Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: B/kolrH0Hy/qcMyLbgnIeu7t4oSuNZG+2mZRMN6ItJ0=
Subject key identifier: 4F:88:B8:C6:73:7C:F3:03:DE:68:DB:2C:DB:A6:62:88:93:71:43:31
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 01962DF3FAB13E2B1A6FBA83F8312B707871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0B29
Signing time: Sun 13 Apr 2025 07:01:26 +0000
Manifest this update: Sun 13 Apr 2025 07:01:26 +0000
Manifest next update: Mon 14 Apr 2025 07:01:26 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: lvFMax9kHWwkZqAX3mLTQNLU8wKYJQN6YG7OJzxAwaQ=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:fa:b1:3e:2b:1a:6f:ba:83:f8:31:2b:70:78:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Apr 13 07:01:26 2025 GMT
Not After : Apr 14 07:01:26 2025 GMT
Subject: CN=4f88b8c6737cf303de68db2cdba6628893714331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:e9:eb:00:f1:7e:3d:31:69:c4:0a:0e:8b:
50:bb:a6:4b:72:50:47:9e:f6:e2:c8:1a:c3:45:6b:
7c:e8:0f:f5:9e:40:b1:2c:f4:96:e3:31:2a:e7:3f:
fe:95:7e:28:03:b3:4d:7e:85:bc:c5:1e:3a:31:f6:
e5:10:db:50:1a:5e:85:bc:6b:8a:aa:cc:59:b3:aa:
8d:8d:8b:9b:67:25:df:74:88:16:29:6f:62:33:d3:
4e:c6:1a:6f:ac:65:89:7a:bb:b8:0a:16:0a:9c:78:
79:1a:fc:a1:97:62:a0:47:44:d4:6a:8f:97:fb:a9:
94:43:9c:4a:4e:bf:ad:6d:65:e8:5f:25:01:ac:0a:
6b:b4:0b:61:78:81:61:9f:b4:0d:ad:3d:3c:4f:78:
de:c9:a2:cb:d3:37:fe:a9:37:cd:7a:be:6e:03:be:
48:2b:69:cf:3e:b5:ef:9f:1b:7a:c2:e8:aa:a9:8c:
43:75:d9:da:69:81:50:b7:c1:12:50:55:fc:84:bd:
2b:d4:8c:9f:41:d2:72:7d:b2:7d:e3:54:01:7d:26:
f5:f4:6a:b8:72:0e:91:4c:30:b1:aa:44:3c:cf:c3:
e3:d0:66:9b:77:3c:c3:bc:6c:42:d8:a7:45:f1:7d:
ff:58:b0:57:4b:1d:e4:5d:cb:7e:8b:29:45:8f:7a:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:B8:C6:73:7C:F3:03:DE:68:DB:2C:DB:A6:62:88:93:71:43:31
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:db:f9:1e:14:8a:2f:15:42:c8:5e:a5:be:ea:d0:17:2a:08:
8e:d5:04:07:d3:e0:58:ef:7f:41:1e:2c:57:40:10:fe:63:5e:
60:79:9f:48:33:f0:3d:ad:69:4a:c6:82:e9:a9:ff:b3:9f:d0:
42:08:64:2d:c4:68:78:8d:65:4c:3a:e4:f3:20:a2:41:3e:55:
06:ec:78:0b:54:d7:08:7e:e0:40:4a:4b:d0:44:a7:4c:19:b3:
ba:eb:51:a6:ea:f3:20:46:07:5a:0e:68:21:41:4f:cb:99:8f:
81:0d:61:42:9f:6c:81:35:a7:b8:78:9d:d4:df:60:5c:02:bb:
88:8d:22:20:b6:e9:6f:20:ba:0e:ab:7d:cc:a2:64:e5:14:e6:
b8:1f:90:c1:c6:cc:67:5a:64:06:76:af:b4:4a:cd:0c:7c:20:
b2:39:17:b5:6b:2e:2c:2f:b5:b0:59:6e:27:ca:d1:a3:1f:78:
99:60:45:0e:d0:6b:05:02:3e:36:fc:78:1d:fa:d1:43:f3:84:
4a:2c:9f:9f:b5:8e:89:7f:b1:32:ef:2b:42:cd:8e:cd:55:69:
91:f5:35:ec:1f:5d:66:58:1f:56:34:a6:d8:ba:74:a0:b9:09:
12:81:29:85:98:ed:4d:7d:8f:21:c8:fd:64:0b:bf:be:f0:56:
74:a7:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net