Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: RWn8XERGDpa7b73x4y3dXEagZEtfGyYghfDcWwBG6sM=
Subject key identifier: 44:86:71:B6:99:2B:40:80:F4:8D:03:40:B0:CD:A8:C7:28:30:24:A8
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 01962E98CEA7D8232BD4AD895220060D01D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 10:01:27 +0000
Manifest this update: Sun 13 Apr 2025 10:01:27 +0000
Manifest next update: Mon 14 Apr 2025 10:01:27 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: +9gkvRBhz+Hrn09MEsGtLZIPd1fRYKHXETJH+u21uaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:ce:a7:d8:23:2b:d4:ad:89:52:20:06:0d:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Apr 13 10:01:27 2025 GMT
Not After : Apr 14 10:01:27 2025 GMT
Subject: CN=448671b6992b4080f48d0340b0cda8c7283024a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:5b:bb:87:27:50:00:02:3e:01:7d:ba:d5:
d5:86:cf:b3:48:d8:b5:72:ef:f9:bf:55:e4:7f:a2:
a6:79:12:76:95:ba:e5:95:de:a4:c0:aa:67:7c:9b:
75:3d:76:a5:94:2a:74:43:0a:8f:a2:af:7f:1f:db:
2f:52:31:52:99:ca:d5:03:a3:89:dd:7d:67:e6:67:
72:68:4f:1d:3c:69:51:ac:a6:c6:76:8b:8e:bf:3a:
8f:08:00:dd:e1:0e:54:20:0e:33:e9:1a:f9:83:f9:
a3:f1:dd:a8:0f:04:f4:c8:6f:a9:5d:61:da:b9:9b:
20:cd:c3:47:e2:b9:f7:c5:86:d6:d8:c2:68:aa:26:
f4:be:56:21:1b:99:ab:2b:49:14:7e:b0:14:d8:8e:
4a:d0:a7:46:b1:8a:de:b1:9a:0b:35:75:25:bc:d9:
95:d0:84:db:00:9f:8a:7c:ed:87:04:c8:10:84:7e:
10:20:7b:39:3c:0f:3d:85:8b:71:b8:34:fe:3b:71:
aa:9d:b4:80:59:50:ee:a0:04:76:b4:82:b1:cb:21:
b1:b0:bb:07:c9:20:83:11:ca:a1:17:d8:1e:db:4b:
2f:26:17:50:ca:19:1c:0c:39:06:0e:d6:50:88:ca:
b9:d5:0f:58:1d:d8:30:bb:7d:eb:9f:df:7b:39:3c:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:71:B6:99:2B:40:80:F4:8D:03:40:B0:CD:A8:C7:28:30:24:A8
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:98:5c:c6:83:09:11:cd:5e:72:c5:f8:59:38:d9:28:5d:
4c:3b:1d:23:23:28:4e:78:f4:81:dd:8c:4c:ef:46:f7:b0:2b:
ce:5f:b3:5a:77:aa:fd:83:62:e3:38:e0:db:76:f0:15:61:25:
e0:fa:71:18:b2:46:51:14:12:d5:30:55:52:c7:a9:0b:00:c0:
a7:c9:6e:d2:aa:7e:49:d7:de:68:71:19:c2:5e:2f:a8:49:fd:
12:ae:12:4c:d5:10:18:f4:9b:90:a5:ce:59:d4:c0:f7:aa:ef:
59:42:74:8a:09:e1:ac:8c:75:74:66:88:c8:13:60:f4:97:58:
a7:39:f5:6c:2b:25:f3:60:8e:c9:42:6d:5c:2f:f9:95:9a:0f:
cf:71:31:0b:cb:15:4f:27:a1:51:d3:e7:3c:97:57:6f:7a:18:
57:6a:c4:3e:a1:38:7b:99:96:ab:87:5d:9a:25:80:24:40:48:
fc:39:fa:1c:0c:27:eb:8d:db:42:58:a3:81:22:ef:3a:4f:05:
97:fa:70:6d:f4:12:2c:0f:c5:8c:41:bb:0f:e5:d7:7f:f4:d4:
fc:ad:9a:50:20:e2:fb:1e:e3:fd:b7:70:44:6e:92:29:f5:09:
85:0d:54:fe:3d:60:5d:83:56:3d:a1:12:02:6f:0e:41:51:b1:
89:ce:48:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumM6n2CMr1K2JUiAGDQHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTIzZTE2YTJjNGNkYmRkOTUyNDA4OTA4YmY4MjM4MDQ2
NWJhNTEwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
Eyg0NDg2NzFiNjk5MmI0MDgwZjQ4ZDAzNDBiMGNkYThjNzI4MzAyNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5bu4cnUAACPgF9utXVhs+zSNi1
cu/5v1Xkf6KmeRJ2lbrlld6kwKpnfJt1PXallCp0QwqPoq9/H9svUjFSmcrVA6OJ
3X1n5mdyaE8dPGlRrKbGdouOvzqPCADd4Q5UIA4z6Rr5g/mj8d2oDwT0yG+pXWHa
uZsgzcNH4rn3xYbW2MJoqib0vlYhG5mrK0kUfrAU2I5K0KdGsYresZoLNXUlvNmV
0ITbAJ+KfO2HBMgQhH4QIHs5PA89hYtxuDT+O3GqnbSAWVDuoAR2tIKxyyGxsLsH
ySCDEcqhF9ge20svJhdQyhkcDDkGDtZQiMq51Q9YHdgwu33rn997OTwnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESGcbaZK0CA9I0DQLDNqMcoMCSoMB8GA1UdIwQY
MBaAFGuSPhaixM292VJAiQi/gjgEZbpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTct
NDA3ZTlmMzg5MDdlLzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTctNDA3ZTlmMzg5MDdl
LzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNSYXMaD
CRHNXnLF+Fk42ShdTDsdIyMoTnj0gd2MTO9G97Arzl+zWneq/YNi4zjg23bwFWEl
4PpxGLJGURQS1TBVUsepCwDAp8lu0qp+SdfeaHEZwl4vqEn9Eq4STNUQGPSbkKXO
WdTA96rvWUJ0ignhrIx1dGaIyBNg9JdYpzn1bCsl82COyUJtXC/5lZoPz3ExC8sV
TyehUdPnPJdXb3oYV2rEPqE4e5mWq4ddmiWAJEBI/Dn6HAwn643bQlijgSLvOk8F
l/pwbfQSLA/FjEG7D+XXf/TU/K2aUCDi+x7j/bdwRG6SKfUJhQ1U/j1gXYNWPaES
Am8OQVGxic5IZg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net