Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: iroyoac9CiDJVAstWCwml8zN7ug+Smp3vblXf5MOJ7M=
Subject key identifier: 7E:CE:9A:20:99:9B:65:7A:41:CC:2E:1C:01:97:DF:D3:E6:F0:8D:D8
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01962ECFB394D19D86F8B2F03AABF41AAA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 04CB
Signing time: Sun 13 Apr 2025 11:01:25 +0000
Manifest this update: Sun 13 Apr 2025 11:01:25 +0000
Manifest next update: Mon 14 Apr 2025 11:01:25 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: Pt7+4JufkE0114ff0koWMGEaQTRs0PvCZNP+FSA9VA8=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:b3:94:d1:9d:86:f8:b2:f0:3a:ab:f4:1a:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Apr 13 11:01:25 2025 GMT
Not After : Apr 14 11:01:25 2025 GMT
Subject: CN=7ece9a20999b657a41cc2e1c0197dfd3e6f08dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:8d:fd:92:14:bb:a1:83:c4:18:6c:0b:3c:
bc:21:bd:88:9d:dc:2f:0a:3a:5c:34:42:e9:4d:b6:
8e:04:ef:bb:b5:95:c6:39:fd:29:63:91:78:ca:f9:
53:30:1a:cf:df:87:96:e5:dc:aa:24:23:09:74:bf:
0d:ad:45:a1:ab:e6:a7:40:6b:d4:44:ba:b4:8d:cd:
a0:a7:3a:ef:20:f6:a8:9b:c3:bd:a3:19:69:54:03:
30:57:99:77:03:9d:41:e0:2f:18:62:17:f5:c9:26:
42:17:2f:b8:c3:59:53:94:a5:28:8d:cf:45:cb:dc:
6a:c0:7a:27:3a:7b:a0:b3:aa:4d:33:d9:6a:77:39:
bf:58:92:41:0b:8f:c6:55:39:a0:c1:90:bb:f1:66:
bf:e9:39:c0:1f:d5:4a:31:a0:27:6b:bd:86:06:27:
62:bf:7f:83:87:40:bc:d8:a8:1b:e8:17:b4:24:60:
b8:ea:72:5d:fb:13:be:37:0d:95:a9:4b:98:ad:17:
4e:ad:77:8e:59:92:9d:d9:2c:0c:d7:4b:83:82:ab:
fe:3c:c1:26:14:5a:3c:24:26:2c:9e:e8:9d:4e:6d:
44:7c:07:92:aa:5c:81:86:df:15:cf:48:c3:06:ee:
62:a6:f6:b2:93:7f:18:e1:af:ac:c0:4d:2b:0d:ce:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:9A:20:99:9B:65:7A:41:CC:2E:1C:01:97:DF:D3:E6:F0:8D:D8
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d1:52:56:ae:78:62:28:15:19:78:87:83:b8:cb:c1:45:0b:
51:7b:1e:bb:f0:80:c7:bd:28:51:14:ec:d3:29:fb:71:9b:2f:
c4:ed:f0:36:ad:77:42:c6:0d:ea:f0:69:ad:b3:fc:d3:32:a5:
eb:80:21:27:e9:66:a3:62:92:0e:ec:f9:b2:07:f9:66:f3:4e:
d4:07:da:c6:4d:8a:75:fe:71:40:c1:be:bd:c0:de:df:2a:17:
40:0e:23:31:8f:bb:3f:b5:fb:ab:af:b7:d0:7b:52:a0:b7:f9:
bf:e6:35:23:93:61:b0:f4:7c:69:37:08:62:f4:81:64:ab:53:
0e:b1:d7:4e:a0:04:4d:e7:53:34:23:88:48:90:ff:02:25:72:
2f:fc:02:85:82:26:1a:85:78:a5:cc:ad:03:fc:46:8b:b7:9f:
45:d5:b3:54:6c:95:3b:78:f9:c9:48:a0:95:49:b0:57:df:5e:
7f:32:fc:11:7c:1c:f9:43:c8:04:36:8d:b7:27:96:9e:34:52:
49:63:05:ee:57:12:1b:be:27:1e:06:b1:aa:d8:4e:25:a3:64:
74:78:d5:6f:78:c8:2f:24:e7:71:76:4e:c4:f4:4b:cb:44:ab:
b4:44:fb:bc:60:0b:e8:13:21:93:d4:aa:0c:7d:41:82:1e:4c:
82:11:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net