Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: MZLfM3k6agS8zgvLX80tB3C/wwjOGC/BIkdEWvy8/Ec=
Subject key identifier: 95:6D:37:F1:34:EC:F7:97:56:4C:58:17:32:63:FD:FB:5B:BC:3E:C2
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 01962F74D717F955B45887B21FEE5C13B9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0AC3
Signing time: Sun 13 Apr 2025 14:01:48 +0000
Manifest this update: Sun 13 Apr 2025 14:01:48 +0000
Manifest next update: Mon 14 Apr 2025 14:01:48 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: /M+AMzYbLrh/ZT3HyXRRQL78MY7tgyJIEGEVl4rDVNA=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:d7:17:f9:55:b4:58:87:b2:1f:ee:5c:13:b9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Apr 13 14:01:48 2025 GMT
Not After : Apr 14 14:01:48 2025 GMT
Subject: CN=956d37f134ecf797564c58173263fdfb5bbc3ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:39:4c:b5:06:38:d1:ee:4f:fb:95:e6:43:
e2:6c:2a:ff:67:b6:4e:ac:bb:30:42:94:96:9c:47:
62:01:ed:5f:93:7a:14:07:53:50:01:56:ab:18:ad:
a9:ab:0c:2b:9f:07:3c:2a:58:7e:30:2c:81:ce:2a:
6c:cd:34:6e:ff:dd:e2:f3:e0:8e:7b:de:a3:f7:99:
41:3b:ce:cf:27:7f:37:d7:06:1c:21:4d:5f:10:12:
65:ff:8c:09:f2:e7:64:20:08:03:71:5d:5f:16:c1:
1d:ab:3d:58:bb:e9:be:28:ca:7a:97:7c:6f:51:81:
21:82:00:17:54:0f:93:67:c3:2c:c6:19:4e:96:af:
cd:b9:b2:31:4f:76:3a:d4:dc:57:98:8a:5a:f7:2a:
c6:26:66:c2:c7:5a:cc:fa:98:75:53:57:a5:51:b2:
38:17:33:ff:5b:69:92:89:4d:f0:75:91:be:98:09:
3b:0a:2c:3d:ab:1f:e3:7d:5d:2f:d6:dc:31:7b:ca:
92:49:e5:df:6b:49:64:16:ff:40:ca:7d:cc:d0:c8:
eb:e9:0a:26:95:9d:46:d1:d9:d8:c9:69:a9:e3:bc:
3c:2e:95:da:2a:93:9b:c1:37:44:07:5c:05:67:b3:
f4:be:d8:9a:2a:94:c0:c9:b4:a8:8d:4c:28:3a:ba:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:37:F1:34:EC:F7:97:56:4C:58:17:32:63:FD:FB:5B:BC:3E:C2
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:0a:4d:6f:c1:28:56:d8:a9:ad:f7:bb:c2:a5:6b:c2:74:
74:70:fb:d1:06:d5:b9:67:06:69:1f:81:07:af:e5:ec:5c:8b:
97:4b:6b:db:15:73:01:c8:a4:8a:0f:97:dd:55:d6:59:e7:77:
c6:46:3c:23:91:bb:8c:bd:93:d4:dc:e0:02:21:ac:c0:76:ab:
e9:e9:c2:fa:2a:ea:5f:39:40:a6:e1:40:f0:85:8d:b2:0e:d8:
57:c3:12:22:62:8a:b6:cd:8e:f0:68:c1:1e:82:70:c0:7c:1a:
86:00:b0:b7:13:fe:a4:20:e3:3e:d7:94:43:4e:65:d1:37:5d:
bf:9d:0d:23:e8:84:ae:60:c6:3d:fc:56:ba:11:46:b5:02:00:
c7:f6:63:d0:6d:21:19:9c:d6:2b:12:75:1e:42:6d:54:d6:b3:
16:98:25:66:73:8f:8c:63:ed:35:0f:16:a7:9e:64:f6:52:bc:
b5:39:fb:c9:9f:ab:f2:a9:10:40:91:76:2b:6a:2c:e8:3d:ed:
d4:6d:cb:a6:4b:d3:a9:84:e1:4a:30:35:41:95:ef:e2:33:90:
cc:a6:0b:c5:1b:04:f7:59:4e:34:e5:b1:04:c9:ee:b3:9a:3e:
2c:f7:70:fc:d8:41:70:c8:e0:0b:4d:da:a1:64:92:e1:06:98:
0d:16:b7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNcX+VW0WIeyH+5cE7muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjUwNDEzMTQwMTQ4WhcNMjUwNDE0MTQwMTQ4WjAzMTEwLwYDVQQD
Eyg5NTZkMzdmMTM0ZWNmNzk3NTY0YzU4MTczMjYzZmRmYjViYmMzZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jw5TLUGONHuT/uV5kPibCr/Z7ZO
rLswQpSWnEdiAe1fk3oUB1NQAVarGK2pqwwrnwc8Klh+MCyBzipszTRu/93i8+CO
e96j95lBO87PJ3831wYcIU1fEBJl/4wJ8udkIAgDcV1fFsEdqz1Yu+m+KMp6l3xv
UYEhggAXVA+TZ8MsxhlOlq/NubIxT3Y61NxXmIpa9yrGJmbCx1rM+ph1U1elUbI4
FzP/W2mSiU3wdZG+mAk7Ciw9qx/jfV0v1twxe8qSSeXfa0lkFv9Ayn3M0Mjr6Qom
lZ1G0dnYyWmp47w8LpXaKpObwTdEB1wFZ7P0vtiaKpTAybSojUwoOrqdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVtN/E07PeXVkxYFzJj/ftbvD7CMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE8KTW/B
KFbYqa33u8Kla8J0dHD70QbVuWcGaR+BB6/l7FyLl0tr2xVzAcikig+X3VXWWed3
xkY8I5G7jL2T1NzgAiGswHar6enC+irqXzlApuFA8IWNsg7YV8MSImKKts2O8GjB
HoJwwHwahgCwtxP+pCDjPteUQ05l0Tddv50NI+iErmDGPfxWuhFGtQIAx/Zj0G0h
GZzWKxJ1HkJtVNazFpglZnOPjGPtNQ8Wp55k9lK8tTn7yZ+r8qkQQJF2K2os6D3t
1G3LpkvTqYThSjA1QZXv4jOQzKYLxRsE91lONOWxBMnus5o+LPdw/NhBcMjgC03a
oWSS4QaYDRa3mg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net