Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: 10qSkEAEt5DQ3q2lx5LaLulKIUbMgPqCHSdegRFbEHQ=
Subject key identifier: 90:DF:BE:7A:49:4F:05:E6:68:BC:76:71:12:04:C8:A1:C9:7D:66:E3
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 01962F06B83D9E666AAF823195881CD4519F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 8F
Signing time: Sun 13 Apr 2025 12:01:31 +0000
Manifest this update: Sun 13 Apr 2025 12:01:31 +0000
Manifest next update: Mon 14 Apr 2025 12:01:31 +0000
Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: +qBz9kGPh1XtJJG6rkOQImj1l2Bka9sX22q1GiVHMuA=)
2: n-uGHXU9mK8VqWn_-PLqMRGS8Ts.roa (hash: ygEEJ097SaCUzOmNUISceDFVrT5Qf+Tcg4RtFktgRHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:b8:3d:9e:66:6a:af:82:31:95:88:1c:d4:51:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Apr 13 12:01:31 2025 GMT
Not After : Apr 14 12:01:31 2025 GMT
Subject: CN=90dfbe7a494f05e668bc76711204c8a1c97d66e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:a8:d8:ae:01:56:41:ba:66:0c:f1:0e:59:
39:d5:92:fc:58:92:8d:ee:67:1e:f2:81:40:bd:7d:
d7:51:d2:80:89:8c:1b:f6:95:60:f0:fe:22:e5:ea:
af:80:6c:01:bf:51:7a:c8:6e:31:31:c4:dc:11:e1:
21:4b:c2:06:16:43:0c:39:22:9c:19:44:27:31:a7:
20:00:4a:5c:d5:5d:92:fe:ec:67:9b:4b:74:43:67:
30:da:9d:17:41:57:1e:96:71:d8:01:59:fa:7b:34:
f3:bf:15:16:7f:99:0b:31:8d:6a:19:40:11:01:16:
72:10:c2:10:41:96:12:e1:d0:b8:ba:c3:57:21:99:
6e:d3:a1:a0:df:0d:92:f1:3a:60:af:e7:0c:ce:bc:
b5:53:73:4d:1f:ac:81:90:9e:1b:35:59:bb:02:51:
74:39:c4:82:83:41:2a:99:57:4f:7f:c3:d0:b7:b2:
47:62:0a:e1:5c:ac:8c:0a:54:73:08:61:bb:df:c1:
f5:f6:ae:c7:5d:79:60:f9:c4:78:43:4a:cb:0b:b6:
51:23:8d:b5:b6:a0:18:67:1c:32:a4:d2:29:ea:db:
77:81:37:41:39:98:11:84:43:d5:a4:de:b3:57:0c:
3b:d0:1b:e0:fd:94:bd:4c:79:15:71:bf:54:52:b6:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:BE:7A:49:4F:05:E6:68:BC:76:71:12:04:C8:A1:C9:7D:66:E3
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3a:04:b2:9b:40:ac:38:bd:1b:8f:bf:2d:11:03:5b:6b:17:
6c:9d:d2:0f:dc:72:74:f3:a9:12:56:6d:99:f5:a2:d0:c8:08:
e3:85:e9:69:6e:12:20:52:35:8f:45:b7:8a:7f:2d:22:59:c8:
a3:71:18:c0:5b:5b:a3:53:80:7f:f2:13:1b:c6:18:fa:5a:bc:
0d:26:17:b0:41:5e:71:a3:80:4a:c8:b0:ae:af:b5:6c:82:5f:
65:54:f6:06:1b:e1:1b:c3:34:af:8c:60:61:23:76:1c:29:d3:
33:ef:5c:49:8f:78:9d:40:3d:f3:b7:1c:b9:b6:34:47:15:aa:
3a:8a:e6:f3:fb:e2:c8:31:81:5b:e7:97:99:cd:8c:84:90:a2:
76:17:4c:8a:1a:20:0a:f7:42:5e:f0:d4:62:c2:04:80:83:d7:
a1:b2:52:3d:3a:7f:87:80:ea:23:f7:ef:49:8f:ce:8f:a1:d8:
78:e6:e2:6d:da:b3:57:fd:42:f5:ea:91:66:2f:00:9f:f2:43:
71:8e:7b:21:30:1c:89:29:80:3a:bb:d4:e1:d3:ec:1d:1d:64:
cb:0f:a2:01:8d:8d:6d:7c:d9:8f:12:77:d9:46:99:d6:d8:0c:
a8:bc:ed:d2:d5:b0:38:2a:80:68:08:ce:4e:c6:99:ee:5e:f8:
34:6b:7a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrg9nmZqr4IxlYgc1FGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
Eyg5MGRmYmU3YTQ5NGYwNWU2NjhiYzc2NzExMjA0YzhhMWM5N2Q2NmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGmo2K4BVkG6ZgzxDlk51ZL8WJKN
7mce8oFAvX3XUdKAiYwb9pVg8P4i5eqvgGwBv1F6yG4xMcTcEeEhS8IGFkMMOSKc
GUQnMacgAEpc1V2S/uxnm0t0Q2cw2p0XQVcelnHYAVn6ezTzvxUWf5kLMY1qGUAR
ARZyEMIQQZYS4dC4usNXIZlu06Gg3w2S8Tpgr+cMzry1U3NNH6yBkJ4bNVm7AlF0
OcSCg0EqmVdPf8PQt7JHYgrhXKyMClRzCGG738H19q7HXXlg+cR4Q0rLC7ZRI421
tqAYZxwypNIp6tt3gTdBOZgRhEPVpN6zVww70Bvg/ZS9THkVcb9UUrYH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDfvnpJTwXmaLx2cRIEyKHJfWbjMB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjoEsptA
rDi9G4+/LREDW2sXbJ3SD9xydPOpElZtmfWi0MgI44XpaW4SIFI1j0W3in8tIlnI
o3EYwFtbo1OAf/ITG8YY+lq8DSYXsEFecaOASsiwrq+1bIJfZVT2BhvhG8M0r4xg
YSN2HCnTM+9cSY94nUA987ccubY0RxWqOorm8/viyDGBW+eXmc2MhJCidhdMihog
CvdCXvDUYsIEgIPXobJSPTp/h4DqI/fvSY/Oj6HYeObibdqzV/1C9eqRZi8An/JD
cY57ITAciSmAOrvU4dPsHR1kyw+iAY2NbXzZjxJ32UaZ1tgMqLzt0tWwOCqAaAjO
TsaZ7l74NGt6lw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net