Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: WZ7425HdIDrL5Kqz1gk5Lv3H2XjEVgUWx7vZxscPpRU=
Subject key identifier: F3:D0:F4:48:DE:6F:84:87:C9:95:F6:E2:AF:23:8B:25:8E:8C:70:5B
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 01962DF3CFFF556E58A04C7B1525D92F8D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 04A5
Signing time: Sun 13 Apr 2025 07:01:15 +0000
Manifest this update: Sun 13 Apr 2025 07:01:15 +0000
Manifest next update: Mon 14 Apr 2025 07:01:15 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: ixLgoP3FKAHA5aQLWnwEnbfktuw140bqusaTcJF+Ik4=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:cf:ff:55:6e:58:a0:4c:7b:15:25:d9:2f:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Apr 13 07:01:15 2025 GMT
Not After : Apr 14 07:01:15 2025 GMT
Subject: CN=f3d0f448de6f8487c995f6e2af238b258e8c705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:3d:6c:9f:53:e5:e5:2e:6d:67:fc:a7:32:
c6:6d:4e:5c:78:36:5b:02:13:e2:d1:e7:06:c1:f5:
23:01:f8:6c:7c:f8:ff:17:30:5f:99:92:c3:ca:f7:
b6:17:ae:a0:3d:d2:34:73:78:20:f5:ce:8b:38:1f:
7f:cb:e1:fc:02:d6:4f:00:c9:4d:dc:ad:6a:fa:67:
cf:c7:85:cd:d7:2b:b0:5f:95:ba:3e:85:11:6d:be:
f1:98:10:f1:32:55:3f:ba:52:2a:93:25:7c:bf:8c:
8c:dc:0b:32:b0:ac:08:c1:45:cf:1c:ea:58:65:9e:
0a:36:b8:01:c3:f6:a7:ff:f5:37:fe:df:fe:00:f7:
20:e7:d9:d4:32:3d:57:d1:9a:48:88:bb:12:73:19:
c9:3f:15:87:ae:a3:ca:3a:52:60:89:d8:59:de:28:
4d:11:f4:0e:98:a7:e0:1f:3f:8a:08:18:18:3a:97:
3e:51:a4:5d:f4:8b:48:00:30:a8:14:d3:e3:f3:44:
7b:ff:b3:4e:6c:20:fb:07:99:76:e0:7b:04:19:bb:
ca:50:40:87:2b:1f:0e:14:c5:b9:ae:64:7f:7f:2f:
4f:25:97:b3:7d:71:76:35:55:05:15:2d:05:1f:7a:
7b:57:f0:74:6f:f3:52:8d:24:59:4b:ee:66:0b:34:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:F4:48:DE:6F:84:87:C9:95:F6:E2:AF:23:8B:25:8E:8C:70:5B
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:94:b1:0c:78:e9:50:50:71:64:33:51:51:32:47:0d:9c:
d1:31:2f:89:f2:58:1c:96:6e:8f:96:0c:5a:0d:1a:26:6e:f1:
d7:b3:30:c2:7b:ea:e0:2f:a6:67:a7:61:ad:18:d5:f4:e5:da:
86:d7:82:59:ed:dd:4b:76:29:4d:6c:02:03:25:43:29:4e:d7:
0e:70:0b:7b:17:bd:8a:5d:0c:60:b0:b5:e9:64:45:ad:0e:60:
29:37:2b:65:eb:c8:5c:6e:40:f0:2a:20:a0:6f:25:84:d5:d3:
76:1b:f8:81:1e:0a:43:31:d0:77:bc:ff:1f:08:32:de:99:3a:
7d:f0:05:bc:15:65:a9:aa:8b:47:9f:59:c3:91:23:b7:f2:56:
f9:2d:53:28:b4:41:3a:39:f8:ea:70:6c:02:ca:c4:82:a4:7d:
f2:f6:f7:71:c1:06:f6:fd:13:2d:9b:56:ce:2b:c4:c3:7d:18:
5c:72:ed:44:2e:b5:67:17:ec:9e:51:96:4c:04:11:bf:a7:c2:
29:85:a4:3f:ef:5d:ce:fe:a4:2e:a2:9a:ae:db:7a:9c:69:35:
87:c9:9b:40:99:e0:d2:08:ce:b5:3b:08:17:5c:90:a2:95:dd:
ed:51:bc:fe:55:32:b2:45:05:3b:88:db:92:b1:87:bc:7e:cf:
45:f4:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net