Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: fsA1pTUPPtCtgKRk0mOazqml8ZgIFa83nktFgSz0x8Q=
Subject key identifier: 4B:81:6D:26:11:8E:F2:B5:56:FE:C5:4D:D5:9E:2E:59:7B:0D:BA:AB
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 01962DF3BD3318DC0B80DD41F0BFA6D98E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0D4B
Signing time: Sun 13 Apr 2025 07:01:10 +0000
Manifest this update: Sun 13 Apr 2025 07:01:10 +0000
Manifest next update: Mon 14 Apr 2025 07:01:10 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: KaB4dAGvWiQXe9eDyrrWdQkUWngu2KQxSPMSw11ypak=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:bd:33:18:dc:0b:80:dd:41:f0:bf:a6:d9:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Apr 13 07:01:10 2025 GMT
Not After : Apr 14 07:01:10 2025 GMT
Subject: CN=4b816d26118ef2b556fec54dd59e2e597b0dbaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:17:16:dc:d7:ed:51:7d:9c:77:5f:f4:a4:
40:bc:eb:97:69:08:ca:80:20:09:69:66:06:be:db:
77:54:ab:ad:3f:f9:7d:c7:8b:92:e1:ee:02:7a:aa:
e7:17:1b:cc:c2:49:3d:44:06:d9:6a:9f:ce:1c:4d:
9a:2c:b2:33:8c:29:97:32:58:87:35:2c:ee:69:fd:
11:30:f2:cf:97:32:ab:15:7e:8c:a4:e1:3a:a4:36:
38:03:78:57:58:96:a1:b6:ee:f8:b5:1a:c0:c1:68:
dd:3c:d3:f5:dc:b2:68:48:51:25:30:a6:38:57:61:
9e:3f:38:69:f0:33:4b:c3:c9:91:22:77:8b:14:a8:
76:61:68:ed:62:1a:25:43:72:9a:94:0c:ed:f5:1c:
7e:8a:ce:40:2f:a9:92:63:a5:fa:02:5e:76:12:3e:
ab:28:e4:61:b8:2f:30:0b:b7:28:ce:65:e8:46:30:
26:2f:66:dc:6b:85:ba:ed:60:08:c2:97:1d:e9:42:
4e:66:ec:f1:ef:7f:98:b2:88:ff:c4:66:ef:90:65:
0e:1c:97:b9:7f:77:4d:c9:a2:13:63:d7:12:68:bf:
3d:dd:aa:4e:6e:b6:ff:7d:14:ff:d3:15:95:16:13:
54:9b:f4:6b:59:d7:f2:6b:d5:23:aa:f7:13:85:3b:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:6D:26:11:8E:F2:B5:56:FE:C5:4D:D5:9E:2E:59:7B:0D:BA:AB
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:ba:1c:d9:f6:92:a7:f0:af:78:18:b8:7e:35:9d:82:d9:
e1:a2:a0:05:f9:10:ef:d8:ef:35:c4:40:5d:49:ae:60:c0:fb:
21:cd:c7:36:01:51:7f:6f:45:93:a4:02:62:77:05:23:56:f3:
77:e4:7d:36:c8:b1:51:38:e7:7c:6b:fe:c5:0c:57:5e:23:c4:
17:e8:1f:d4:a8:c3:55:b1:ad:4e:f8:6a:f0:08:39:e1:5c:17:
95:4a:aa:0b:76:47:d4:40:b4:77:7b:14:e1:ce:8c:64:73:b9:
30:be:40:dc:1a:19:87:55:ad:6b:e2:56:e0:8d:53:1d:74:af:
bb:80:64:34:1f:64:42:52:bc:b3:3d:d3:32:29:50:97:3e:7e:
54:84:e7:31:57:18:7b:08:26:bd:e0:87:a8:70:5b:4b:1b:98:
34:54:8f:cd:74:24:b0:31:e0:43:f3:bb:05:9f:7a:7b:cb:ec:
8a:eb:8f:1e:20:25:aa:e8:d0:92:7d:c4:aa:8f:1a:00:43:8a:
f3:bc:75:37:a5:be:bd:4b:2f:83:7a:91:40:28:71:be:af:fb:
12:09:65:98:23:ad:eb:c4:59:19:6c:17:d6:47:ae:be:eb:80:
f5:6a:b0:ab:0a:4c:d6:86:28:59:f6:59:1e:40:35:7c:a1:db:
a4:5d:58:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt870zGNwLgN1B8L+m2Y57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1
MTQ1MGQwHhcNMjUwNDEzMDcwMTEwWhcNMjUwNDE0MDcwMTEwWjAzMTEwLwYDVQQD
Eyg0YjgxNmQyNjExOGVmMmI1NTZmZWM1NGRkNTllMmU1OTdiMGRiYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60AXFtzX7VF9nHdf9KRAvOuXaQjK
gCAJaWYGvtt3VKutP/l9x4uS4e4CeqrnFxvMwkk9RAbZap/OHE2aLLIzjCmXMliH
NSzuaf0RMPLPlzKrFX6MpOE6pDY4A3hXWJahtu74tRrAwWjdPNP13LJoSFElMKY4
V2GePzhp8DNLw8mRIneLFKh2YWjtYholQ3KalAzt9Rx+is5AL6mSY6X6Al52Ej6r
KORhuC8wC7cozmXoRjAmL2bca4W67WAIwpcd6UJOZuzx73+Ysoj/xGbvkGUOHJe5
f3dNyaITY9cSaL893apObrb/fRT/0xWVFhNUm/RrWdfya9UjqvcThTvvSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuBbSYRjvK1Vv7FTdWeLll7DbqrMB8GA1UdIwQY
MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt
NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx
LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFu6HNn2
kqfwr3gYuH41nYLZ4aKgBfkQ79jvNcRAXUmuYMD7Ic3HNgFRf29Fk6QCYncFI1bz
d+R9NsixUTjnfGv+xQxXXiPEF+gf1KjDVbGtTvhq8Ag54VwXlUqqC3ZH1EC0d3sU
4c6MZHO5ML5A3BoZh1Wta+JW4I1THXSvu4BkNB9kQlK8sz3TMilQlz5+VITnMVcY
ewgmveCHqHBbSxuYNFSPzXQksDHgQ/O7BZ96e8vsiuuPHiAlqujQkn3Eqo8aAEOK
87x1N6W+vUsvg3qRQChxvq/7EgllmCOt68RZGWwX1keuvuuA9WqwqwpM1oYoWfZZ
HkA1fKHbpF1YGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net