Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: eVaoTR53ni1ISQwGys3kyOen3T6domQE/c2cmjPKZMw=
Subject key identifier: 3B:63:98:C6:03:D5:3D:09:86:46:AE:84:70:B8:DF:D3:53:B4:47:A4
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 01962E994CD7BAE5903683C2FDA337B26FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0BCB
Signing time: Sun 13 Apr 2025 10:02:00 +0000
Manifest this update: Sun 13 Apr 2025 10:02:00 +0000
Manifest next update: Mon 14 Apr 2025 10:02:00 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: W7Vf6Db4J9CCq7CKq7sLpbJsoVJVQfTMKcEPxU8HtYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:4c:d7:ba:e5:90:36:83:c2:fd:a3:37:b2:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Apr 13 10:02:00 2025 GMT
Not After : Apr 14 10:02:00 2025 GMT
Subject: CN=3b6398c603d53d098646ae8470b8dfd353b447a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:09:35:1f:8b:a2:3d:56:66:d7:1b:8c:9f:
ba:36:dd:17:09:19:9f:35:23:a9:1b:a3:0f:86:6c:
79:50:eb:45:b7:81:4f:25:6f:32:60:dd:c4:09:3a:
e9:04:c4:9c:5e:24:c5:60:88:0c:f6:04:4a:e5:cb:
a7:ce:e9:8b:61:34:a4:c7:29:01:1a:53:38:2d:6b:
b4:29:44:fa:7f:28:16:b0:0f:0f:5b:29:5f:c7:ff:
e2:8e:48:cd:96:84:6f:c5:db:ac:b2:94:4f:94:16:
dd:7f:1b:be:1f:93:55:6f:ae:b9:e3:ad:ad:2b:7a:
27:4c:0a:97:80:fb:b8:3f:b5:55:17:03:4f:c2:7f:
c7:0d:a3:34:3c:08:c4:82:3d:cc:fd:93:08:00:6c:
eb:c6:8f:2c:bc:c8:31:ec:34:f5:9b:69:32:e0:86:
18:12:94:5b:bf:9a:89:f7:bb:91:5c:ae:1b:a3:ef:
7d:35:29:6e:c4:4b:65:3e:ed:84:80:b2:59:67:f7:
a0:6d:cd:78:a1:83:3f:2b:df:21:ad:fd:b1:1c:5e:
35:5f:3d:82:e8:b4:4c:ba:26:15:98:97:91:17:3c:
27:ed:47:2a:27:b5:2f:f1:ef:a3:17:24:8d:44:b5:
50:aa:e6:38:57:ac:27:cd:7e:4b:4b:1d:32:f5:df:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:98:C6:03:D5:3D:09:86:46:AE:84:70:B8:DF:D3:53:B4:47:A4
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:b8:7c:c3:30:c7:ff:bb:c5:c4:26:c7:57:40:62:f3:14:
78:67:5d:54:da:13:f4:7f:c1:9e:3e:e4:9f:b9:78:1a:42:05:
8a:5a:f1:59:00:41:f5:01:86:3e:0f:4e:1c:73:88:04:2f:9f:
ec:3b:1c:29:d6:cd:8d:59:71:10:3d:cf:4a:71:c1:3c:ff:16:
88:5b:b7:74:02:00:9a:ad:6e:63:f8:63:ba:a3:f9:ca:42:ea:
3f:80:eb:79:5b:be:b8:97:ce:e7:81:9c:0f:1f:b6:e9:3a:5d:
84:1e:81:a8:49:35:ec:7e:f1:70:a5:65:f1:d7:fb:b1:4a:25:
1f:19:2b:14:84:06:d3:3e:69:34:ef:f6:fc:e4:82:27:50:ea:
94:b1:54:c3:1d:48:a9:d8:64:9f:32:f6:17:c7:75:32:1d:32:
c4:09:92:c5:9f:36:b8:6e:22:3e:6d:bf:a3:a4:7e:ea:2e:72:
82:5b:0d:b8:51:c5:10:6a:33:31:ac:4b:bc:b2:06:98:43:90:
46:48:5c:37:8b:98:80:5d:06:32:8d:bd:3d:b4:67:fb:1f:e7:
97:41:1e:8c:77:4a:ce:3b:f1:67:08:58:7d:e8:75:4e:f7:9e:
b2:2f:92:b0:8a:d5:00:85:79:43:0f:bd:6b:f6:4e:4c:0b:44:
aa:7c:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net