Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: 4phixxnymL588lw+o198u+bSPLbGmz6/5Fdy6057R5c=
Subject key identifier: 28:29:B2:88:B7:CB:96:BF:01:1F:53:E3:12:20:65:E2:AC:47:07:CB
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 01962DF4115B894FE2AD2E1925F71D22D10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 05B9
Signing time: Sun 13 Apr 2025 07:01:32 +0000
Manifest this update: Sun 13 Apr 2025 07:01:32 +0000
Manifest next update: Mon 14 Apr 2025 07:01:32 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: 8TV9PxhnBKa1YFWTYQnXU8fFHvOyOxTfSh2dvOwFn/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:11:5b:89:4f:e2:ad:2e:19:25:f7:1d:22:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Apr 13 07:01:32 2025 GMT
Not After : Apr 14 07:01:32 2025 GMT
Subject: CN=2829b288b7cb96bf011f53e3122065e2ac4707cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:17:d3:db:a8:73:d7:e4:50:d3:37:2c:40:
71:80:61:27:fb:17:99:95:87:ce:2e:07:4f:fe:03:
ce:1a:6a:4f:13:56:43:72:24:3d:54:13:e9:14:92:
ae:f2:d3:50:a0:a5:04:d2:8e:83:f4:d6:7c:56:63:
c1:dd:c0:ba:9e:c3:ed:51:af:fd:5b:59:73:24:b4:
28:22:04:11:ca:8c:20:77:40:44:32:62:92:5c:54:
a0:2f:46:57:86:b7:63:22:dd:76:0c:1f:a8:58:ad:
13:f0:b0:f5:0e:5d:d5:bc:4c:44:95:e1:a3:d5:1e:
8e:bc:63:ed:d1:02:e3:c1:91:d8:01:c4:7e:d3:3b:
40:31:44:35:8f:e3:71:d5:08:e7:10:1d:6c:8b:da:
5f:31:3a:dc:99:1f:9e:94:18:7f:86:63:1d:f2:d1:
69:27:50:08:c9:82:40:57:b6:7b:c9:27:af:6b:1a:
71:0b:83:c0:81:04:f4:62:98:66:18:9d:ff:1f:b8:
57:2f:0c:16:15:ab:5b:ce:2c:ab:36:dc:21:a2:05:
5f:f6:7e:17:74:91:69:da:00:8c:e8:e8:71:4c:8c:
5a:13:65:40:9a:ed:ec:4f:ec:7e:61:99:af:de:7c:
40:ee:1a:bc:54:9b:02:b8:a3:d3:85:fe:f8:41:85:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:B2:88:B7:CB:96:BF:01:1F:53:E3:12:20:65:E2:AC:47:07:CB
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:60:73:ab:5b:a3:25:cb:77:82:02:b8:94:dc:88:3e:f3:
7b:37:97:8e:aa:91:39:0c:2b:b5:2a:a5:c6:d9:45:92:e8:95:
9b:b9:97:5e:d1:61:95:8b:94:4e:33:81:51:4f:fd:3e:8f:ab:
4c:d6:57:09:b0:d8:aa:d6:30:13:08:17:db:5b:70:84:7f:1e:
3b:65:75:38:57:09:4f:fc:27:88:25:b1:c4:a0:a6:62:a4:ec:
4c:99:bd:a7:d9:49:4f:f1:58:56:61:e0:87:ce:bc:13:5e:48:
bc:d4:16:99:af:5d:c8:5c:05:00:e8:b8:58:17:54:8a:05:c6:
fc:17:b4:da:67:80:01:d5:b7:02:a0:84:79:53:5b:32:c5:7e:
c9:19:17:86:45:cf:68:fa:5d:19:4d:01:5b:99:ad:b4:d4:5f:
23:43:b5:e7:f8:39:56:57:d3:ed:bd:9b:d2:9d:3f:02:13:7f:
cc:92:8a:ff:92:ea:11:ee:9d:84:39:6e:42:ff:83:55:07:49:
df:63:07:0d:da:a4:81:8f:30:93:08:6b:8f:d9:a7:cf:d0:21:
fc:6b:94:46:a2:2f:a5:6c:55:51:84:e5:34:db:bc:50:01:4e:
dd:f8:22:12:9a:eb:3a:5d:64:f0:64:87:56:48:c5:93:e2:c3:
de:d6:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net