Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File: doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier: ocPkTmIQvDK32f4ixZXYKQ9MtmVk08St49kWoiW5HKE=
Subject key identifier: CA:F0:75:08:F7:CB:86:F5:F4:C4:DF:61:29:85:0F:CA:BF:D1:92:38
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer: /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial: 01962E2B19335056F0D2281EBED64E391B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 08:01:38 +0000
Manifest this update: Sun 13 Apr 2025 08:01:38 +0000
Manifest next update: Mon 14 Apr 2025 08:01:38 +0000
Files and hashes: 1: VGNUuwe-hqqAy7oOkHM2nEayK1o.roa (hash: PbhbER0ewQHcNx+5Jye/cmyEemdCt4HhzE4je62M8OM=)
2: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: ASpUxKAhzE1h//w9Xy9dRI95vn0YKs7bMe4UnKW2Wfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:19:33:50:56:f0:d2:28:1e:be:d6:4e:39:1b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Validity
Not Before: Apr 13 08:01:38 2025 GMT
Not After : Apr 14 08:01:38 2025 GMT
Subject: CN=caf07508f7cb86f5f4c4df6129850fcabfd19238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:19:c6:3c:aa:5d:52:b0:6a:da:3c:25:8c:
fe:24:65:95:3c:b4:0c:cf:d1:20:de:58:66:57:51:
3d:1c:2d:f0:a7:dc:6f:ed:7a:12:ff:09:37:ec:99:
b9:4e:04:9f:e0:d1:17:9d:de:72:88:af:83:f3:18:
5d:7e:e9:c1:de:44:44:ef:4c:81:ac:64:05:8f:ce:
73:2e:ee:16:7e:8d:67:e5:6f:c7:94:16:d8:df:93:
db:72:6c:31:aa:8a:f0:a7:dc:56:32:7d:c9:a6:ea:
d3:c1:34:43:86:83:13:76:87:56:ae:ff:0f:07:77:
03:03:8a:80:e7:49:bf:99:92:43:05:95:12:23:57:
21:42:94:a3:af:ab:9e:ab:02:28:0e:c0:2c:47:52:
15:1b:7e:15:d2:af:df:c7:ec:1c:b2:85:ad:06:f5:
04:85:c1:6b:4a:18:5c:a2:57:05:a4:e5:29:66:dd:
7f:76:5a:c3:51:22:89:fb:ed:d6:35:94:66:7a:ec:
aa:45:6a:01:20:7d:27:bf:15:1d:5b:99:97:8c:4f:
94:73:d1:ae:2b:85:49:47:49:29:4c:a1:38:6f:49:
8d:d7:c1:23:d9:c6:b8:ea:f8:91:dd:c5:8f:5c:fc:
29:8f:19:1f:c7:7c:7e:3f:4e:fc:b9:6d:9c:44:d0:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:75:08:F7:CB:86:F5:F4:C4:DF:61:29:85:0F:CA:BF:D1:92:38
X509v3 Authority Key Identifier:
keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:bd:8e:6f:d5:58:d8:67:80:94:79:27:48:c6:a7:3e:46:
43:d2:b3:8e:b1:96:6e:16:d3:57:ee:d2:52:02:49:22:2a:f9:
81:64:45:bc:92:81:9c:ea:38:61:8d:a3:63:b1:eb:c3:09:cb:
4f:5a:6c:98:eb:28:f3:7b:f2:3c:a5:14:a8:52:46:08:51:50:
5b:42:7d:da:b8:35:a6:69:4c:26:e9:58:1f:69:c3:eb:20:c3:
28:9a:a9:39:7f:c4:9f:c6:7f:35:fe:60:82:f3:17:23:87:97:
bd:dd:4f:97:20:4b:a9:d8:c0:86:88:83:b2:14:b6:bd:dc:00:
58:ec:59:ce:f7:69:f7:17:4b:e1:fc:de:e7:ce:a3:49:df:67:
51:4d:ff:c7:2c:ba:d4:bf:a9:11:74:84:43:83:1c:ab:9c:7c:
0c:0a:7e:09:29:e1:eb:98:62:60:ba:a5:6e:3a:da:50:67:a6:
20:78:55:0f:10:26:61:58:05:74:70:72:82:d0:a9:be:70:1f:
6f:c1:0a:cc:7d:84:a0:c3:87:15:dd:76:e9:b7:47:a9:34:50:
72:f4:42:cc:71:b6:01:5e:04:18:bd:80:a6:16:b4:7e:6e:1b:
90:de:ff:e2:8d:90:ff:13:99:f6:e3:52:4d:b0:14:e3:a0:26:
c2:b7:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net