Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: QmIuV1Gtyh2PR7OubLMamgthHKYOtvLwb6pPEIow0No=
Subject key identifier: 9A:63:0B:52:4D:CD:33:2B:65:93:FB:67:98:D3:A5:25:6A:0B:58:43
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 01962F74416FBBD8B1E4564508D3DE688F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0428
Signing time: Sun 13 Apr 2025 14:01:10 +0000
Manifest this update: Sun 13 Apr 2025 14:01:10 +0000
Manifest next update: Mon 14 Apr 2025 14:01:10 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: yPpcRa95e4mwWg9yBqvV6eI5LEWMLJArboexK1oqkVU=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:41:6f:bb:d8:b1:e4:56:45:08:d3:de:68:8f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Apr 13 14:01:10 2025 GMT
Not After : Apr 14 14:01:10 2025 GMT
Subject: CN=9a630b524dcd332b6593fb6798d3a5256a0b5843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:7a:b3:59:7b:05:81:46:e9:e3:3c:bd:36:
13:15:d6:a5:35:98:9d:29:81:06:42:f7:24:70:c2:
75:fa:91:54:5d:0f:4e:d4:71:69:80:5e:df:fc:ec:
be:5d:f4:79:ab:a3:f3:26:13:bd:38:d4:0f:07:d4:
ef:4d:fc:01:e0:22:3b:e3:b0:ce:8f:8b:03:36:b4:
00:e8:82:ff:08:c5:df:b4:3e:78:c7:30:7a:2d:8e:
65:08:b9:90:90:9a:ce:48:44:5f:04:54:49:96:f6:
14:0c:b1:f2:dd:5b:ff:8a:f8:12:af:b5:c2:a0:12:
70:a2:3e:00:ce:8f:06:c9:02:54:91:93:ef:ff:35:
f5:ff:3f:1a:46:6f:23:b3:00:e0:45:7b:78:dd:a4:
04:86:1c:3e:f4:1f:f4:f1:2d:8d:61:a6:0e:6e:9c:
4f:ac:56:15:8d:7d:bd:a8:3b:22:89:dd:6e:d0:ba:
40:4c:71:89:6c:4e:96:31:cc:9f:dd:df:f7:ee:37:
bd:2d:88:e8:ee:3f:83:ad:14:74:23:ef:99:d7:58:
b2:c0:63:f2:0c:68:d8:61:42:0f:80:b5:95:2c:b0:
99:df:20:95:af:16:a1:ea:4f:41:bd:5d:09:eb:21:
4c:83:39:81:4e:25:83:e5:15:b0:35:69:2b:fe:6a:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:0B:52:4D:CD:33:2B:65:93:FB:67:98:D3:A5:25:6A:0B:58:43
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:31:4c:2a:d3:cc:cd:8e:8b:32:f3:5a:7c:ff:64:40:e0:47:
98:ea:b6:0f:a7:08:2e:c4:a3:f1:9d:08:43:2f:17:dd:67:a2:
b9:8e:cf:c0:2c:aa:d7:2e:26:60:6c:5f:b0:45:3e:c1:0a:4f:
c3:70:24:05:86:1e:b6:b3:84:99:59:5e:08:f8:8d:2a:4a:96:
65:19:a7:3f:cb:d5:2b:6d:7e:c1:87:b9:b3:2e:dd:d4:36:59:
63:33:3b:75:32:53:e6:64:b5:fb:96:66:14:70:a5:c2:11:43:
33:89:38:df:35:69:ff:b6:73:fe:0e:c2:62:3c:35:3f:94:da:
25:b8:3a:65:16:3b:0b:2c:6a:a9:76:9d:e2:87:e4:2c:31:66:
ae:ae:01:7f:50:b9:c2:b3:a6:56:7a:40:36:cf:5e:b1:a4:70:
3a:ea:de:b6:85:33:ee:40:53:6c:cb:5e:14:ff:ac:a0:80:8d:
07:9f:c2:de:9f:fe:cb:06:56:20:fd:e5:32:4a:88:d4:a2:39:
65:d5:c7:a9:8c:f7:95:7c:f0:82:8f:eb:ca:0c:2e:5e:05:01:
87:e8:84:83:9c:e9:e7:16:20:69:ca:ba:5e:d2:c2:f1:54:3f:
f1:89:6b:41:d1:9d:ca:96:bf:1c:eb:d9:a4:27:b8:13:e6:9a:
e9:47:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net