Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: dh8q6RMVbQhAd2pbMKgNi2fu7Lzuhh+Hi3i1F8//mBI=
Subject key identifier: D1:09:D7:FB:4E:01:64:B8:7D:DD:84:2B:78:1A:FF:0A:05:D7:91:0A
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 01962F06DB4041DDA8BC6587ECDC416E0F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 0408
Signing time: Sun 13 Apr 2025 12:01:40 +0000
Manifest this update: Sun 13 Apr 2025 12:01:40 +0000
Manifest next update: Mon 14 Apr 2025 12:01:40 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: sJ0M3+T5NG19UZnJhzWlmrAxGs/PG3Ufy9dAOdyN138=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:db:40:41:dd:a8:bc:65:87:ec:dc:41:6e:0f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Apr 13 12:01:40 2025 GMT
Not After : Apr 14 12:01:40 2025 GMT
Subject: CN=d109d7fb4e0164b87ddd842b781aff0a05d7910a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:e1:cd:21:60:cd:30:a4:92:98:30:48:a1:
bc:bb:14:16:44:87:4c:1e:d1:f2:81:1d:89:0d:a0:
dc:79:51:cc:46:68:1e:db:b1:1e:28:85:02:81:38:
f1:4e:35:d1:bb:0b:7f:c6:13:02:27:53:e2:9f:c3:
ff:35:89:4c:d1:fb:2d:0f:7f:a7:2e:b3:87:d9:5f:
40:96:d4:2d:3d:e9:80:bb:04:69:b7:9d:fb:50:61:
fe:db:72:c2:23:3c:ec:65:46:88:5a:62:ae:69:89:
d4:97:97:4c:37:a8:e8:93:e6:07:bf:ee:9b:03:c4:
20:4a:19:9c:df:33:e8:69:f9:b1:10:eb:e8:93:34:
62:24:e6:35:52:6c:37:d0:f5:cb:bf:f4:fe:00:b3:
5f:84:e9:79:76:e3:37:15:f5:33:03:67:07:e4:89:
b1:88:e4:f0:16:38:71:f4:59:3b:15:78:df:fa:23:
bc:5c:0f:9b:ac:0c:2d:63:c8:f2:5d:b3:d7:ef:7d:
96:bf:3d:4e:03:2c:80:b6:15:34:61:f6:f0:35:f8:
37:74:d3:71:09:44:78:44:44:aa:f2:a2:18:4d:1f:
38:0f:fb:5b:7e:69:63:ff:3b:26:27:23:f3:64:d7:
b3:0c:7f:cd:f4:5b:fb:87:ad:99:92:a9:d1:15:eb:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:D7:FB:4E:01:64:B8:7D:DD:84:2B:78:1A:FF:0A:05:D7:91:0A
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:09:cc:a5:4a:45:e4:c6:ca:81:b1:7b:f8:1d:72:45:7d:2a:
48:d6:aa:ef:4f:ac:b4:96:e0:e8:f0:07:bd:c2:eb:3b:87:b4:
2f:00:f5:43:67:95:24:c0:fe:31:d8:c2:11:2d:05:f4:26:4f:
52:49:2f:ab:88:e8:d7:63:ce:fe:3c:8c:fe:f6:af:9e:57:b6:
88:a8:cc:ea:04:45:d9:85:37:44:dd:a1:ab:a4:33:17:27:17:
c7:f9:88:fb:45:9b:c7:f6:2e:54:fa:04:30:20:6b:77:9a:c8:
4d:3f:64:1e:46:68:5f:6e:24:02:67:c7:15:8f:b1:88:c7:c0:
ba:0a:7b:d3:2d:97:5b:66:6d:36:6d:18:cd:d0:59:a3:9c:4a:
a8:c1:8a:0b:c8:58:ea:94:c1:28:0f:bc:11:00:54:1c:5a:76:
24:d8:4a:1b:bc:a3:fb:da:04:fb:c5:34:30:3f:d6:ef:ad:d7:
9a:a1:4e:d6:5c:2f:80:39:ce:69:ac:3c:1f:32:91:4a:a5:fe:
a4:76:63:2d:f7:0a:ac:d1:dc:65:98:17:ae:dc:23:54:82:9f:
e7:43:e8:f8:31:89:f1:55:8f:4a:f5:e0:fb:d9:8e:ae:f9:88:
52:54:77:5f:bc:2a:6e:78:5f:a8:ab:83:60:d9:90:85:f0:46:
e1:91:3e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBttAQd2ovGWH7NxBbg9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj
YTYyZjQwHhcNMjUwNDEzMTIwMTQwWhcNMjUwNDE0MTIwMTQwWjAzMTEwLwYDVQQD
EyhkMTA5ZDdmYjRlMDE2NGI4N2RkZDg0MmI3ODFhZmYwYTA1ZDc5MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ThzSFgzTCkkpgwSKG8uxQWRIdM
HtHygR2JDaDceVHMRmge27EeKIUCgTjxTjXRuwt/xhMCJ1Pin8P/NYlM0fstD3+n
LrOH2V9AltQtPemAuwRpt537UGH+23LCIzzsZUaIWmKuaYnUl5dMN6jok+YHv+6b
A8QgShmc3zPoafmxEOvokzRiJOY1Umw30PXLv/T+ALNfhOl5duM3FfUzA2cH5Imx
iOTwFjhx9Fk7FXjf+iO8XA+brAwtY8jyXbPX732Wvz1OAyyAthU0YfbwNfg3dNNx
CUR4RESq8qIYTR84D/tbfmlj/zsmJyPzZNezDH/N9Fv7h62ZkqnRFeulzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEJ1/tOAWS4fd2EK3ga/woF15EKMB8GA1UdIwQY
MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt
ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2
LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQnMpUpF
5MbKgbF7+B1yRX0qSNaq70+stJbg6PAHvcLrO4e0LwD1Q2eVJMD+MdjCES0F9CZP
Ukkvq4jo12PO/jyM/vavnle2iKjM6gRF2YU3RN2hq6QzFycXx/mI+0Wbx/YuVPoE
MCBrd5rITT9kHkZoX24kAmfHFY+xiMfAugp70y2XW2ZtNm0YzdBZo5xKqMGKC8hY
6pTBKA+8EQBUHFp2JNhKG7yj+9oE+8U0MD/W763XmqFO1lwvgDnOaaw8HzKRSqX+
pHZjLfcKrNHcZZgXrtwjVIKf50Po+DGJ8VWPSvXg+9mOrvmIUlR3X7wqbnhfqKuD
YNmQhfBG4ZE+rQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net