Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
File: cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft (raw, json)
Hash identifier: 6iN+8ND5RS984Fw1TfrUVTOkc6v5lyfaMjjJPJarFDI=
Subject key identifier: 0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
Manifest number: 0865
Signing time: Fri 31 Jan 2025 15:55:02 +0000
Manifest this update: Fri 31 Jan 2025 15:55:02 +0000
Manifest next update: Fri 31 Jan 2025 21:55:02 +0000
Files and hashes: 1: 6soiuxrATumeIlK0bjdnQ-i_pSo.roa (hash: XxfWCx0jI+OOTUTinc+ix6O/E0Ip6F4n2/9vOrg0Maw=)
2: cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl (hash: STKqf0AqhcqAmTTBYqjrAoQ+Am/THpMqQbItIdm5CVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3220 (0xc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 31 15:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0DF9B711DFD65FAE0E658F0E7D80A78211D6887D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:6f:4c:58:c5:cd:80:10:af:93:7d:43:52:
d4:fe:64:de:5b:0e:4a:92:21:8d:51:38:c6:4c:75:
64:71:08:5a:0a:17:85:d1:f4:1a:f9:2c:e1:86:9b:
76:6c:53:d8:bf:88:a2:e0:5c:8b:5d:9b:64:18:b6:
91:1a:f9:9a:5c:97:09:34:4b:30:e4:61:7f:67:e1:
e0:ea:25:26:80:ff:25:86:b8:be:68:89:4a:f0:b1:
5f:3b:91:56:39:c3:3c:51:c4:21:2b:d3:37:65:b4:
84:45:45:6b:ad:45:75:e8:cb:a1:78:48:d6:0c:ad:
ec:b5:08:d1:fc:3f:56:8b:ac:da:4e:73:e2:ae:cf:
86:e9:97:18:b0:aa:fb:59:3a:40:3f:d0:b2:7b:07:
16:81:22:0d:7f:e5:6d:c2:0e:bc:ef:b4:fa:21:e1:
f2:cf:f1:90:34:82:80:49:e7:2d:1c:d7:c7:ae:84:
c2:8c:2d:18:27:f0:88:31:c3:10:f6:88:e8:30:75:
ba:e6:80:f5:38:90:e2:4e:cc:df:ce:3b:f8:a6:0e:
8b:96:96:3f:af:e1:d5:11:4d:e4:e2:09:c2:f2:77:
af:9b:25:6f:63:88:cf:cb:5a:3f:e4:3c:cc:a5:d1:
0f:66:ee:8e:49:2d:78:4c:90:93:1d:e8:70:42:d1:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:8f:cc:23:4e:57:c0:f8:90:66:e4:31:69:1c:24:80:88:
0b:41:c8:3f:9a:d0:36:e5:dc:92:c2:28:01:12:c7:3d:00:a9:
e1:a2:8b:4b:f3:3f:5a:f3:51:e4:65:5d:14:7e:f4:e1:b2:69:
bd:ce:39:a4:1d:e0:e4:37:ed:fa:e5:9e:81:23:b3:da:23:f2:
a1:b1:6e:f0:e6:01:cb:ab:61:34:2d:fa:75:8e:8d:d5:b3:54:
5a:41:95:83:a5:53:a3:ed:06:49:8f:68:1f:e2:79:ec:be:1b:
0e:1e:fd:76:b2:b4:ad:a2:a8:4a:bb:17:5f:6a:de:0a:fb:d9:
ef:42:10:c2:bc:51:23:58:4e:df:df:0d:ce:8e:26:54:8a:b1:
45:dd:e7:86:e0:49:cc:9c:3f:c6:7c:48:d5:cc:f9:19:cd:08:
0f:16:70:e8:41:a6:8e:de:4a:b2:32:2d:34:d3:09:63:e1:2b:
fa:46:51:e4:fe:97:b3:4c:9b:57:f0:cd:2e:8a:ed:9a:a4:9e:
27:1b:b2:98:ab:6a:a3:c7:3c:e3:5a:41:a3:d4:96:9f:ea:fa:
59:91:0d:a2:da:14:54:ba:cd:00:ad:c2:5c:18:6d:54:95:8e:
50:a5:5c:23:fe:84:79:e7:34:5b:d1:5f:d9:bf:16:1a:21:80:
58:0a:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:23:08 2025 by rpki-client