Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json)
Hash identifier: mpUCjFLPBzFqEFnkgaJ4ow86Bd+PiRuHLq/UaTgXInU=
Subject key identifier: F2:CA:2C:23:42:3D:58:6B:6A:69:8B:11:2B:63:64:BC:EC:61:98:15
Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Certificate serial: 01962E98B3C19191480BF4FF387F8A0EF646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
Manifest number: 7B
Signing time: Sun 13 Apr 2025 10:01:21 +0000
Manifest this update: Sun 13 Apr 2025 10:01:21 +0000
Manifest next update: Mon 14 Apr 2025 10:01:21 +0000
Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: 7jL4A0clQ+VDYREk6twLmFvrlyFvHnLJtLHalXeIRiU=)
2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:b3:c1:91:91:48:0b:f4:ff:38:7f:8a:0e:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Validity
Not Before: Apr 13 10:01:21 2025 GMT
Not After : Apr 14 10:01:21 2025 GMT
Subject: CN=f2ca2c23423d586b6a698b112b6364bcec619815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:76:eb:d9:e9:df:94:93:ed:3b:f1:dd:96:
fa:4c:6a:60:77:02:b3:30:db:d1:a5:13:4b:5f:38:
61:95:b8:ca:04:6c:10:3e:72:ae:f3:da:7e:f8:79:
ef:88:e7:aa:1f:cd:88:37:d1:2a:4b:84:3a:e0:3c:
9d:be:63:55:c3:a4:ce:42:f3:93:1a:ea:02:ec:6a:
cc:70:f2:1b:fc:48:35:ee:84:f8:ee:6f:4a:10:50:
27:d0:f8:d7:6f:b0:b2:84:8f:f3:8b:68:c9:26:33:
1d:76:07:be:b2:e0:e9:ed:3a:a4:89:59:b7:97:04:
54:3a:2a:28:72:44:dc:f2:a7:ff:7f:bc:c6:bd:61:
c3:33:7a:67:cc:a1:9d:52:c5:bd:84:c9:1f:b3:78:
dc:65:18:1b:ca:1e:5e:9d:b3:c9:2b:f7:b5:64:6e:
ee:9c:20:87:31:fa:e9:f5:71:07:d8:df:a7:43:c4:
90:a7:c9:e5:ba:36:6e:92:d8:25:77:ea:c4:b6:26:
d8:f8:d8:6c:f7:a1:0c:4a:c2:35:09:52:d9:18:b2:
39:dd:ae:26:3f:ab:9b:2c:50:ae:15:c0:17:a9:6a:
98:cb:2e:b9:39:ab:36:fa:9d:5e:15:0c:bd:88:9b:
b2:c3:ee:c4:b0:24:09:a5:fd:49:55:d0:85:1f:1a:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:2C:23:42:3D:58:6B:6A:69:8B:11:2B:63:64:BC:EC:61:98:15
X509v3 Authority Key Identifier:
keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:79:a7:5e:98:f0:3f:13:b4:df:a1:af:69:b0:a4:c9:ba:
64:76:3e:aa:cc:c7:61:c2:6c:8b:25:8d:00:a3:a4:5b:d4:41:
c5:48:2d:28:c6:60:59:c4:66:f8:be:8a:17:5e:a0:12:d6:e6:
99:6c:da:53:a5:5e:a2:ad:0b:da:7a:96:3d:ce:7e:e4:ac:bc:
1a:48:90:83:59:76:d8:90:f9:eb:53:6e:8d:be:36:b3:54:9c:
61:e1:e6:b3:31:e8:e7:8f:38:77:15:39:0d:43:23:8a:df:29:
b7:b6:23:64:2f:1c:3a:78:30:26:c0:a2:08:51:f8:a9:ac:bd:
23:2b:65:ff:02:b6:93:b7:46:5f:b9:b0:6b:e1:21:5f:a6:a5:
71:a0:de:0b:f8:54:1a:0e:d1:3e:1a:00:c0:4e:47:38:61:27:
a7:fe:72:bf:c7:94:d5:84:26:da:66:a4:09:39:ad:75:b4:e4:
22:6b:22:b5:eb:4a:23:7f:72:0c:5a:c4:86:b6:07:22:79:28:
e2:3b:f5:6c:81:08:b0:2b:fc:89:c2:73:de:19:81:56:6d:a2:
89:fa:5a:53:c9:49:4b:5b:ab:3d:5e:d0:23:79:e9:ee:8e:41:
a6:c7:89:c4:27:3a:73:71:f3:07:68:cc:fb:68:dc:ec:c0:c8:
2d:79:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net