Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: 29GhvItKVLQi/Ld1QevtP70mZ2vh83ow4J9XoFSQF/o=
Subject key identifier: B4:43:0F:FC:D2:05:A5:74:06:5C:D3:43:62:D4:62:37:46:96:18:CD
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 01962E2AC232E5D9E98A0C1050D648984725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0830
Signing time: Sun 13 Apr 2025 08:01:16 +0000
Manifest this update: Sun 13 Apr 2025 08:01:16 +0000
Manifest next update: Mon 14 Apr 2025 08:01:16 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: JXcvbOqrRQ7G2d9pgbe9TzW33AqCWgBcnbjgufNL1kM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:c2:32:e5:d9:e9:8a:0c:10:50:d6:48:98:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 13 08:01:16 2025 GMT
Not After : Apr 14 08:01:16 2025 GMT
Subject: CN=b4430ffcd205a574065cd34362d46237469618cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:3f:52:47:1e:cb:f4:bc:c6:6b:5d:fb:65:
67:c2:d4:0b:9e:05:ea:03:f1:7a:0a:08:33:6c:d3:
eb:f2:4d:cc:f4:65:f4:88:81:93:d5:de:b9:a2:a5:
fa:a5:34:a8:79:cb:a8:2d:c7:88:c5:ae:94:37:02:
39:96:84:75:cd:2b:e2:a8:16:c7:66:27:37:db:8f:
84:ba:b5:53:09:16:9e:2b:f4:8c:57:8f:89:d8:ff:
5e:5c:ef:bd:6d:0f:46:20:04:a8:8e:41:fd:be:37:
86:29:d8:ea:8e:3a:c6:4a:0b:fb:ec:11:69:81:21:
46:eb:23:03:78:91:a5:00:a9:3a:a9:30:c5:ab:fb:
42:fb:b1:ca:ee:8d:6e:12:3e:91:07:d1:b1:93:a2:
ee:bb:f2:20:64:af:d7:df:c1:d1:45:ba:d8:54:18:
19:53:62:40:1f:b0:b3:15:5b:6e:2a:fe:9c:c9:74:
98:09:fe:da:b3:43:24:36:56:74:b4:28:0d:28:3d:
3c:8d:31:75:6b:64:5a:26:c3:0a:4e:22:53:c9:a3:
c1:8d:a4:1a:0a:ec:02:05:9a:24:b8:be:f6:57:ff:
9f:4c:40:cd:16:64:d1:61:56:35:7e:9e:ec:42:4b:
e8:1e:21:cb:43:b6:ab:f9:d7:16:f2:22:b5:ee:f6:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:43:0F:FC:D2:05:A5:74:06:5C:D3:43:62:D4:62:37:46:96:18:CD
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:5e:58:0f:3b:b5:8d:b0:56:e3:10:23:dc:ee:c3:2f:d0:
20:98:35:88:2d:02:67:91:59:b7:4f:36:f4:c3:19:ad:1b:cc:
3e:01:6d:e2:47:4e:98:15:e3:f1:f1:c5:f6:50:91:5e:eb:2a:
68:13:02:2c:bc:b4:00:d4:21:62:38:8a:cd:27:18:c9:2c:93:
76:a5:85:4b:0a:8d:00:61:23:e8:f9:02:b8:f7:18:73:c5:c7:
f0:17:3d:30:ab:e7:d5:58:0f:1b:02:2d:8d:39:e9:df:0f:76:
e4:4a:e7:02:75:9a:f1:b2:99:2d:1f:3f:4a:98:66:f9:e2:f2:
af:32:64:a1:92:48:cd:23:42:04:71:71:60:f1:9f:a1:3e:42:
a2:96:d6:f8:2f:d3:f5:27:68:f7:c7:bb:03:3b:9a:51:a5:92:
8c:e0:76:46:1a:cb:e7:62:a5:45:43:9a:b0:b1:24:5d:cc:52:
25:65:97:cc:c5:97:37:a4:73:ce:d0:40:cd:64:2f:12:ca:56:
33:2e:57:91:ef:eb:7d:fa:09:23:03:c9:85:04:c0:7d:e5:0a:
de:c4:93:09:89:a9:94:c8:d9:27:bf:ac:96:dd:54:95:e2:46:
af:a1:ae:60:7a:80:fd:47:53:6a:db:58:cc:e7:a1:58:12:85:
9f:40:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net