Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: 6K2DhlKnAK2GfKVd6gma1fTTJXxcOc0xTcDjT2CUIIk=
Subject key identifier: 8B:D4:09:16:2D:3F:F7:C3:D5:51:11:88:9A:B9:D1:75:21:6C:FF:0A
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01962E987F41FDDBC2BFED7EBFBB48F4B8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0E5B
Signing time: Sun 13 Apr 2025 10:01:08 +0000
Manifest this update: Sun 13 Apr 2025 10:01:08 +0000
Manifest next update: Mon 14 Apr 2025 10:01:08 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: 5/edtrn9QMZI5WPKs6s5ec6xugQ+OlicDrVRtos0O0o=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:7f:41:fd:db:c2:bf:ed:7e:bf:bb:48:f4:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Apr 13 10:01:08 2025 GMT
Not After : Apr 14 10:01:08 2025 GMT
Subject: CN=8bd409162d3ff7c3d55111889ab9d175216cff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:3f:e8:1b:be:6f:e7:63:9f:9a:3b:ca:aa:
80:4f:0e:4b:bb:8c:5b:aa:bb:5c:7b:2c:87:06:35:
8a:bf:d1:3a:11:30:e9:1e:98:fd:fd:14:65:b7:62:
86:9f:01:aa:2c:86:6e:9a:1d:f6:9b:b6:01:be:92:
a4:31:76:32:db:40:b2:13:3f:05:b8:9e:6c:fe:e6:
4e:c3:fa:e8:b5:2d:e8:5e:29:a3:18:78:5c:7a:4d:
fa:19:33:c3:a9:88:b5:da:0e:da:2d:87:ad:35:31:
bd:1d:a0:9d:8d:40:e2:7e:b7:32:3f:28:e8:a1:60:
b9:60:a2:12:dd:78:70:53:b4:96:25:6e:60:55:c4:
e4:51:c2:17:50:0f:29:59:90:cb:4f:4b:08:c5:c6:
43:21:5f:59:2c:06:5e:4a:ce:d1:7b:a7:eb:f7:8c:
49:83:b0:3d:44:70:22:41:b9:5f:9e:03:2f:d1:ae:
10:f9:ab:c5:6e:11:47:5e:30:22:cf:9e:8f:11:d7:
b7:51:24:80:5f:f2:22:0d:ac:cb:1e:3c:0a:77:c0:
d2:5f:ec:ac:37:34:5f:28:c8:ea:c7:52:03:a6:f6:
59:e8:1c:95:6b:da:04:2a:5f:4a:ab:b6:e2:d7:de:
4d:39:3c:34:9f:bc:dc:f1:b3:79:42:47:56:25:91:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:09:16:2D:3F:F7:C3:D5:51:11:88:9A:B9:D1:75:21:6C:FF:0A
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:a6:d7:0d:04:b4:1d:fe:13:4c:51:24:b2:1f:54:12:1e:
35:c9:42:44:84:aa:4f:e5:83:43:be:8c:31:df:f8:52:20:51:
9b:25:56:78:4e:ad:1a:33:c4:be:1b:ba:61:de:0a:23:0d:a9:
b7:fa:56:cb:a0:00:30:27:18:3c:59:f9:61:a2:58:00:db:b1:
44:53:97:a2:9f:0a:46:f9:64:7f:4e:23:af:b3:fc:5e:ca:b7:
cf:25:9a:d2:47:3c:71:e2:8a:36:0f:5c:b4:f5:3c:77:2f:c7:
6e:bb:d2:9b:7c:f0:87:7c:81:30:eb:05:8e:0d:d2:87:4c:b5:
f5:9e:78:ad:4d:9b:0f:09:ae:2d:db:be:20:e2:e9:d0:cd:02:
77:36:21:20:8a:f6:be:a1:dc:d6:c2:d3:c0:01:05:43:0f:7a:
fe:79:ef:d7:a5:69:c6:d4:0f:2f:1d:69:26:78:dc:ee:cb:f1:
27:0c:7a:1f:f5:e4:f8:19:3c:50:ce:f5:d4:bb:05:7a:f4:f9:
73:53:de:7f:db:40:47:9a:26:b3:12:d4:4a:72:c6:23:7c:8e:
c9:dc:cc:ca:b3:28:59:07:2f:3a:14:9a:60:e7:e9:65:8c:30:
01:08:de:b0:42:61:ec:c6:2c:3b:5c:fc:3a:85:20:0f:da:2e:
b3:15:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net