Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: aC6CXMPQzlvzF8zqC4XHSpwqMvSfczSXPv++BigRrKs=
Subject key identifier: 77:D0:85:99:40:32:AA:64:3E:D0:1D:29:67:CD:68:3D:89:BB:F5:55
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 01962F065043AF950D8F32F256106CBA2341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 07E6
Signing time: Sun 13 Apr 2025 12:01:04 +0000
Manifest this update: Sun 13 Apr 2025 12:01:04 +0000
Manifest next update: Mon 14 Apr 2025 12:01:04 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: UL0Q5/DKLtnyvmVc1i+cgJ1iZLkrXPP6bzty+qKp17Q=)
2: 4Eso2GRh3TFlocCc5lcI1-kD4Pk.roa (hash: ZZWcQEmA2vmSeltVrHKBZfPJ+X7E/tLB/wKbTZ0f8BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:50:43:af:95:0d:8f:32:f2:56:10:6c:ba:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Apr 13 12:01:04 2025 GMT
Not After : Apr 14 12:01:04 2025 GMT
Subject: CN=77d085994032aa643ed01d2967cd683d89bbf555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:53:a0:cb:51:1b:a7:dd:d9:d0:56:5d:16:
44:94:8c:17:f3:c3:e2:50:8d:84:74:d3:78:5c:63:
b4:d3:91:13:6f:7a:66:3d:83:74:71:77:6a:8b:c9:
c8:cb:c0:f0:09:ed:8e:25:41:97:07:c9:76:74:fd:
f7:ad:a5:67:32:df:1c:9b:a3:57:68:b8:41:72:21:
2b:ef:23:c3:1e:87:2c:90:4a:23:0c:46:91:48:d6:
9b:7e:9e:7c:01:9c:76:c5:fc:0e:73:db:d4:f5:2b:
08:b6:ce:30:b0:20:18:43:58:72:6c:ef:4b:4e:2c:
d2:0e:83:8b:13:1f:d7:da:e8:5c:15:b6:41:c3:f6:
73:73:66:92:6c:3f:58:8e:87:0d:ad:c9:0e:e0:5b:
f3:82:9d:d3:78:c3:28:bf:bb:cf:6e:80:d2:b6:7a:
fc:79:1c:a5:21:c0:c3:b0:7e:77:e7:1e:b2:8a:4e:
ad:5c:35:a0:d2:18:14:04:c7:52:be:b5:25:35:45:
c5:d7:27:f1:96:50:19:77:8b:0c:d7:c0:b7:25:5d:
6b:d4:00:39:0d:e1:d3:9d:81:fb:03:dc:ed:fd:af:
df:3b:c3:18:08:b2:8d:0d:0d:e2:ca:27:b8:5a:fd:
b2:f1:2f:ff:6b:bc:f1:b8:17:f3:50:1d:d8:3a:3d:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:85:99:40:32:AA:64:3E:D0:1D:29:67:CD:68:3D:89:BB:F5:55
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:af:b3:b7:4b:4f:0c:85:32:f9:99:70:a3:e6:7b:53:95:
ba:13:c6:46:c2:ac:71:13:50:fe:c8:da:a6:26:f3:7f:f8:34:
d7:eb:c6:fd:9c:d1:70:1f:ec:c5:2f:1d:31:df:16:18:18:1d:
94:78:63:7d:79:34:e0:f4:36:0f:2d:66:b6:e6:31:94:99:ff:
6a:6a:25:4f:4e:0c:ea:a6:39:ac:2b:5d:97:fa:01:bd:a8:c5:
86:3e:fa:e7:c9:ef:4f:7d:9c:4e:59:81:62:39:83:93:e6:40:
76:33:c6:32:1a:26:90:24:94:2a:f7:26:e0:05:8b:f1:e3:a5:
9d:a4:b1:36:50:f9:31:cd:71:f5:24:9c:73:6b:8a:e5:e8:24:
94:9c:2f:17:76:69:0e:09:ec:ac:1b:14:70:77:69:9c:cb:71:
83:db:d6:d8:18:c7:68:34:9e:c4:ee:88:cf:12:1c:56:af:af:
1b:d8:76:cb:44:8d:62:f9:92:c9:69:45:d3:bb:53:08:00:1e:
b6:fe:f9:3b:1e:38:e5:4e:e9:b3:87:d9:0b:57:6b:08:2a:ee:
de:38:a2:fe:5e:27:32:ed:7a:5e:3a:35:ae:ed:f0:b2:20:ed:
6c:3f:e0:00:63:9c:85:64:59:95:1d:c2:ab:e1:22:d3:39:7b:
c2:65:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net