Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: MMSAFv9t1xIxRvxx6Aea56kwmifu22iD+r9chrTk8xk=
Subject key identifier: 35:18:E4:27:11:74:2E:D0:06:E7:43:A1:D5:C2:B7:19:80:F9:64:E9
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 01962E998310A2EB3E8AC8FBE078DEB8F511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1080
Signing time: Sun 13 Apr 2025 10:02:14 +0000
Manifest this update: Sun 13 Apr 2025 10:02:14 +0000
Manifest next update: Mon 14 Apr 2025 10:02:14 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: xeNpL6tqIFubjfwHde24iFBuVo5JvaCSCQYzRRT0ELg=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:83:10:a2:eb:3e:8a:c8:fb:e0:78:de:b8:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Apr 13 10:02:14 2025 GMT
Not After : Apr 14 10:02:14 2025 GMT
Subject: CN=3518e42711742ed006e743a1d5c2b71980f964e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:ed:9e:a0:04:61:02:96:85:11:22:72:d6:
82:ad:16:f9:7c:b4:85:6f:ed:11:1f:e1:20:04:4f:
38:92:51:13:c2:a4:46:a0:95:24:cf:72:00:59:fe:
0b:2c:b3:b8:47:da:31:ab:82:4b:84:a1:61:c2:35:
f4:3b:3d:32:92:ae:58:27:32:ff:a4:ab:bb:1a:75:
79:00:9d:33:c3:8c:c7:f4:11:21:0e:93:77:2f:9e:
e9:c5:37:12:5d:7d:ef:bd:ff:ea:03:5c:c1:dc:55:
38:c3:69:47:dd:1e:73:da:e8:18:ad:b7:1d:47:41:
4c:db:59:e1:dd:d6:f9:56:4d:14:b1:40:2b:e2:b1:
1d:bf:6c:3b:a6:90:ba:86:3a:19:a2:c1:3d:14:27:
58:dc:f9:f1:af:5e:cb:3f:74:c6:cd:11:58:47:af:
4d:04:0f:15:9e:03:63:05:8d:4f:ca:2c:8e:5a:db:
f9:a9:fd:41:6a:3c:f6:c0:05:af:f1:39:78:d5:fe:
65:c7:56:8d:17:d7:db:91:ab:c8:61:27:d9:5d:6e:
df:43:9a:bc:c4:82:bd:14:24:e0:43:48:7f:48:7e:
4c:76:4f:72:9e:ba:15:d8:07:42:d8:59:b9:da:40:
bd:ba:8a:6c:26:95:5b:c3:c9:a7:a0:de:22:49:7a:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:E4:27:11:74:2E:D0:06:E7:43:A1:D5:C2:B7:19:80:F9:64:E9
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:1f:42:f2:52:f6:ce:0d:f2:53:8a:58:e7:ac:53:32:23:
0f:77:e7:4b:4f:f9:c5:f0:b5:4d:86:9f:2a:56:bf:8e:a8:a1:
22:94:81:68:a8:8f:e3:2a:37:7e:cb:8e:0e:b1:f8:ad:87:dd:
57:0a:84:1e:74:0d:42:89:ee:a4:80:aa:c4:1b:38:d3:53:c3:
63:27:6f:97:da:46:45:5c:33:c1:62:06:04:28:62:48:45:5e:
55:f6:f4:52:1a:6a:c8:36:dd:f8:d6:64:61:e0:a5:2b:a6:1b:
0f:63:f3:ef:23:52:85:4b:f3:9d:7a:01:dc:92:3a:c1:27:bd:
db:30:d9:b6:dc:04:14:38:bc:ce:27:5f:cb:f1:cc:ee:7e:88:
78:6d:3c:fa:85:94:6b:d3:50:48:f7:37:41:74:92:f5:55:c4:
b2:79:05:f6:73:e8:17:b1:fe:55:5d:37:9e:8b:fb:dd:84:80:
fa:1d:55:b6:6d:2d:5c:15:e4:e1:b9:2b:40:31:17:6d:ad:b3:
c3:b6:81:ea:23:fe:34:b2:36:20:57:81:85:b1:b4:47:35:fd:
0f:bc:4f:18:5c:36:30:3c:b6:06:9c:5c:c8:39:e5:50:cc:17:
93:8a:7d:50:da:be:1a:7f:87:f1:dc:4a:9f:a8:64:3f:69:9e:
03:cd:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net