Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: JO4r3VvJC+pMhvPXM1lzvIsGygL963wUAz+dGrmb+rU=
Subject key identifier: 01:B4:18:8F:AB:02:23:C5:F5:88:BB:AF:5E:A6:52:93:E8:B1:91:88
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 01962F3DAF9B0F5D02C8EEA13F97880549D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 122C
Signing time: Sun 13 Apr 2025 13:01:33 +0000
Manifest this update: Sun 13 Apr 2025 13:01:33 +0000
Manifest next update: Mon 14 Apr 2025 13:01:33 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: KcmT+a2SQj/rtmj7s5kKXp9qQxBO/tWUzzm128tN/MQ=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:af:9b:0f:5d:02:c8:ee:a1:3f:97:88:05:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Apr 13 13:01:33 2025 GMT
Not After : Apr 14 13:01:33 2025 GMT
Subject: CN=01b4188fab0223c5f588bbaf5ea65293e8b19188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:54:f4:28:52:a0:76:cf:3c:07:5d:a3:fa:
3f:eb:ea:d4:3c:d1:c2:1b:61:ab:fe:3e:1c:02:94:
ba:bc:e8:88:e5:73:39:12:19:e5:70:59:79:33:a2:
b8:36:db:cd:c8:20:4c:e2:c6:b8:56:99:87:0d:3f:
e7:cd:ea:8b:7c:42:1b:7f:3b:60:8b:01:47:9e:c3:
f5:c4:5f:92:2d:ae:ef:4e:06:69:b9:94:da:19:4f:
a0:1f:de:89:e9:e6:a0:35:f1:0a:f3:0f:39:16:a8:
64:9b:26:6e:30:8d:02:8b:bb:0e:8c:8d:e2:af:07:
4f:92:ea:f9:57:ca:13:c4:70:94:c2:ec:11:96:2f:
6e:c2:13:9d:50:2f:ea:fb:11:d1:e2:9d:b6:0b:88:
ee:26:3a:22:2e:a9:9d:81:9d:bd:d8:50:10:f9:c0:
43:82:53:95:1b:17:73:30:e6:a8:9f:df:cb:b3:4d:
34:92:96:20:a9:52:ee:fd:09:53:c1:8e:21:50:49:
28:97:4b:6c:77:14:c3:1d:dd:b3:c2:09:67:7d:8d:
a6:ae:00:74:9a:a7:85:1f:d3:d7:19:40:5f:d1:da:
48:d8:af:19:92:80:00:4b:7e:51:cd:a5:2e:3e:e5:
47:f7:bb:67:30:fc:7a:60:45:88:79:ef:e9:13:00:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:18:8F:AB:02:23:C5:F5:88:BB:AF:5E:A6:52:93:E8:B1:91:88
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:06:13:44:99:85:71:cc:e0:32:17:1b:4a:cc:63:00:bd:51:
6e:88:e3:7d:c9:9c:78:ef:53:91:10:93:85:aa:c0:8f:a4:f2:
9d:d9:84:6e:76:d4:61:35:7a:97:15:b0:58:c8:25:59:55:da:
19:12:76:2a:2c:09:72:94:04:58:a3:97:05:be:d6:6c:20:d5:
4d:01:74:1d:ce:1d:1b:17:da:4c:86:a8:c7:11:72:6e:c4:f0:
f8:da:6d:57:4f:7b:ae:b4:9a:e7:df:53:f5:d4:fa:89:51:f9:
b0:52:a3:e6:ff:5c:88:f0:17:93:09:92:a4:dd:0a:f6:da:87:
8e:7b:3f:20:84:e5:f4:a0:b9:09:2f:24:75:fd:5d:76:b9:49:
d3:85:5f:b1:05:42:ff:a0:68:7b:5c:ba:a9:fb:f7:60:d0:37:
25:fc:1c:1f:ed:6a:ed:74:b2:4e:bf:e7:fb:d4:f7:62:07:6a:
01:d2:8a:21:b6:95:f4:a6:ce:78:8a:24:7b:d1:bd:38:b9:63:
de:3b:a8:00:18:82:81:9b:c7:da:07:be:d8:73:89:a4:e2:ec:
0f:be:d1:74:2d:f7:3c:8c:1e:fb:f4:60:9c:85:39:74:d9:8c:
04:b0:4d:ea:fe:54:58:9d:b8:a4:cf:0b:f7:4c:15:2b:73:b9:
fc:1e:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net