Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: KC+686aiWtLMh0u6HB4UR096lrHj9NpQxbNxYiZsStg=
Subject key identifier: A7:E9:BD:88:FB:58:34:36:54:33:C4:56:F6:A8:5E:0E:C4:BE:62:AF
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01962ECF5719BE79E1687789B9B439CB4646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 11:01:02 +0000
Manifest this update: Sun 13 Apr 2025 11:01:02 +0000
Manifest next update: Mon 14 Apr 2025 11:01:02 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: 0v1CcVTEALO9n4UhNfYiXRrdVzOJIg4+z0sQ0aNvRBA=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:57:19:be:79:e1:68:77:89:b9:b4:39:cb:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Apr 13 11:01:02 2025 GMT
Not After : Apr 14 11:01:02 2025 GMT
Subject: CN=a7e9bd88fb5834365433c456f6a85e0ec4be62af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:97:ac:d3:7b:6d:e0:52:de:31:50:23:9c:
4c:79:64:e5:32:e5:31:d6:bb:d4:6e:43:73:f0:ab:
97:b7:2b:9a:68:c7:16:fe:9c:70:05:f9:55:46:08:
0b:d2:26:28:80:6e:f7:7c:80:45:13:fd:b5:ca:73:
72:47:fb:80:61:2d:46:74:94:70:7b:b8:41:70:fb:
7b:e7:4e:90:ed:4c:35:c4:4c:1f:d1:71:3c:94:b6:
bc:ce:b6:37:ba:ac:8f:15:35:1a:3a:56:92:4c:df:
08:af:de:d9:72:f2:3c:64:a2:34:b0:f3:0c:5b:65:
f6:42:62:c8:7b:c2:25:bc:49:4b:23:33:52:89:a2:
c2:3f:45:0b:86:3a:6d:dc:f3:22:a7:4d:bc:74:24:
3f:75:06:5e:5f:8c:85:4d:7e:98:f5:5e:7d:d3:33:
83:cd:f0:ba:9b:dc:43:65:25:94:54:d7:ad:3c:ca:
a1:20:56:b5:48:65:97:83:1c:d9:b7:71:42:f2:b0:
54:fc:e7:4a:19:f4:5d:e8:02:e9:2a:ba:8a:24:f1:
2e:ae:84:f6:98:d7:38:b6:88:cd:1e:76:93:69:20:
4c:36:f3:0e:11:40:5c:35:3b:cf:a8:f1:9a:a9:1c:
14:0c:9e:2d:f1:74:29:1f:cd:0a:f5:52:1a:e1:87:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:BD:88:FB:58:34:36:54:33:C4:56:F6:A8:5E:0E:C4:BE:62:AF
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:83:f6:cc:8d:ca:d2:57:ce:3c:49:60:35:ff:be:dd:5f:
c4:65:31:6f:f6:f0:14:60:f5:c2:18:6b:af:2d:b5:e4:c3:8c:
88:f1:3c:23:11:24:26:3e:1d:87:80:f7:b7:95:39:00:68:f1:
c4:ee:64:c8:a7:7f:1a:02:c5:1b:30:01:10:c2:ab:1d:bd:07:
2a:c7:f0:58:a4:54:54:ca:7a:96:65:09:ae:dd:ac:ed:41:f0:
ab:74:b0:b3:40:ff:ff:07:d4:30:a5:81:3c:89:b6:38:e4:9d:
91:8c:5b:85:1f:9e:53:79:ac:ad:c2:16:27:c5:21:a1:c0:dc:
28:a5:85:c6:05:fd:35:d6:5b:d8:51:f8:8e:f4:be:d9:85:c0:
f5:31:8c:41:8c:f8:ea:83:19:63:e0:e1:22:b8:fa:2e:e8:8a:
06:ca:2c:1f:89:08:83:eb:90:3f:2b:d3:32:89:73:c0:b1:9c:
b6:51:9f:a6:82:02:bb:7e:87:21:96:4e:22:c4:11:66:d8:41:
3a:5f:d5:a8:85:00:6f:16:e4:95:74:a0:fc:88:4f:52:0f:b3:
19:cc:3c:46:c2:16:e7:cb:50:08:0d:37:9a:1c:41:6a:c8:56:
aa:ee:73:c1:c2:2e:3e:6b:95:1c:ef:13:65:91:e4:d3:6e:da:
e7:4d:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net