Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: ywchjvxAA0hIejcltFf4UiIxpgSHrBfRcpg2egfZuDA=
Subject key identifier: 24:71:EA:6A:46:BC:12:2D:25:C3:F2:72:0D:87:C3:66:57:8A:63:BF
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 01962E2B3D2C77F6FA39C17F992FBB16BDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 0D70
Signing time: Sun 13 Apr 2025 08:01:47 +0000
Manifest this update: Sun 13 Apr 2025 08:01:47 +0000
Manifest next update: Mon 14 Apr 2025 08:01:47 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: akVHgSPebkBiPGuu9lF1OnXdO3GMbt41vCEyOx2+orE=)
2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:3d:2c:77:f6:fa:39:c1:7f:99:2f:bb:16:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Apr 13 08:01:47 2025 GMT
Not After : Apr 14 08:01:47 2025 GMT
Subject: CN=2471ea6a46bc122d25c3f2720d87c366578a63bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:6d:bf:fe:7b:86:14:dd:97:f5:fa:13:36:
b5:88:47:ae:ee:3a:2d:18:93:8a:88:80:24:18:ca:
c6:17:ab:82:4c:56:09:45:ec:95:8c:ec:66:2c:0c:
85:a0:44:f6:12:c8:28:84:c8:bb:fc:9e:1c:40:13:
90:35:94:9e:c4:13:3b:e6:c4:4f:51:14:04:ec:31:
95:06:d2:bf:e8:63:03:2c:c3:ae:4a:95:ce:5c:11:
a8:37:50:19:67:8c:7f:0d:c3:5a:f6:ca:43:e5:a2:
7f:29:85:e9:d7:09:d7:1f:7c:fa:0e:ba:37:41:bc:
d6:81:6c:86:ca:6c:f2:5b:88:ab:e2:f3:db:23:8d:
2e:5c:0f:9c:e1:f7:90:83:d8:3e:5a:82:ee:0d:5f:
54:cf:96:a3:f2:1f:22:8d:46:a2:57:ac:01:56:0f:
72:d5:af:32:20:b7:63:c6:e7:cd:e2:96:2c:fd:4b:
5e:e2:ab:f4:d0:e6:03:a3:91:fc:44:13:13:b8:20:
d0:9c:c9:a7:92:cf:c6:1d:58:2a:56:f9:48:e7:c7:
a8:46:55:97:76:93:0f:66:77:9f:7d:b1:ba:cd:60:
56:30:24:43:3a:32:c0:6b:3b:6e:c2:2b:3a:2e:9e:
63:9a:e6:cc:c3:15:27:09:62:71:52:1e:3d:42:58:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:EA:6A:46:BC:12:2D:25:C3:F2:72:0D:87:C3:66:57:8A:63:BF
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:57:3e:b9:f4:99:53:f4:83:46:0b:3d:35:fd:39:e3:fb:
0a:83:3a:bd:0c:93:ab:df:e8:0f:e8:90:8b:5a:f8:36:3c:22:
ba:be:b5:34:e0:5c:34:80:1e:fa:08:a3:35:29:2a:d1:a9:89:
26:e4:84:39:4a:80:5b:f0:0f:86:52:03:b8:d7:74:8e:10:13:
bd:6c:4c:fb:0a:43:81:45:2d:cb:09:89:4b:5e:c5:41:d9:f8:
84:0f:6b:94:76:b8:3a:55:66:de:34:f4:22:d9:68:93:9f:c9:
d1:50:e9:48:1a:fb:42:b1:83:ec:3c:f0:24:8a:6a:8d:76:6d:
db:18:42:09:27:49:a6:e7:8a:bf:de:12:96:6d:1b:c2:f0:f0:
13:c7:f8:09:fe:d6:b7:74:eb:7e:09:03:8b:06:5e:03:0c:3c:
65:56:62:51:3e:04:d3:97:a1:f8:c7:6d:b1:44:ac:83:16:7f:
1e:df:b6:51:ed:d4:5f:1d:12:9b:29:50:33:1c:3f:d8:6b:0b:
2d:35:87:62:6b:a3:c4:1b:52:01:0d:6c:a2:53:a9:1b:f6:38:
75:d4:f9:d9:d2:e8:e3:5a:4e:b4:ab:49:ee:9b:62:98:c5:d9:
48:6a:30:e1:35:79:77:22:e9:60:cc:2f:72:bf:62:f0:e7:90:
b4:a3:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net