:7d:6a:b7:b7:
5c:9f:c4:98:24:fd:22:c3:c9:e6:1d:3b:0e:e7:95:
2d:70:08:cf:f0:76:5b:70:23:72:e8:29:61:f3:c7:
af:53:b3:5a:32:21:f7:f2:92:6a:c5:14:6b:05:56:
86:a5:cf:7d:18:18:d3:12:d5:e3:20:6f:a9:49:c0:
8c:5b:8a:d2:6b:35:e7:56:c2:b1:91:c4:e5:5e:21:
66:4e:97:ec:97:87:4f:92:0b:ed:a8:50:d1:01:ed:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:A3:52:67:9B:4E:E1:6A:5F:A0:D7:6F:63:21:43:1C:A9:05:26
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:af:be:34:c7:ee:0d:35:0a:7e:67:e5:56:e5:67:54:3c:
92:02:0d:ed:07:3c:5f:8a:82:3d:9d:af:37:88:e0:de:ce:df:
20:4c:fa:1f:c7:d7:78:dc:e5:3d:d0:ce:c0:b3:96:33:f3:e2:
50:74:3f:c5:b2:9e:39:41:67:81:0d:51:20:93:a2:fc:4a:3f:
80:21:a2:d4:df:37:ec:e7:11:97:4b:41:81:e2:ef:bd:bf:0d:
f1:22:77:d9:08:04:82:9f:96:a4:5d:9e:66:31:bb:28:4b:eb:
17:1a:d6:a0:18:6d:16:cc:60:40:4a:e1:65:82:24:dc:b8:f1:
2e:96:71:e5:d0:3a:50:8d:05:72:4e:2d:2b:a3:f7:c2:08:aa:
8a:9a:cc:f3:1f:dd:e6:52:47:75:d0:4e:de:8f:1a:24:d9:6f:
6d:76:bb:0a:99:a0:8d:51:02:5e:97:27:fc:d3:00:b4:20:3a:
38:52:99:0b:15:52:32:de:3b:c6:30:e1:a2:f9:de:8d:ef:50:
58:34:91:2d:7a:9e:2e:b6:de:b8:65:e1:ab:3b:a2:72:ec:2d:
a3:e2:b8:ea:bf:c0:ec:20:0e:50:86:72:f4:5e:6b:39:13:1b:
49:32:3b:8a:d2:45:2d:8b:9a:fa:e0:6f:aa:43:ce:d7:bf:29:
a1:a7:f7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZSJbcG18RB94perB5xJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex
ZDg1ZDAwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
Eyg3ODE5YTM1MjY3OWI0ZWUxNmE1ZmEwZDc2ZjYzMjE0MzFjYTkwNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBg/CnRr2xDFWy+iCB6D412e2/E
aHdbV9Xi1OiL7ptpiB7/MUrjk0/9g07Mjz2ggEPGdlav8iuVWemKFV8gExTMTiZy
ubpfk0gbqKlcUdobpdydbQkWsmas8oXkI8Nhit8NH/A+5Tx/uxM++w1sVKHCzZwL
3pXv3QahKPQNswU+mWtn9VpACMuwDFHhhLC64H75BO+W2iAikvb0OGXrzX1qt7dc
n8SYJP0iw8nmHTsO55UtcAjP8HZbcCNy6Clh88evU7NaMiH38pJqxRRrBVaGpc99
GBjTEtXjIG+pScCMW4rSazXnVsKxkcTlXiFmTpfsl4dPkgvtqFDRAe2BZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgZo1Jnm07hal+g129jIUMcqQUmMB8GA1UdIwQY
MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct
MzM5YzlkNDg3NzRjLzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj
LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeivvjTH
7g01Cn5n5VblZ1Q8kgIN7Qc8X4qCPZ2vN4jg3s7fIEz6H8fXeNzlPdDOwLOWM/Pi
UHQ/xbKeOUFngQ1RIJOi/Eo/gCGi1N837OcRl0tBgeLvvb8N8SJ32QgEgp+WpF2e
ZjG7KEvrFxrWoBhtFsxgQErhZYIk3LjxLpZx5dA6UI0Fck4tK6P3wgiqiprM8x/d
5lJHddBO3o8aJNlvbXa7CpmgjVECXpcn/NMAtCA6OFKZCxVSMt47xjDhovneje9Q
WDSRLXqeLrbeuGXhqzuicuwto+K46r/A7CAOUIZy9F5rORMbSTI7itJFLYua+uBv
qkPO178poaf3iA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net