Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: Kzon4Nqu+BEvgXnSOrmLnXIMSlldaj3ZClj6S9J2zs0=
Subject key identifier: A7:8A:D2:97:9C:FB:17:56:94:BC:53:DC:01:8E:81:48:8E:4A:D8:4A
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01962E2B3A5085A5BDE8BCDCAD9DD3EC820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0816
Signing time: Sun 13 Apr 2025 08:01:46 +0000
Manifest this update: Sun 13 Apr 2025 08:01:46 +0000
Manifest next update: Mon 14 Apr 2025 08:01:46 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: QsrCkdGzygzQtOLDUHlkO3mO6gUIMtFAWr0e6MZWarc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:3a:50:85:a5:bd:e8:bc:dc:ad:9d:d3:ec:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Apr 13 08:01:46 2025 GMT
Not After : Apr 14 08:01:46 2025 GMT
Subject: CN=a78ad2979cfb175694bc53dc018e81488e4ad84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:12:1b:9a:56:00:89:20:b1:b4:ac:36:d7:
0d:a4:39:3c:a3:bf:0e:1d:7c:eb:ac:bc:53:22:a6:
a2:77:e6:18:bb:4b:26:fc:a8:e7:bd:c8:12:5e:7c:
2b:fc:e8:22:a9:83:1a:c5:bc:78:20:8a:9f:62:3a:
78:8c:47:4c:b3:a4:fd:32:36:5e:86:27:4d:82:da:
46:69:0e:d1:ac:69:1b:08:b5:1f:0a:d0:3d:69:0e:
4d:7c:8b:8d:c4:cb:be:23:22:fe:e9:4b:5c:98:01:
e5:70:6f:3f:2a:79:3f:81:cd:4d:cd:f5:88:6e:c8:
b8:d3:08:6e:e2:db:fe:4f:dc:1d:1c:36:05:d8:f7:
58:95:b1:6d:62:e0:04:a5:ad:bc:d2:4c:62:2b:df:
7b:91:04:33:1f:92:a9:54:87:f3:c2:6c:43:a7:fd:
15:38:ce:90:e6:72:8f:2f:43:55:a2:07:9a:dc:42:
c1:07:fe:2e:6b:16:93:3f:04:ab:41:3b:c9:57:1a:
79:70:ab:89:a1:21:55:8f:59:9a:1f:7f:d7:fb:da:
ea:7d:70:bb:e4:8e:e8:e9:37:d7:58:8f:e8:78:19:
59:a3:22:d9:53:92:ca:28:a8:16:af:d7:61:27:06:
c1:a9:f6:b2:55:e0:81:67:00:fc:ff:e4:63:f0:c9:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8A:D2:97:9C:FB:17:56:94:BC:53:DC:01:8E:81:48:8E:4A:D8:4A
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:e2:ec:d7:f9:75:ca:ed:46:08:08:f7:dd:38:5c:ff:d8:
fa:ae:d4:c1:d8:46:c0:da:af:04:3c:84:ce:0b:70:75:8d:94:
8e:6e:21:e4:11:f7:fc:e4:35:ba:1c:b8:f8:4f:5b:1b:d5:d3:
1e:00:ee:ae:4a:ad:16:01:41:ac:71:c3:90:2b:6f:ec:c7:2e:
74:51:e1:78:9c:9f:9c:ab:2b:02:49:6d:f4:b7:dd:56:60:ba:
5d:09:3b:3b:86:ef:9f:9e:39:88:92:33:60:03:23:27:ab:4d:
a9:ce:f4:94:e3:e7:0a:b7:7a:81:3b:36:37:08:bd:41:9e:b8:
bf:01:66:eb:0f:c2:a8:1a:cf:ce:98:37:84:a5:a6:cc:7b:68:
a8:68:4c:df:20:cd:e1:71:2f:38:6a:ec:7e:ca:c7:94:b5:2b:
4d:29:a6:82:59:2f:ee:c3:3d:65:87:24:74:ec:11:24:0b:15:
6c:7e:23:94:c8:2c:e1:99:4b:6e:c9:12:cf:69:ca:1e:fb:90:
e0:72:f5:9e:30:15:ee:4f:12:cb:f9:a4:a9:01:4b:63:40:cb:
b1:b8:1c:0d:f5:32:a4:a2:27:ff:7c:a8:cb:cd:32:9c:0b:5b:
5e:78:83:a1:7e:59:ef:61:3d:ee:3b:ae:92:e0:85:82:02:13:
38:d4:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net