Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
File: tAqlFjSW4FOna21pzcRfdQBs2N8.mft (raw, json)
Hash identifier: Bs4Y8UOWb8BmM7sD2H571MwsBqgG8addSVwYEQqVRpQ=
Subject key identifier: A8:75:FF:76:2A:4C:06:7A:C0:85:0E:48:AF:CA:E1:E6:7B:E1:BB:F7
Authority key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
Certificate issuer: /CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Certificate serial: 01962F74AF9B71FDC823738F962DD7267BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 14:01:38 +0000
Manifest this update: Sun 13 Apr 2025 14:01:38 +0000
Manifest next update: Mon 14 Apr 2025 14:01:38 +0000
Files and hashes: 1: 1-d6DUI7mmJKHILGE-ACGJbIFV40.roa (hash: WM+ispXO9qKwdYzXWtwDmpPip6PK1PIBVYZaFFY6Sl4=)
2: tAqlFjSW4FOna21pzcRfdQBs2N8.crl (hash: 9165VLb4n9rVIFvXyZYvillAEObcOS6g9ICQKeqS5Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:af:9b:71:fd:c8:23:73:8f:96:2d:d7:26:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Validity
Not Before: Apr 13 14:01:38 2025 GMT
Not After : Apr 14 14:01:38 2025 GMT
Subject: CN=a875ff762a4c067ac0850e48afcae1e67be1bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:70:5f:ce:75:c0:1a:d7:69:76:be:6e:9b:
95:fc:2e:d2:d9:c4:80:50:f6:4b:4f:4a:51:e3:1a:
55:c2:0f:11:54:5d:aa:49:9d:d9:cd:02:0c:82:6d:
f1:59:d1:c4:81:66:4f:15:20:0d:91:99:3f:3d:35:
fe:81:92:0a:b1:06:46:82:93:ce:73:ff:19:89:16:
b2:85:19:f3:78:ab:09:48:e9:bf:0c:06:7c:65:87:
f9:57:52:d0:94:86:9a:74:a6:41:e0:cc:79:94:40:
2c:ab:6b:a4:ae:3a:52:f8:fe:88:64:5d:f6:b5:92:
b7:fd:98:cf:93:4c:32:e3:9d:1c:42:cf:c6:af:13:
0e:e9:c9:4b:88:c3:da:d9:39:1b:15:2b:9a:3a:2b:
d3:65:f1:9c:a5:32:0b:7f:d3:74:bc:be:40:8d:43:
5c:45:63:c3:d2:bc:34:44:11:e7:aa:20:d7:10:07:
fa:10:09:b4:0e:7e:db:22:0b:0e:b1:78:cb:74:72:
0c:79:23:5f:83:ce:71:6d:06:57:f5:80:c3:7d:67:
2b:05:8b:2e:b2:c1:b3:17:48:f8:ec:db:64:e1:44:
24:fd:aa:25:68:9c:fd:e7:95:28:07:dd:67:e6:f5:
61:9e:96:b9:d5:fb:02:ca:ce:bc:30:08:cd:1a:ec:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:FF:76:2A:4C:06:7A:C0:85:0E:48:AF:CA:E1:E6:7B:E1:BB:F7
X509v3 Authority Key Identifier:
keyid:B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:3a:3d:6b:db:99:50:11:e3:52:44:d4:e7:ee:bc:5f:d4:
04:56:89:d1:92:f4:b3:d1:61:55:99:0e:9b:02:c2:a2:8c:92:
65:84:fb:64:c4:df:19:69:78:5c:d4:da:ac:ff:90:39:98:a2:
cc:93:f9:3b:1e:65:a8:17:39:72:66:40:8f:4c:ee:de:1c:b1:
c4:72:81:8d:0d:6d:e3:06:8a:cf:03:d2:e1:92:b3:7b:8c:85:
8f:32:e7:61:5d:0f:fe:b4:a0:41:d4:52:db:9c:be:84:c3:83:
4f:af:4f:f3:c3:26:ff:4f:0c:ef:e5:c5:bd:d2:9b:10:76:81:
b0:ce:4c:98:9d:1b:92:37:ba:58:34:26:4b:eb:4e:94:16:81:
31:19:7c:c1:60:ac:40:4e:d4:ec:d8:42:92:69:fb:be:6a:59:
61:7c:e6:12:bb:55:9c:e8:5a:28:31:82:8e:b4:69:4e:6a:e3:
40:9d:f5:a4:28:f3:f5:41:06:49:a2:dd:81:50:f1:f1:96:f4:
e7:2e:da:5f:3e:89:7d:ce:4b:46:6a:d2:e2:d9:4b:a4:46:7c:
d6:5e:58:5f:ed:36:d8:b6:8f:57:69:a2:cb:14:26:b2:e7:b4:
57:6c:ef:ca:80:24:b3:3b:73:88:62:0c:9d:41:d6:f6:c2:db:
01:6f:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net