Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: 2FQAeJ1LwncylcYJ9ybnRHc/F9mSavDFNvYpfsE9G9w=
Subject key identifier: EF:03:4D:22:75:FC:85:35:1A:02:52:1A:1C:3A:E4:77:FA:05:E5:B8
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 01962F065AFB3AE84F0B9BC847BC37DB4979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 1024
Signing time: Sun 13 Apr 2025 12:01:07 +0000
Manifest this update: Sun 13 Apr 2025 12:01:07 +0000
Manifest next update: Mon 14 Apr 2025 12:01:07 +0000
Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: /GxjUiyLwh5xTUhFNyVor11UPu2OyxN+Wq3oacfzObE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:5a:fb:3a:e8:4f:0b:9b:c8:47:bc:37:db:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Apr 13 12:01:07 2025 GMT
Not After : Apr 14 12:01:07 2025 GMT
Subject: CN=ef034d2275fc85351a02521a1c3ae477fa05e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:5a:fc:e6:54:11:4f:38:36:cb:77:d0:a3:
19:3a:62:3d:a2:be:0f:1b:6e:7f:f4:fe:95:ef:c6:
43:61:34:58:1c:a0:ca:27:d4:01:c5:da:32:fc:f5:
91:fa:42:af:61:96:3b:fa:61:a5:cd:fc:6b:a4:07:
a8:b0:04:8c:5b:45:c9:4e:c1:45:ed:36:58:1e:7a:
01:18:6d:43:d2:9a:0e:af:a5:cf:10:b7:77:f5:43:
16:8a:0b:7f:f4:48:9b:26:af:61:39:a4:61:46:b7:
97:02:80:39:4c:b0:41:92:8b:3d:dd:61:f3:87:dc:
f9:5b:fd:2e:44:54:d5:e4:d9:cd:b6:ef:90:f8:fc:
48:90:9b:52:34:48:35:2e:ee:43:60:2d:46:ab:f6:
16:52:ca:6d:ca:46:97:45:48:a7:8b:d3:09:99:08:
e5:ec:60:cd:e8:73:d4:d7:08:08:38:f7:76:f0:bd:
5b:a4:15:ab:d7:16:2c:00:fa:44:59:56:7f:84:65:
23:c3:90:97:c1:d6:e0:98:37:8d:0b:d3:ca:05:f2:
66:ea:e7:8b:17:dc:f9:d1:4b:53:fa:26:3c:d8:bd:
1f:1a:3c:e0:d9:53:99:74:e4:d2:37:56:57:02:ee:
ff:2b:a4:44:73:fb:5b:79:12:9d:c1:d1:2d:dd:e4:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:4D:22:75:FC:85:35:1A:02:52:1A:1C:3A:E4:77:FA:05:E5:B8
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:94:79:c9:61:1b:85:3b:ff:fb:bc:e9:24:8b:08:4b:c1:
36:12:3b:16:47:c2:e7:a0:b2:53:b2:91:9f:a9:3d:6a:c5:8a:
4d:8a:03:35:b3:0b:70:3d:a0:6b:dd:fd:ec:c1:38:de:5f:b1:
13:ba:6e:2f:a1:17:2d:29:40:e4:db:e6:18:fc:a9:88:da:c0:
97:3c:b8:58:a7:61:56:25:da:95:7f:b3:dc:3c:e3:02:81:7a:
72:83:fe:ca:ea:73:2a:42:de:c7:02:da:8b:ae:47:b1:a9:72:
2a:e3:22:ee:dc:c5:7e:5d:e8:37:99:76:5c:22:e6:c4:2f:00:
11:8e:c6:a2:8a:38:f9:3b:41:5c:98:44:73:a5:d1:87:08:f4:
7c:7e:e0:46:fb:e3:13:8f:97:35:3c:9d:f8:fc:b4:1c:ee:04:
8d:67:96:75:05:42:47:13:7e:6d:f4:d1:e1:82:3e:30:74:28:
8b:b7:3b:e0:5c:bc:12:89:27:63:48:b8:93:03:e0:79:51:4e:
8f:9c:bc:43:1b:86:58:34:92:c5:37:51:58:83:cf:c6:ad:ca:
95:e2:95:94:bc:d0:32:2b:a9:42:ef:fb:ce:8d:20:b3:6d:f1:
3e:51:93:86:0f:49:d2:80:f1:84:b3:29:56:e0:c9:08:f8:3d:
a3:33:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net