Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: A7d+I1H4KjpCFhUhYriXU/NNR1FERH/ILi02EEFLKd0=
Subject key identifier: 47:AB:B3:86:30:B5:C5:99:4D:DA:EB:0E:E9:C8:75:3F:B6:B4:FB:37
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 01962F7418D376084179DCB517ED716C9192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 14:00:59 +0000
Manifest this update: Sun 13 Apr 2025 14:00:59 +0000
Manifest next update: Mon 14 Apr 2025 14:00:59 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: 4MEfRvKLEeKAs/B+lNeDm/5DZvhXtV5RAcL1LBvoVOU=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:18:d3:76:08:41:79:dc:b5:17:ed:71:6c:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Apr 13 14:00:59 2025 GMT
Not After : Apr 14 14:00:59 2025 GMT
Subject: CN=47abb38630b5c5994ddaeb0ee9c8753fb6b4fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:be:e2:65:11:62:52:74:c5:8a:12:24:c3:
1a:dd:2e:33:f3:84:2c:02:6b:1a:5a:75:ae:35:fb:
4d:8c:32:5f:ba:59:b5:73:2f:5f:51:e9:dc:9c:20:
f7:8e:40:7d:38:0a:f3:0f:20:c4:9f:11:ab:23:e1:
b7:c4:8a:5b:db:c7:26:75:1b:5a:0e:4a:2b:dd:16:
54:5a:1e:ba:3b:9f:6b:2f:e4:8b:ab:b7:a8:3b:be:
20:76:37:18:a8:1a:96:f5:2d:29:c8:4d:a3:50:3d:
6a:a2:8c:c0:20:35:42:02:c6:b6:b6:c1:c6:c6:e9:
96:a7:6e:c6:4b:2d:d9:cc:8f:51:e2:00:f3:b4:8a:
ae:fe:b3:7c:4d:9a:dc:ab:bd:7f:09:5e:36:57:b5:
42:27:e3:c5:a2:a8:8e:5e:9d:45:a3:45:d9:93:f1:
28:66:2d:90:77:bd:cd:5d:ef:c1:cf:20:2f:15:6b:
69:32:93:f6:4d:e6:be:3b:cb:db:90:48:21:da:5b:
8b:6b:34:a6:4c:d2:72:8e:61:c6:a1:69:f8:8e:36:
c1:59:07:72:fa:b9:93:70:fb:62:6d:ea:27:b3:b6:
ba:66:94:47:a3:28:e0:2a:0c:69:8a:a9:45:43:bd:
b3:77:df:8c:87:bf:5d:cc:63:24:45:6d:6c:3a:58:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:B3:86:30:B5:C5:99:4D:DA:EB:0E:E9:C8:75:3F:B6:B4:FB:37
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:1d:c6:cc:fe:fa:4c:7a:9f:13:79:fb:e1:43:db:96:70:
a5:35:9e:e5:71:c4:b0:e3:c4:5b:70:c7:19:d6:28:b4:7e:09:
6c:b0:0f:9c:22:f8:e4:4e:b1:f5:5b:54:2d:2f:4b:8a:89:4a:
12:5d:fb:84:f8:8d:ad:0f:ec:93:90:2d:ae:08:4c:aa:aa:0e:
88:78:de:18:99:c9:3e:00:a5:39:fd:6b:06:79:57:96:1d:33:
a5:b2:a8:f9:6b:c8:97:43:b7:c6:88:35:7a:51:98:c9:df:0c:
53:8f:80:47:d5:1d:e0:b9:b5:2c:93:71:a8:92:83:09:e4:25:
15:20:cb:f7:46:e7:1f:e9:3a:7f:4d:58:7e:fc:97:93:a9:1b:
8f:4e:49:c4:01:20:ae:37:3e:fd:c0:25:3e:7a:d3:96:9e:da:
4b:d4:35:ff:ac:1d:90:c2:9a:2a:13:36:60:a0:d5:a4:9d:a9:
9c:2e:5a:86:de:30:a2:71:6c:e7:5b:34:82:8b:39:ea:3f:e7:
6b:52:3a:c2:29:c7:b6:fd:35:06:9f:d2:ec:cc:33:de:3b:4e:
2b:d0:70:0f:4f:bd:8a:e0:7f:bf:81:2b:4b:94:04:18:fe:cd:
7e:1b:e6:d9:09:f8:9e:aa:e1:ae:ae:1e:cc:a1:3f:96:a6:33:
a9:43:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net