Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: QDYydLd4xf2o3XTlvcR2IBDlq4jzXPT/D47r1wLI/Is=
Subject key identifier: 35:19:6F:5E:F6:2D:DC:83:B7:14:02:7F:1A:B3:C9:6F:D9:75:97:6F
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 01962ECFC2D17BEA7DFFCDBCC35DF6C98458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 102B
Signing time: Sun 13 Apr 2025 11:01:29 +0000
Manifest this update: Sun 13 Apr 2025 11:01:29 +0000
Manifest next update: Mon 14 Apr 2025 11:01:29 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: sDKTWeKHpospC8Lh0ou5Z+spdEjtYYXOMszLWJYjYc0=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:c2:d1:7b:ea:7d:ff:cd:bc:c3:5d:f6:c9:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Apr 13 11:01:29 2025 GMT
Not After : Apr 14 11:01:29 2025 GMT
Subject: CN=35196f5ef62ddc83b714027f1ab3c96fd975976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:36:dc:a1:08:32:08:fb:a2:45:9e:bf:9a:
43:a6:28:65:e8:b1:fe:87:fe:23:aa:2d:d4:9c:c2:
b9:40:3d:4a:1d:1a:21:62:3b:f3:39:e0:f1:3e:17:
77:a3:a6:00:8f:25:44:bc:0c:b6:a3:10:54:16:8c:
be:55:63:d7:97:7e:65:e6:19:27:af:e7:7f:a4:4a:
ab:47:6b:5d:39:0e:85:de:7e:6a:a0:93:5d:06:ea:
8b:db:55:ed:51:2c:b4:dd:1e:3f:54:42:7d:0c:fc:
fe:e5:fc:fe:7f:c6:f1:f6:21:ad:b1:32:28:3c:51:
bb:c6:fc:c9:60:ac:6b:aa:df:82:98:60:ca:b4:08:
37:2c:25:ba:d7:e2:9c:3a:be:bd:3b:87:91:ff:04:
04:93:8d:db:0d:8a:fd:70:fb:c0:c5:7f:48:b9:43:
0f:30:e9:d7:22:4e:68:89:0c:5b:73:ce:30:24:57:
8e:1f:58:ca:68:eb:8f:bf:5a:21:de:14:6b:9f:70:
a2:7b:c8:82:e1:ba:d4:36:5d:f4:92:a7:33:13:4e:
1f:d7:ff:47:4c:f5:41:ab:b0:df:3d:4f:62:fb:29:
0b:5b:aa:2b:22:94:3e:29:ab:4b:52:94:30:b2:89:
c8:b7:66:08:a6:2f:fd:56:7d:4e:be:db:66:0d:29:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:6F:5E:F6:2D:DC:83:B7:14:02:7F:1A:B3:C9:6F:D9:75:97:6F
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2a:82:73:81:c4:d5:f5:2a:ce:54:3c:69:22:0c:fa:1b:08:
7f:81:f6:8b:2b:66:4b:68:be:11:55:7c:c3:7e:45:57:44:99:
85:ee:11:c6:40:e7:3e:f9:03:09:09:85:95:40:12:18:c5:86:
87:ae:60:8b:b9:d4:95:a7:20:80:ea:89:7c:3e:e8:68:78:51:
24:c5:6e:a3:ed:a8:8f:dd:77:e1:0e:d4:b8:f0:fe:30:f3:98:
8f:8f:5c:2f:01:f3:42:38:2f:4b:a7:bc:54:e2:9c:b9:70:f0:
60:18:86:82:8b:2b:dd:6f:11:26:4a:8f:1e:9e:12:c9:c0:f9:
e5:36:33:1b:c4:6e:d4:c7:cf:d0:34:c0:3b:d2:74:e0:0c:02:
e3:86:6c:80:bf:2e:c8:5e:2e:29:cb:16:e2:97:7c:55:e9:a1:
10:ac:d1:58:6c:8c:69:58:f4:d6:b8:ee:9a:e1:c0:01:fa:75:
25:66:88:91:6b:4f:0e:43:d3:b9:bf:b8:79:1a:74:19:94:c0:
34:3e:06:33:9b:38:1c:d7:d0:35:ac:8a:b9:13:16:4e:34:e7:
25:87:9f:df:4d:33:95:35:57:bf:fa:48:2d:93:db:16:94:8f:
5e:df:a9:95:86:ff:93:a6:4f:e1:28:68:a0:a2:20:eb:00:8f:
b7:68:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net