Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: LovlvSqdoUjc/baDQmOzaEzm4mCj8gVdx/LesTZVTXA=
Subject key identifier: 87:13:83:62:F7:0D:FB:9F:89:41:E2:70:05:E8:F6:C3:20:7E:62:17
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 01962DF4510CE695EAAE9EC1766D4A1C8589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 07:01:48 +0000
Manifest this update: Sun 13 Apr 2025 07:01:48 +0000
Manifest next update: Mon 14 Apr 2025 07:01:48 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: O2/kirMzZFSHwiWG+Dxmh/Y573v0X6e8QSjMnReZ/Ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:51:0c:e6:95:ea:ae:9e:c1:76:6d:4a:1c:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Apr 13 07:01:48 2025 GMT
Not After : Apr 14 07:01:48 2025 GMT
Subject: CN=87138362f70dfb9f8941e27005e8f6c3207e6217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:03:bf:63:5e:af:a9:e6:af:d7:6d:d6:36:
7d:fd:7d:93:f6:6e:2a:52:b4:53:21:06:2d:fb:c4:
98:83:78:3f:cd:08:54:f0:23:66:f9:32:00:c9:96:
46:32:db:85:e6:36:65:85:a6:b7:71:bd:04:87:a1:
2f:4a:5e:7b:4a:65:d7:97:bf:b1:19:d2:a3:9c:a8:
f7:f7:35:01:57:f2:33:17:d2:73:d8:5b:ad:e4:3c:
e8:7d:20:50:7e:1d:8b:73:d0:6e:7c:3d:0b:33:36:
5f:90:1e:ed:9b:03:6d:39:aa:37:4a:9c:75:01:60:
44:c4:8f:98:dc:f1:c8:43:89:10:1a:f6:fb:dd:28:
ab:46:51:36:ff:17:c6:27:4c:d0:ff:b9:94:a4:ad:
24:02:85:e6:f9:e1:25:53:49:24:1c:60:96:b4:24:
c0:a6:2f:e1:dd:e4:94:23:e9:11:a1:5e:47:91:a2:
8a:1d:d5:eb:38:ad:6c:13:3b:9b:ff:0a:55:ec:96:
df:78:51:1c:c7:13:59:3d:68:d8:6e:da:6d:0e:d7:
38:d5:ad:ec:b2:03:8e:b6:f1:e6:56:4a:44:e3:1f:
2f:9b:6a:b2:d8:3b:c2:ac:5c:00:19:6d:c4:6c:75:
c2:96:6f:7f:ca:a2:86:12:7f:28:fa:ce:12:d5:c4:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:83:62:F7:0D:FB:9F:89:41:E2:70:05:E8:F6:C3:20:7E:62:17
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:d6:24:d8:1e:80:6e:f8:7b:1d:1f:87:57:97:19:5b:8b:
88:e6:7d:b6:62:1e:68:69:06:7f:64:0c:5d:e3:1a:c6:62:1f:
9f:91:32:0c:3d:64:de:66:fe:6e:99:2a:67:16:f1:52:57:8b:
1f:ba:a2:55:6b:44:06:58:86:8c:79:82:37:09:e5:58:03:52:
df:70:c3:00:a1:0f:c8:19:96:3d:9b:5d:01:2f:c2:5f:ec:47:
80:7c:d7:c4:cf:ac:87:4b:8d:e9:b7:92:e7:8a:6c:54:41:7a:
31:81:7f:2f:46:2a:fa:7f:7f:61:1a:5a:17:be:e1:3c:c4:08:
b0:68:95:55:df:a0:ed:15:e6:c9:6a:eb:46:d2:c7:f1:a2:ac:
f1:17:27:71:68:43:ac:3c:17:ea:e5:d7:d8:52:e7:c6:d6:26:
fb:f2:58:c5:2a:4d:a6:43:9f:ca:bd:b1:5f:64:93:22:24:e1:
c4:53:13:07:58:41:c6:29:53:52:f0:10:c9:fc:a1:58:f9:1f:
38:80:ef:e2:eb:a3:b1:f3:c8:65:5a:43:b6:a4:55:16:87:5f:
dc:ec:eb:cf:45:75:0d:f3:ce:f5:48:9f:5e:81:f7:ef:36:75:
ce:56:e8:99:32:c3:b3:d8:44:6c:8d:7c:9c:fe:ab:ca:77:72:
c3:29:0e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FEM5pXqrp7Bdm1KHIWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5
MjIxNTAwHhcNMjUwNDEzMDcwMTQ4WhcNMjUwNDE0MDcwMTQ4WjAzMTEwLwYDVQQD
Eyg4NzEzODM2MmY3MGRmYjlmODk0MWUyNzAwNWU4ZjZjMzIwN2U2MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OgDv2Ner6nmr9dt1jZ9/X2T9m4q
UrRTIQYt+8SYg3g/zQhU8CNm+TIAyZZGMtuF5jZlhaa3cb0Eh6EvSl57SmXXl7+x
GdKjnKj39zUBV/IzF9Jz2Fut5DzofSBQfh2Lc9BufD0LMzZfkB7tmwNtOao3Spx1
AWBExI+Y3PHIQ4kQGvb73SirRlE2/xfGJ0zQ/7mUpK0kAoXm+eElU0kkHGCWtCTA
pi/h3eSUI+kRoV5HkaKKHdXrOK1sEzub/wpV7JbfeFEcxxNZPWjYbtptDtc41a3s
sgOOtvHmVkpE4x8vm2qy2DvCrFwAGW3EbHXClm9/yqKGEn8o+s4S1cQC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcTg2L3DfufiUHicAXo9sMgfmIXMB8GA1UdIwQY
MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt
MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4
LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTXWJNge
gG74ex0fh1eXGVuLiOZ9tmIeaGkGf2QMXeMaxmIfn5EyDD1k3mb+bpkqZxbxUleL
H7qiVWtEBliGjHmCNwnlWANS33DDAKEPyBmWPZtdAS/CX+xHgHzXxM+sh0uN6beS
54psVEF6MYF/L0Yq+n9/YRpaF77hPMQIsGiVVd+g7RXmyWrrRtLH8aKs8RcncWhD
rDwX6uXX2FLnxtYm+/JYxSpNpkOfyr2xX2STIiThxFMTB1hBxilTUvAQyfyhWPkf
OIDv4uujsfPIZVpDtqRVFodf3Ozrz0V1DfPO9UifXoH37zZ1zlbomTLDs9hEbI18
nP6ryndywykOeA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net