Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: KbCsmq+PrUS60U8dVOP8ZPBuGntZ9NENJcX9ShPf4iU=
Subject key identifier: 02:50:13:32:93:B3:ED:20:00:23:12:F4:19:B2:36:D7:A4:7B:13:5A
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 01962F066588A0B9FE5F34752EA1C61C781D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 0EE5
Signing time: Sun 13 Apr 2025 12:01:10 +0000
Manifest this update: Sun 13 Apr 2025 12:01:10 +0000
Manifest next update: Mon 14 Apr 2025 12:01:10 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: MVlCu9hl8J3gMNkO5SG+n3QacKd8r/o43tbm5+VhpCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:65:88:a0:b9:fe:5f:34:75:2e:a1:c6:1c:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Apr 13 12:01:10 2025 GMT
Not After : Apr 14 12:01:10 2025 GMT
Subject: CN=0250133293b3ed20002312f419b236d7a47b135a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:e2:22:46:45:aa:f2:78:8b:48:fe:58:3f:
83:93:d3:7f:10:00:9c:08:4f:b5:82:32:20:e0:2b:
c5:f2:fb:ac:be:86:2c:63:01:b2:b9:0e:0a:01:89:
9c:99:12:5d:a1:3e:85:11:af:ce:dc:0c:77:ec:cc:
52:ce:4a:bc:76:0f:3a:8a:f2:76:e1:18:c8:87:1c:
8b:7b:2a:d3:38:53:c4:a8:f8:0b:d3:59:5d:b8:b2:
28:4f:d3:15:71:36:c5:ff:3c:68:cf:0b:6f:78:48:
25:d0:72:3f:4f:5d:9c:a5:c5:7e:6a:97:4a:f2:78:
d4:ee:5a:5e:2a:21:f7:b8:ec:b4:80:97:a1:cc:56:
11:44:e2:32:d4:96:55:df:63:04:b1:6a:00:30:0a:
51:88:8a:ae:a3:c2:62:1d:f9:35:2f:a8:ed:9b:f7:
86:27:44:84:86:9b:d5:fd:20:a7:f9:cc:9a:eb:a7:
3a:1b:b2:41:66:b3:32:a4:4e:77:93:6e:ad:69:45:
bc:be:38:32:ea:c5:2e:ad:cc:22:54:eb:39:39:65:
81:2d:8c:db:8b:82:ac:99:98:0c:94:a2:10:c3:a0:
8f:b9:b5:29:13:d2:22:49:e7:5d:db:04:44:4e:05:
88:9a:2c:25:78:e3:8e:ce:a3:f7:56:59:73:fe:97:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:13:32:93:B3:ED:20:00:23:12:F4:19:B2:36:D7:A4:7B:13:5A
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:55:b4:29:88:b6:08:f1:31:da:f0:1f:82:77:82:57:1d:
5d:6d:aa:c9:2e:70:b1:37:0c:27:a3:d6:89:ff:06:b3:5c:14:
e1:88:3e:48:d2:e3:a0:40:b1:9c:c6:c7:c3:c3:6f:f9:c5:7a:
c8:fd:f4:56:3e:40:4d:b6:6d:20:58:21:45:9b:dc:0c:e8:3c:
90:13:03:94:0f:7c:61:31:16:4f:a7:c6:ea:18:d2:9e:c5:b9:
31:22:68:08:20:4c:79:06:b3:e9:ec:e4:38:7c:96:85:cf:03:
e6:ef:ad:67:d2:83:3f:b7:b1:e9:c5:ac:cb:4d:67:4c:0a:3a:
c6:a9:35:f5:76:c3:8c:b9:c7:6d:84:9e:aa:1a:0a:de:dd:3d:
03:f9:5e:2f:39:1a:d2:71:ca:cc:db:25:4d:78:7d:7d:36:4d:
b6:3d:43:71:3b:6e:c2:2a:71:59:09:b1:39:b4:6c:29:2b:dd:
2a:9e:71:67:df:4b:e4:62:79:97:6e:ca:78:18:d1:f1:f9:ae:
73:0b:9c:5d:3a:1b:5b:d3:ec:4f:ae:8e:f4:b0:62:19:12:9e:
30:ed:f5:bb:60:48:d7:4f:df:dd:85:6a:10:de:ff:65:8c:cc:
8d:80:a0:7b:4d:fa:ce:8f:d2:b6:f0:68:a4:41:e4:5b:b3:95:
ba:ef:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net