Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: 1iaK9XPm8HnxAjuL1OiEDTuCsRoSQJQWcPwuAOSkROk=
Subject key identifier: 45:A2:57:2D:A7:D7:BE:D1:92:1B:DC:DC:7C:60:EE:A7:1E:FF:8E:90
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01962E997F2552B811B3B501617BC871C612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 10:02:13 +0000
Manifest this update: Sun 13 Apr 2025 10:02:13 +0000
Manifest next update: Mon 14 Apr 2025 10:02:13 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: wafS6xAKtpPO4IS7baU9YuFBptjas0RcHmL+sPDuL04=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:7f:25:52:b8:11:b3:b5:01:61:7b:c8:71:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Apr 13 10:02:13 2025 GMT
Not After : Apr 14 10:02:13 2025 GMT
Subject: CN=45a2572da7d7bed1921bdcdc7c60eea71eff8e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:26:77:ed:c3:92:02:ef:ad:50:af:21:7d:
6b:c1:3e:ce:1f:f2:69:88:ae:92:0e:1d:28:9c:68:
42:1d:1f:36:f5:4e:f3:33:2a:a3:f3:cd:0e:af:10:
c5:ae:6d:e7:30:75:fe:e8:a1:5f:f0:c2:68:6b:f2:
ca:a1:29:21:89:e4:c0:ab:23:c2:0c:cd:e4:b8:f2:
ae:8c:cd:6f:b1:22:6e:18:66:af:ad:c1:d9:69:10:
48:0e:61:b0:c1:c7:22:18:6d:39:2a:40:0d:3e:98:
7a:a0:18:64:dc:0a:a7:3c:1c:61:43:60:9a:32:b7:
b0:74:4a:e4:d7:d9:88:24:d0:89:c0:91:b1:a1:20:
b4:e0:3e:2d:ed:5f:83:58:46:45:1a:70:32:2b:a2:
92:45:14:a6:1a:fd:4d:e2:b5:9c:bc:12:b9:c6:73:
32:9a:a3:18:18:aa:7f:e5:be:95:a8:0c:89:43:dd:
0c:95:88:32:0d:ca:e6:22:ad:5c:e7:36:d0:45:84:
89:2c:8e:df:9b:d2:37:96:de:4f:74:42:da:f7:7c:
f3:c7:be:50:da:52:cd:f7:06:1b:dd:01:5f:d7:72:
35:0e:bb:34:a6:ff:a0:e5:31:24:cd:6e:e9:f3:ce:
54:29:d6:d1:77:ce:a8:c5:80:67:d4:cd:8d:3b:1a:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:57:2D:A7:D7:BE:D1:92:1B:DC:DC:7C:60:EE:A7:1E:FF:8E:90
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:67:a0:dc:0e:aa:d4:e0:94:f1:87:d1:ef:15:40:10:a0:
13:91:48:a9:4e:16:67:1d:b9:a8:5f:13:31:51:05:9b:31:d4:
ab:32:df:7b:d9:93:38:1c:78:9a:c3:04:45:94:a5:e7:fc:96:
55:09:ea:5c:f1:be:62:f6:1a:17:c7:88:ef:f0:ba:3c:cf:07:
c2:d9:27:94:79:67:ac:69:a5:c1:20:9a:bd:a3:cf:07:00:7a:
b6:56:6f:12:cf:bc:31:80:00:38:b4:6e:48:c4:ff:9a:4b:c1:
7b:45:88:c6:c7:99:9b:47:e1:77:60:a2:2b:8f:1e:b5:1e:2a:
12:0d:11:b6:ee:5e:dd:34:f5:ae:63:0c:27:d8:20:ec:8e:a7:
c4:98:e4:1a:89:c3:e3:29:71:80:51:a2:fd:ff:48:3f:59:9b:
db:07:19:63:da:f5:bf:da:3a:80:d0:32:2f:36:e7:a6:f4:b0:
dc:79:82:99:1f:c6:ab:19:1a:ce:22:ad:74:17:df:02:3e:fa:
0e:b3:99:ac:a9:05:90:b2:b5:2c:4a:5f:ca:58:f2:f2:62:0d:
82:7a:e1:6e:05:24:52:7d:ec:5c:c7:66:79:54:5b:7c:16:e6:
55:c2:5e:95:86:1f:80:95:8c:30:92:61:40:55:31:97:dc:cb:
f1:d4:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net