Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: T+oPpnLiTlEv/rvtYf0oR0AYvDcv9UBMTAYo+kmrY7w=
Subject key identifier: F4:7A:A5:8C:BE:61:FE:92:89:3C:EE:50:93:BF:C8:B2:3B:8C:8F:2D
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 01962DF3F3612FD02CF48F869F34C1E6ABD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 0454
Signing time: Sun 13 Apr 2025 07:01:24 +0000
Manifest this update: Sun 13 Apr 2025 07:01:24 +0000
Manifest next update: Mon 14 Apr 2025 07:01:24 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: AQDuYSAhyd/L7KEkrNrTTOfVxxlhT3bj7bntWYEu+HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:f3:61:2f:d0:2c:f4:8f:86:9f:34:c1:e6:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Apr 13 07:01:24 2025 GMT
Not After : Apr 14 07:01:24 2025 GMT
Subject: CN=f47aa58cbe61fe92893cee5093bfc8b23b8c8f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:2b:8a:76:9c:65:f0:ce:54:cf:7a:87:0f:
e5:61:c3:fc:4a:de:cc:b6:c1:bf:ab:df:fe:25:93:
ce:17:6d:ab:29:eb:68:74:0a:ba:da:cf:12:a8:4f:
5e:a5:21:1a:d3:c6:51:c4:67:f2:4b:43:d9:2d:b7:
ab:0b:9e:39:ea:df:e1:98:e5:f8:98:cc:71:e4:61:
7e:57:40:3a:a7:02:40:97:77:9a:3e:9b:2c:7b:76:
ed:da:4f:c6:41:e9:45:3f:d7:12:30:e0:aa:fc:52:
e0:27:9f:d3:6e:dc:59:12:33:a4:44:a3:a5:98:17:
98:2d:ec:3d:0b:e9:d6:04:45:b7:65:4a:23:c6:94:
8b:24:8e:88:cf:23:41:e9:b9:e1:68:22:40:03:0f:
ad:a6:d6:8b:dc:1c:5f:65:e1:bf:ec:9b:27:7d:86:
79:ad:76:0d:48:34:07:9e:cb:13:e7:52:f9:aa:55:
53:7d:49:cd:59:c0:81:55:02:1b:ec:58:e3:b6:1e:
23:6a:5f:33:fb:2d:73:1d:d3:b9:ec:23:f4:09:43:
1c:3b:79:04:13:16:d8:b5:13:fb:05:f2:e6:96:29:
ee:34:3e:a9:80:fe:5d:70:da:f2:b2:08:19:7b:b4:
cc:cc:78:50:d1:d4:95:35:7e:08:16:1f:bb:01:7e:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:A5:8C:BE:61:FE:92:89:3C:EE:50:93:BF:C8:B2:3B:8C:8F:2D
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:58:ac:a8:47:e1:dd:cd:22:f7:3b:85:f0:5d:59:43:66:
ea:65:a3:09:60:c8:45:5e:8a:f5:c7:f4:4c:76:19:b0:c7:23:
7e:ab:59:5b:85:9c:f2:30:c9:14:e3:e1:9a:cf:82:ac:25:87:
6f:be:0d:9a:58:e4:35:1d:c5:3f:10:e4:62:59:4a:c7:50:be:
c1:ee:5c:6c:ec:66:34:0f:83:0f:58:cd:69:16:cf:d7:d2:9c:
86:3a:df:2f:1e:67:6a:fd:77:84:c8:d1:91:46:b9:10:f1:4b:
08:62:28:83:b3:d5:ae:28:b0:1d:3c:c9:98:d5:5e:8d:c9:55:
7c:81:9a:1f:b9:fe:75:80:ea:f5:c1:3a:f7:ee:a5:ef:c0:42:
13:9f:d4:4a:27:6f:45:00:ea:fa:75:90:e1:1f:06:74:91:cd:
e1:1c:c2:5d:fc:b4:77:7a:34:5c:c5:d9:c0:7f:bf:09:b9:b9:
b9:fa:65:de:95:6f:ec:d4:cb:d8:d4:ce:13:53:ad:0f:ee:45:
6e:41:a5:30:46:d2:7c:d3:76:4a:53:43:66:48:b4:c0:97:91:
5f:14:d8:3b:0c:ee:7c:20:85:66:93:0e:f6:75:1b:d6:52:f0:
ae:90:4e:d9:96:44:47:89:4f:07:35:8e:5a:29:4c:ec:8d:a7:
8c:cb:51:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/NhL9As9I+GnzTB5qvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx
ZDhlOTcwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
EyhmNDdhYTU4Y2JlNjFmZTkyODkzY2VlNTA5M2JmYzhiMjNiOGM4ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1orinacZfDOVM96hw/lYcP8St7M
tsG/q9/+JZPOF22rKetodAq62s8SqE9epSEa08ZRxGfyS0PZLberC5456t/hmOX4
mMxx5GF+V0A6pwJAl3eaPpsse3bt2k/GQelFP9cSMOCq/FLgJ5/TbtxZEjOkRKOl
mBeYLew9C+nWBEW3ZUojxpSLJI6IzyNB6bnhaCJAAw+tptaL3BxfZeG/7JsnfYZ5
rXYNSDQHnssT51L5qlVTfUnNWcCBVQIb7Fjjth4jal8z+y1zHdO57CP0CUMcO3kE
ExbYtRP7BfLmlinuND6pgP5dcNrysggZe7TMzHhQ0dSVNX4IFh+7AX7CsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR6pYy+Yf6SiTzuUJO/yLI7jI8tMB8GA1UdIwQY
MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt
ZGZmZTU5MDIzZTg5LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5
LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+FYrKhH
4d3NIvc7hfBdWUNm6mWjCWDIRV6K9cf0THYZsMcjfqtZW4Wc8jDJFOPhms+CrCWH
b74NmljkNR3FPxDkYllKx1C+we5cbOxmNA+DD1jNaRbP19KchjrfLx5nav13hMjR
kUa5EPFLCGIog7PVriiwHTzJmNVejclVfIGaH7n+dYDq9cE69+6l78BCE5/USidv
RQDq+nWQ4R8GdJHN4RzCXfy0d3o0XMXZwH+/Cbm5ufpl3pVv7NTL2NTOE1OtD+5F
bkGlMEbSfNN2SlNDZki0wJeRXxTYOwzufCCFZpMO9nUb1lLwrpBO2ZZER4lPBzWO
WilM7I2njMtRhA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net