Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: GOdSPLzEqA50rFXBtazGRjc5ehQXJdUL54FHSm00OBU=
Subject key identifier: E8:AD:2B:B3:8F:F3:0E:88:7D:6D:66:53:0B:9F:CA:73:4A:D5:14:8B
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 01962E9933E13E16E1A081236009389AEBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 08AF
Signing time: Sun 13 Apr 2025 10:01:54 +0000
Manifest this update: Sun 13 Apr 2025 10:01:54 +0000
Manifest next update: Mon 14 Apr 2025 10:01:54 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: fjkSYdql+/hXD7OQgkUmoM+2C/HuQB0o57suM334D0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:33:e1:3e:16:e1:a0:81:23:60:09:38:9a:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Apr 13 10:01:54 2025 GMT
Not After : Apr 14 10:01:54 2025 GMT
Subject: CN=e8ad2bb38ff30e887d6d66530b9fca734ad5148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:30:da:93:9d:ab:f2:7f:44:89:28:c3:93:
24:64:cc:07:9f:6b:3c:43:c4:b1:95:05:16:17:7f:
d9:ea:64:10:17:ce:5f:f4:71:0f:fb:3b:ed:4e:ee:
24:ba:43:9d:57:0a:7c:1a:7c:15:10:e0:cb:ef:83:
48:40:54:f5:73:bb:8d:fd:e2:7d:b2:a3:a1:16:e0:
2c:69:81:f1:77:6c:fc:bc:32:8c:db:a7:11:90:4b:
ed:c7:eb:c4:cb:67:e8:c5:3f:c3:89:58:ac:e3:45:
b0:bf:fd:33:0e:b3:74:28:ca:35:a5:e6:e0:f9:1b:
e6:9e:a9:b6:bb:ad:61:16:71:c1:ab:28:2c:88:15:
51:3a:5a:c2:d2:57:d5:14:4e:11:6d:5b:52:58:7a:
48:b5:b6:44:09:a9:d9:13:cf:63:d2:3f:ef:67:8e:
09:e8:ac:e3:e3:ce:51:f1:dc:09:b8:54:dd:82:04:
48:29:41:e2:60:5b:c7:0b:a5:bf:60:d8:c2:6a:18:
ba:1b:03:1c:57:39:da:52:65:96:5d:85:32:2a:75:
ca:f5:33:67:6d:cd:5b:1b:53:4f:96:98:e2:29:a2:
79:ed:af:8e:37:1c:e2:0d:3e:c6:68:ff:b0:12:7a:
95:f7:a1:5d:5b:5d:76:61:37:5b:9f:31:d4:f6:4d:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:2B:B3:8F:F3:0E:88:7D:6D:66:53:0B:9F:CA:73:4A:D5:14:8B
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7c:62:68:aa:43:4d:7d:c8:19:ab:50:61:b5:cc:9e:11:01:
bb:6e:b8:86:0a:7f:e8:51:d7:e8:32:5f:64:6d:58:eb:af:bf:
ba:c5:13:28:8c:59:e0:3d:1e:df:50:23:ab:6d:2f:85:91:ed:
97:99:97:13:82:29:bc:92:53:09:86:01:e7:8f:f0:62:0c:3d:
ae:e4:da:1b:53:73:71:7a:28:d9:43:29:b5:84:ee:5f:47:89:
23:cf:a3:6f:8b:71:9f:36:04:8b:87:26:31:62:b5:e2:13:d0:
0f:cd:ed:4f:e9:f5:29:74:b9:bd:74:b9:4d:a0:33:06:7d:86:
5f:b5:4b:d1:aa:12:e6:09:f1:28:95:fc:f4:28:65:e8:48:8d:
c1:bd:96:18:b2:3f:ad:19:09:62:1f:95:0b:88:ad:e8:5c:81:
cb:d9:a8:6b:f2:5b:50:f8:9b:44:2c:22:82:49:5a:ab:9b:31:
c8:f7:8b:16:d5:06:3f:3b:20:14:77:f0:30:a0:8a:fd:f3:e9:
69:05:92:44:29:7f:2f:ae:63:a4:a8:9e:6c:dc:07:0f:25:54:
9d:44:e5:3c:45:cf:6e:d2:6a:97:d3:44:74:d5:22:e3:c7:68:
0c:ec:b0:aa:f2:9e:ec:e8:52:d8:0c:89:43:f0:0f:ff:8d:73:
7f:e9:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net