Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: RH3mZxCZEjYgJv8EjCEpLBF7TocwV0Lv+rWU/Ospx84=
Subject key identifier: DE:B1:1F:28:B7:85:16:C1:D1:43:63:DC:63:C0:5B:8D:6E:80:3B:30
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 01962F3D6842F9AF7A36780B7688B3B090DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 13:01:15 +0000
Manifest this update: Sun 13 Apr 2025 13:01:15 +0000
Manifest next update: Mon 14 Apr 2025 13:01:15 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: PIEKoSzEScFYcFvCWpT3FmrZgwJB7LSJy4OxW/A1wzI=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:68:42:f9:af:7a:36:78:0b:76:88:b3:b0:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Apr 13 13:01:15 2025 GMT
Not After : Apr 14 13:01:15 2025 GMT
Subject: CN=deb11f28b78516c1d14363dc63c05b8d6e803b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:3d:62:fc:6c:3f:07:37:ef:a4:7e:38:2a:
d6:72:bb:89:4a:60:d8:46:5a:6d:30:4a:e4:7e:7b:
c3:34:25:d6:54:eb:16:6e:16:a7:ec:10:f9:46:37:
85:90:33:5c:96:24:e1:39:86:6e:a4:28:21:43:d9:
71:d2:ae:70:6d:e7:35:ff:26:8f:e9:90:c6:9f:f7:
99:92:c5:14:83:2e:5a:a8:98:57:8a:99:22:30:b3:
01:ed:92:99:c9:f2:3d:29:29:91:15:97:31:e5:91:
b4:24:f0:1f:23:1c:49:3e:62:dc:8b:47:82:29:8f:
78:9d:fe:4c:d0:8a:95:1e:36:ac:fd:73:d7:b8:d7:
31:7a:74:31:b7:b5:4b:3e:dc:b3:19:b7:31:0b:60:
06:14:27:c4:ec:4e:5a:7c:4f:9b:38:95:51:72:b4:
96:1d:1b:29:db:48:d0:e2:b4:42:d7:88:4d:81:aa:
b9:2a:c6:2d:c6:f7:35:3f:75:51:16:6f:3d:ff:4e:
82:45:6e:c3:ec:9e:b4:e4:1d:9f:ad:e8:78:7a:76:
03:93:be:12:19:58:b5:1e:8b:d6:38:fd:6f:b4:90:
45:b7:b3:58:f9:a9:4e:8b:be:12:94:19:e2:5b:db:
c2:27:51:b5:91:d0:07:a0:4f:e7:1f:36:54:34:58:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:1F:28:B7:85:16:C1:D1:43:63:DC:63:C0:5B:8D:6E:80:3B:30
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f6:b4:06:9b:ac:e2:8e:68:6c:6f:f0:29:28:6b:7c:99:ed:
d2:bd:85:4f:f2:d3:d2:60:37:4f:b2:12:54:f3:7b:05:62:3d:
b6:87:38:b7:b8:0a:cd:34:c7:29:29:ac:56:59:03:de:93:e8:
0a:b7:c9:21:c4:7a:e9:d7:bf:66:3b:12:77:93:29:c2:28:ca:
f0:76:f4:88:6e:e5:a5:a0:d7:35:81:8d:67:81:f4:6e:96:69:
ef:08:d6:57:b0:d4:e2:9d:4e:b9:d7:72:68:c8:e0:05:a0:ce:
44:d4:50:f8:24:d0:b0:2d:8a:17:4a:d1:4a:90:65:f9:d8:3c:
6a:d5:b7:57:4f:20:93:51:0a:bf:0a:7b:b0:a6:7c:fb:dc:0e:
7d:9c:1a:93:22:71:16:19:59:77:90:b5:9b:d1:62:08:b0:d0:
47:31:82:ec:a2:e6:09:ae:4c:12:a0:b9:df:d3:1b:c4:23:d7:
86:7d:37:89:cc:2b:c6:8b:3c:93:00:cc:15:c8:bb:2a:f4:e6:
b8:8a:e5:22:c1:04:4b:62:e5:f0:5a:f1:cc:7b:08:5f:99:8d:
d3:ec:88:de:4d:34:57:a1:eb:2c:72:d4:8b:21:fc:46:63:6d:
12:ac:15:3a:93:cd:92:f1:3d:3e:cb:6a:ae:47:f7:36:40:c0:
ec:fc:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net