
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: 8ms3QCz9uCJ5gGKAA1jw4NvtY7o9RO4A/qO3lgU43nI=
Subject key identifier: E5:E0:8A:BC:D3:41:8D:00:DC:15:99:A3:3A:7A:77:F9:21:F3:09:2D
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 01962F06A8D9EA35E5E5EDBAF95AEE1B14EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0ECF
Signing time: Sun 13 Apr 2025 12:01:27 +0000
Manifest this update: Sun 13 Apr 2025 12:01:27 +0000
Manifest next update: Mon 14 Apr 2025 12:01:27 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: WeDq79cZBhn6NI0Ex2RPI4AOoyRZN3PsTBHk4bBHT7E=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:a8:d9:ea:35:e5:e5:ed:ba:f9:5a:ee:1b:14:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Apr 13 12:01:27 2025 GMT
Not After : Apr 14 12:01:27 2025 GMT
Subject: CN=e5e08abcd3418d00dc1599a33a7a77f921f3092d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:c5:a7:b3:ad:1a:8b:e6:05:8c:d1:ae:3d:
07:81:f6:6f:20:7b:51:8a:5d:2e:dc:c7:48:b0:71:
e9:ab:38:13:88:9b:68:b8:68:ed:5a:76:d8:5c:3c:
9d:5d:4b:36:5d:18:8c:45:72:b4:e5:e3:2c:00:9b:
96:e8:1c:98:85:8b:2a:05:93:b5:35:96:33:50:2f:
ac:84:94:8a:2c:24:5d:d9:64:8f:ca:85:22:5e:75:
76:9f:ce:19:f1:bd:4d:47:86:c7:17:96:6b:13:86:
f6:91:9c:a2:c4:e3:61:c5:a0:a2:17:32:ff:4f:63:
09:59:64:e0:ab:40:aa:66:49:98:64:64:9b:21:32:
5e:72:c6:1a:bb:fc:55:a6:92:cd:db:88:30:78:6a:
79:e9:94:17:2a:e4:c7:53:83:07:bd:aa:af:79:8a:
68:d7:60:c5:a3:50:e9:4e:16:99:12:ba:e1:25:ad:
fd:c6:8f:c9:6e:27:ac:70:a1:35:04:9e:c8:10:bc:
af:5c:f5:85:b6:c1:cd:c8:53:85:ba:ad:e4:84:92:
58:56:d2:11:a4:8d:9c:48:f8:92:a7:63:80:19:87:
cb:42:39:1e:d7:d8:a3:7e:71:31:c7:61:d5:6e:3c:
44:85:b4:90:4f:93:48:60:3a:a8:b0:85:86:2b:ef:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:8A:BC:D3:41:8D:00:DC:15:99:A3:3A:7A:77:F9:21:F3:09:2D
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:17:cf:01:02:02:77:ea:26:70:e8:eb:df:b9:63:6e:c9:
53:04:ff:62:aa:48:ea:93:6e:21:ea:89:49:ee:0e:d2:09:ed:
b4:40:e0:d7:e0:fc:c3:1b:ea:ea:a9:dd:72:84:b6:4d:e0:14:
ce:c9:9b:0d:df:a3:2e:05:88:d0:11:18:f2:2e:e8:96:f6:77:
f2:5e:c0:8e:76:02:ac:c0:c0:ed:74:60:dc:c7:e0:a1:14:bd:
ab:a2:5f:68:0d:67:fb:e3:ea:0c:8b:2d:da:52:33:a0:1c:67:
89:0a:d1:6a:ee:3d:94:e4:12:7c:10:45:93:df:c0:f4:5c:3c:
01:e0:97:89:41:fb:f9:42:49:fd:55:fa:0e:e7:92:12:83:03:
5a:96:cf:b3:6c:df:d8:99:4a:12:8c:73:ef:1a:1b:09:8e:e3:
fc:8f:40:05:21:21:47:7d:7a:b0:4a:1b:a7:e9:d2:09:6c:ee:
88:de:b2:c0:4f:9b:21:e7:58:e2:31:22:57:39:6b:98:6e:81:
e0:d5:ba:e0:10:a6:de:2e:dd:82:e9:1b:6e:ff:e6:0f:61:9d:
a1:1f:35:a6:e8:77:91:60:dd:fe:1c:9b:73:e5:5d:9b:de:32:
0c:c6:23:2a:97:87:2a:59:d0:f9:ab:2e:c7:27:61:39:3f:22:
6c:3f:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net