Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: B3Jv5EwW2x+hRzdNDUGguK5WEifEKaBXo5k4bhy7trU=
Subject key identifier: CA:3B:01:A5:CC:BC:F0:40:F5:FD:71:09:A8:43:F6:28:0A:AB:BC:EA
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 01962F0670B87ED2F0CB499A924517B7D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 05B0
Signing time: Sun 13 Apr 2025 12:01:13 +0000
Manifest this update: Sun 13 Apr 2025 12:01:13 +0000
Manifest next update: Mon 14 Apr 2025 12:01:13 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: WtXM1grbEWsLDmh0A1IHM4ffaMlprYqYn9BVJSa97rA=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:70:b8:7e:d2:f0:cb:49:9a:92:45:17:b7:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Apr 13 12:01:13 2025 GMT
Not After : Apr 14 12:01:13 2025 GMT
Subject: CN=ca3b01a5ccbcf040f5fd7109a843f6280aabbcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:51:00:13:00:fe:54:e8:51:6a:74:98:97:
cc:b2:74:2c:72:b7:11:9f:1b:a6:50:45:3c:85:a3:
af:f3:73:aa:ab:28:29:08:05:ad:a1:93:8b:f8:44:
8f:95:66:9a:3a:16:f9:5a:94:66:3d:21:57:b8:e2:
25:8f:ab:ed:c3:eb:11:0e:0a:8d:50:00:66:cd:f6:
87:44:35:92:13:72:c8:ff:46:25:3a:f5:e6:e6:9f:
59:d9:5e:5c:96:71:dd:46:c9:ef:4a:e7:7b:ec:2c:
77:bf:79:e2:76:bf:ac:79:36:df:c3:37:92:76:50:
43:7c:19:41:9b:6e:5b:f2:4a:12:65:56:e5:6a:8d:
ac:23:f5:05:e7:08:73:be:ab:62:e6:22:fa:25:31:
48:0f:40:68:e2:8f:06:b9:37:b3:f7:5f:a7:47:72:
6e:7b:b5:37:fd:62:42:91:be:ef:83:e3:9a:63:fe:
70:ee:d0:e3:28:42:5c:87:5e:35:cf:eb:3b:a2:79:
f4:77:57:d4:c5:db:18:77:7e:d6:2c:c9:86:46:c0:
70:c3:75:bc:c2:7c:4a:b5:16:6a:41:0c:d8:28:95:
3d:c4:59:11:78:b2:25:b6:ce:ce:5b:b5:d8:a5:14:
e6:36:90:8b:bc:54:28:60:13:16:01:f2:5c:3a:e5:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:01:A5:CC:BC:F0:40:F5:FD:71:09:A8:43:F6:28:0A:AB:BC:EA
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:10:37:a2:42:5e:12:bd:a8:80:b6:4e:3d:6e:e3:05:59:
b5:bd:01:71:9f:d2:dd:f2:f3:ce:33:29:54:02:15:ce:b6:d3:
c2:e7:89:44:b8:ec:a4:24:38:68:80:41:ca:eb:d0:35:58:8a:
ae:0d:b5:48:80:04:d4:b6:d5:62:22:50:b9:0f:d2:66:38:8e:
a9:22:fe:7d:8c:85:89:65:fa:be:1b:74:eb:72:e7:8d:43:37:
23:54:e7:c9:1b:6a:70:47:99:7b:66:92:0b:f7:42:bd:23:a9:
6d:78:49:38:21:fe:7f:e5:d5:d6:da:99:b7:d8:3b:80:da:e0:
b3:48:2e:fe:9a:e0:b7:fe:16:87:20:75:d9:7e:3f:f4:d1:95:
31:79:3f:f5:ee:bc:6b:03:4b:51:2e:cf:03:93:05:88:b4:34:
1d:c6:85:b5:21:6f:fd:da:cb:0b:64:46:a4:52:b9:20:57:69:
e8:50:24:9e:ad:71:48:ae:bd:cf:12:aa:70:d6:55:cf:b4:5a:
e5:6d:ca:cb:8e:92:a8:95:b9:0b:70:c4:78:0a:5c:33:30:24:
3c:35:15:86:28:0a:f7:37:50:35:61:7d:8f:40:ea:cf:26:7a:
e9:cd:f5:1c:d1:2b:11:89:44:ce:31:9f:8d:36:9d:7f:72:a5:
5b:21:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net