Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: jixs6enqKdkVfwGnFppM9lcVrxyPh9f+yKNzAvJPorY=
Subject key identifier: BB:12:91:16:B8:A4:55:2B:22:17:08:A8:FD:AA:06:17:01:E3:C1:D0
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 01962E61C4B7F9EA208768B271DBC4FF3213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 09:01:21 +0000
Manifest this update: Sun 13 Apr 2025 09:01:21 +0000
Manifest next update: Mon 14 Apr 2025 09:01:21 +0000
Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: /I/tk8saJeRmtmwaIX3LF+3J2NiG9BSJwloszAluGuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:c4:b7:f9:ea:20:87:68:b2:71:db:c4:ff:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Apr 13 09:01:21 2025 GMT
Not After : Apr 14 09:01:21 2025 GMT
Subject: CN=bb129116b8a4552b221708a8fdaa061701e3c1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:07:19:b9:e5:60:8f:b3:3e:cc:4f:d7:38:
07:e7:2f:f7:58:61:70:13:8b:fd:e8:c1:6d:fd:22:
1e:c3:cd:a9:3a:99:26:19:bc:ec:d5:b2:ef:98:bc:
ac:6c:87:ba:a0:26:dc:d6:3b:c1:3b:6e:af:82:86:
83:ef:0b:31:d1:02:b1:16:33:3f:bd:4e:d3:78:a9:
08:2b:ae:63:c8:d5:36:5b:b6:e5:ff:16:43:17:fc:
7b:7c:aa:ef:2d:c4:3c:3b:5b:e9:46:9b:ee:19:1e:
41:b3:a9:65:e1:28:06:ef:ce:46:71:32:be:98:8b:
ae:2f:5b:13:13:15:bc:8a:2d:90:65:73:9d:7c:48:
5f:be:48:73:2e:7f:95:27:0e:c0:b1:5d:01:05:3a:
f9:08:71:8a:b6:21:ef:0e:b7:e7:53:55:63:a1:cc:
56:b6:fb:93:26:99:36:e2:b2:df:a3:64:3d:00:63:
67:0e:24:b7:04:52:ae:7b:de:48:f0:05:bd:48:7c:
87:0d:2d:15:ed:36:f0:a2:17:9c:29:d2:0d:55:7f:
95:f7:05:2c:6e:89:d5:40:6b:ca:3f:4a:4a:d6:96:
9c:52:93:e7:0c:01:10:54:1f:4c:90:7e:2f:d5:e8:
ef:f9:28:ab:6c:26:8a:7b:01:c1:a5:7b:fe:54:c8:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:91:16:B8:A4:55:2B:22:17:08:A8:FD:AA:06:17:01:E3:C1:D0
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:28:c3:66:ed:b9:61:f2:52:1e:db:70:bd:25:05:70:44:
07:f7:48:52:a6:05:11:8f:ee:c5:23:d9:e5:a7:8a:e9:9c:db:
2f:ad:98:1d:53:23:46:6e:0f:8f:e7:d9:ba:51:8d:70:e1:18:
35:90:55:42:49:07:dd:ab:8b:10:38:3d:77:4c:28:99:4b:c1:
c5:a8:90:a6:ac:bb:8e:54:3e:4c:95:aa:5f:5e:a0:48:96:6e:
37:f7:b8:38:2c:0d:c4:39:f5:08:cb:26:68:55:f6:78:0b:62:
a7:f6:cc:71:ba:a5:f2:5a:0f:b1:6d:9e:f5:20:f5:e9:16:cd:
9a:ad:71:05:0c:42:c8:3e:7c:17:40:75:77:fa:5c:b0:e7:1d:
a1:cf:8f:67:ee:1f:f2:b5:06:35:e2:1a:79:18:c8:77:83:09:
c9:2e:d7:72:76:41:13:20:e7:06:80:0c:73:b9:91:a6:27:71:
e1:80:f5:75:60:d7:18:4f:39:6e:ba:18:dd:f0:57:41:98:96:
04:53:7f:c3:79:4c:52:8c:fd:3a:ea:d5:a0:7f:d5:88:27:9a:
41:28:e6:2e:1d:5d:0a:bf:53:fa:23:9d:2d:ed:4c:72:0d:9c:
d8:91:22:cf:ad:a4:3c:f5:2e:85:15:1d:14:d1:77:0c:19:d0:
23:00:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net