Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: 4xzXkwogxtm9v7SFAVgcgSK+IGKHrSLpsCaangTda80=
Subject key identifier: DD:A2:85:1F:CA:3E:EC:CA:AD:60:EF:76:02:F6:E2:7D:0F:6E:AB:DE
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 01962E999475932BBFBE450456BF7D006AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 10:02:18 +0000
Manifest this update: Sun 13 Apr 2025 10:02:18 +0000
Manifest next update: Mon 14 Apr 2025 10:02:18 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: VP48+CLDpSVk2GXtKJJzCELXfb4sZ2MeuuPR9I2+t2Y=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:94:75:93:2b:bf:be:45:04:56:bf:7d:00:6a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Apr 13 10:02:18 2025 GMT
Not After : Apr 14 10:02:18 2025 GMT
Subject: CN=dda2851fca3eeccaad60ef7602f6e27d0f6eabde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:61:ae:03:8a:0c:47:10:f2:cc:f4:a9:64:
74:b6:f6:a9:8d:b3:47:c7:b6:a4:19:0c:cf:21:0e:
43:96:88:e6:02:8c:44:52:08:c6:e6:c2:30:55:75:
57:c7:73:82:ff:19:59:17:17:15:fd:6b:6e:26:82:
29:d6:c2:85:68:13:3c:5c:19:d7:d4:b1:d6:67:87:
d6:81:ae:d6:09:79:f5:29:fb:0c:f8:20:09:77:4f:
af:e7:de:c1:7d:d3:ce:63:2c:30:66:11:11:b1:e7:
e1:be:72:e6:19:60:ba:b1:db:3f:86:1f:ba:0a:08:
23:42:8b:e1:42:ef:88:70:f9:54:60:88:c7:c8:33:
e4:88:71:e5:f0:1b:08:94:f8:31:31:03:9c:63:79:
23:30:27:9b:e9:5c:4d:f9:71:f0:68:2b:1b:df:72:
9b:55:75:99:c1:16:2f:1b:08:6e:5e:11:a3:3c:60:
46:c7:63:37:04:52:2b:82:ad:f2:c7:a1:e9:a8:f2:
a6:bc:4a:ee:70:05:83:1d:3f:88:d8:d8:bf:61:8f:
08:a4:b6:f5:d3:52:90:6e:c7:03:14:56:98:a6:f6:
6d:26:d7:cc:f4:45:ac:9e:44:77:b5:9c:32:77:6e:
ec:03:54:57:4e:bd:b7:8c:4d:45:e4:4f:6a:3e:f3:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:85:1F:CA:3E:EC:CA:AD:60:EF:76:02:F6:E2:7D:0F:6E:AB:DE
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:4f:c3:e7:0c:d5:9f:0d:63:4e:bf:b9:24:11:dc:48:9d:
6f:51:ff:4c:e2:a6:df:58:40:8b:64:b8:76:20:37:ef:64:37:
58:a2:9b:76:ff:a4:ed:75:05:c6:2a:c2:21:38:96:ac:dc:6b:
36:c8:51:a3:fe:49:33:b7:03:2f:02:76:2e:65:03:c0:9b:21:
49:ee:28:50:22:c3:b7:59:ff:ce:4e:b4:c3:aa:43:b2:87:5e:
a5:95:30:4f:7e:b5:36:06:75:b2:3e:57:92:5e:14:34:c4:1b:
c8:e2:09:bb:a8:b2:7b:ca:b3:81:28:f3:ab:99:12:c0:85:9d:
f6:a6:ee:0b:69:08:f1:aa:3e:ee:c4:76:1a:66:fc:ac:a7:8a:
c6:9e:fe:93:96:38:88:d4:19:b2:6a:e0:2d:53:c2:ed:48:51:
c6:ac:0b:05:28:44:25:c2:31:d0:83:20:57:38:59:ea:9f:96:
52:94:52:0a:2c:f7:68:b4:44:0a:cc:b4:67:a8:70:08:47:bf:
f0:44:50:c2:37:4c:90:84:13:6b:db:23:45:6f:b6:98:53:d0:
99:4b:9a:20:7b:a2:28:5d:8f:ee:8c:92:64:dd:e9:17:dd:0a:
89:ad:a0:ef:87:c0:b6:15:f9:c7:d6:58:50:9d:0c:70:2e:05:
5e:e5:15:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZR1kyu/vkUEVr99AGrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDBhOTViZTBlNjAxMTA5Y2IxOTg4NDI2OGJhMjIwNDQ1
NWM3OTAwHhcNMjUwNDEzMTAwMjE4WhcNMjUwNDE0MTAwMjE4WjAzMTEwLwYDVQQD
EyhkZGEyODUxZmNhM2VlY2NhYWQ2MGVmNzYwMmY2ZTI3ZDBmNmVhYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly5hrgOKDEcQ8sz0qWR0tvapjbNH
x7akGQzPIQ5DlojmAoxEUgjG5sIwVXVXx3OC/xlZFxcV/WtuJoIp1sKFaBM8XBnX
1LHWZ4fWga7WCXn1KfsM+CAJd0+v597BfdPOYywwZhERsefhvnLmGWC6sds/hh+6
CggjQovhQu+IcPlUYIjHyDPkiHHl8BsIlPgxMQOcY3kjMCeb6VxN+XHwaCsb33Kb
VXWZwRYvGwhuXhGjPGBGx2M3BFIrgq3yx6HpqPKmvErucAWDHT+I2Ni/YY8IpLb1
01KQbscDFFaYpvZtJtfM9EWsnkR3tZwyd27sA1RXTr23jE1F5E9qPvN+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2ihR/KPuzKrWDvdgL24n0PbqveMB8GA1UdIwQY
MBaAFADQqVvg5gEQnLGYhCaLoiBEVceQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAt
ZDFmZDRkYTJkNWNiLzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAtZDFmZDRkYTJkNWNi
LzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgdPw+cM
1Z8NY06/uSQR3Eidb1H/TOKm31hAi2S4diA372Q3WKKbdv+k7XUFxirCITiWrNxr
NshRo/5JM7cDLwJ2LmUDwJshSe4oUCLDt1n/zk60w6pDsodepZUwT361NgZ1sj5X
kl4UNMQbyOIJu6iye8qzgSjzq5kSwIWd9qbuC2kI8ao+7sR2Gmb8rKeKxp7+k5Y4
iNQZsmrgLVPC7UhRxqwLBShEJcIx0IMgVzhZ6p+WUpRSCiz3aLRECsy0Z6hwCEe/
8ERQwjdMkIQTa9sjRW+2mFPQmUuaIHuiKF2P7oySZN3pF90Kia2g74fAthX5x9ZY
UJ0McC4FXuUVKw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net