Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: SfAGdS1EcIHhkIdlZLoZaGbTflFddu5AQaCKoT/eoVI=
Subject key identifier: 2C:0B:89:A0:31:94:BE:C1:75:A5:1D:52:73:9A:12:53:10:37:FF:A8
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 01962F06DE8D8D641827BCD577F113F9344C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 14F1
Signing time: Sun 13 Apr 2025 12:01:41 +0000
Manifest this update: Sun 13 Apr 2025 12:01:41 +0000
Manifest next update: Mon 14 Apr 2025 12:01:41 +0000
Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=)
2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: nlT8HbjKAw+C3T9CJHoakprWa4kbc0dhNi4zYwxl7x0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:de:8d:8d:64:18:27:bc:d5:77:f1:13:f9:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Apr 13 12:01:41 2025 GMT
Not After : Apr 14 12:01:41 2025 GMT
Subject: CN=2c0b89a03194bec175a51d52739a12531037ffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:88:98:88:95:1f:d9:a6:17:9a:a0:25:c7:
a4:c4:68:6d:31:04:3c:ac:f8:e1:56:61:5f:09:84:
1b:fe:a9:35:4d:2a:b8:0a:63:d4:9f:d0:a4:f9:01:
97:ac:1a:3b:7b:95:5c:16:58:f3:91:48:56:b2:81:
63:aa:be:29:bf:c5:a6:54:88:f9:b6:90:dd:07:87:
67:d9:75:af:5f:f9:7e:73:99:39:3b:7d:bb:92:7d:
a9:c9:df:43:fe:a2:7a:de:e6:7d:25:c8:05:f9:05:
41:29:70:68:9c:09:7c:d1:c5:47:7a:5f:d7:66:fd:
09:dd:fd:3d:b0:22:18:24:ae:9c:68:2f:17:24:44:
e1:37:ce:ae:be:0f:97:21:58:37:9a:c5:ed:c3:af:
e6:47:5b:eb:fd:39:7a:4c:01:7d:13:cc:7c:17:e4:
31:21:8c:a0:08:dd:56:2e:4e:ac:ac:73:93:f7:5d:
a4:e8:f6:5d:41:03:e1:80:1c:a3:85:02:13:83:1e:
5b:0b:f1:1e:52:73:e6:bc:f6:f2:b6:f4:27:8f:50:
fe:68:ed:b5:38:36:aa:df:d9:b4:bc:a0:4e:e9:92:
07:b1:87:8b:04:01:63:9d:8e:3e:d8:b4:66:2e:af:
79:75:38:6c:44:1b:7d:e2:28:b5:21:90:9d:8f:17:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:89:A0:31:94:BE:C1:75:A5:1D:52:73:9A:12:53:10:37:FF:A8
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:65:b7:fa:cb:b4:b1:70:86:07:bf:a9:be:d6:c5:a1:ba:
8a:b3:57:94:b8:10:ac:b2:c1:3d:6d:89:4e:35:41:7d:87:57:
f2:20:78:ba:25:2f:3d:19:8f:f0:c8:38:a9:71:2d:d2:46:6c:
1b:f1:93:ed:f7:e8:aa:59:60:08:fb:fd:81:3b:f5:f2:47:d0:
49:54:6c:ea:c1:df:e9:c2:ad:13:f3:fb:27:17:ce:8a:42:21:
ad:f4:74:ef:4e:d5:87:37:3e:ec:13:84:12:dd:d9:bc:89:7b:
a8:6e:fc:42:cb:7d:50:f4:15:00:7c:b2:8f:5f:d3:96:08:36:
cd:1f:de:12:17:a1:40:2a:48:ff:30:22:fc:7b:9e:68:0b:c0:
7e:f8:fa:45:5d:23:da:2c:c5:ac:01:fc:b9:7d:af:14:a2:83:
1b:c0:6d:ec:2c:cc:62:e3:c2:ad:1c:c6:02:b3:13:66:05:23:
87:9f:38:22:4f:c8:c0:fc:68:5b:3e:30:28:b2:24:a7:7c:45:
1d:a5:7d:0f:62:79:ba:f7:6b:53:3b:61:ac:f6:18:9c:b7:2b:
73:17:21:3b:f5:98:71:9d:a2:e2:44:e5:0c:8e:18:b3:b1:23:
7d:6d:54:8a:22:10:b3:22:20:4f:62:45:60:11:15:9c:bd:4e:
cd:e7:59:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBt6NjWQYJ7zVd/ET+TRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EygyYzBiODlhMDMxOTRiZWMxNzVhNTFkNTI3MzlhMTI1MzEwMzdmZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qaImIiVH9mmF5qgJcekxGhtMQQ8
rPjhVmFfCYQb/qk1TSq4CmPUn9Ck+QGXrBo7e5VcFljzkUhWsoFjqr4pv8WmVIj5
tpDdB4dn2XWvX/l+c5k5O327kn2pyd9D/qJ63uZ9JcgF+QVBKXBonAl80cVHel/X
Zv0J3f09sCIYJK6caC8XJEThN86uvg+XIVg3msXtw6/mR1vr/Tl6TAF9E8x8F+Qx
IYygCN1WLk6srHOT912k6PZdQQPhgByjhQITgx5bC/EeUnPmvPbytvQnj1D+aO21
ODaq39m0vKBO6ZIHsYeLBAFjnY4+2LRmLq95dThsRBt94ii1IZCdjxfSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwLiaAxlL7BdaUdUnOaElMQN/+oMB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX9lt/rL
tLFwhge/qb7WxaG6irNXlLgQrLLBPW2JTjVBfYdX8iB4uiUvPRmP8Mg4qXEt0kZs
G/GT7ffoqllgCPv9gTv18kfQSVRs6sHf6cKtE/P7JxfOikIhrfR0707Vhzc+7BOE
Et3ZvIl7qG78Qst9UPQVAHyyj1/Tlgg2zR/eEhehQCpI/zAi/HueaAvAfvj6RV0j
2izFrAH8uX2vFKKDG8Bt7CzMYuPCrRzGArMTZgUjh584Ik/IwPxoWz4wKLIkp3xF
HaV9D2J5uvdrUzthrPYYnLcrcxchO/WYcZ2i4kTlDI4Ys7EjfW1UiiIQsyIgT2JF
YBEVnL1OzedZ4A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net