Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
File: cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft (raw, json)
Hash identifier: 53c+WzmBoqOvxD7S2PkTrLGvzRKktrjUoJGhiuEL310=
Subject key identifier: 0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
Manifest number: 087D
Signing time: Tue 04 Feb 2025 15:55:03 +0000
Manifest this update: Tue 04 Feb 2025 15:55:03 +0000
Manifest next update: Tue 04 Feb 2025 21:55:03 +0000
Files and hashes: 1: cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl (hash: aSog9VcoKJQHX3rKguF3iDIhcsqrYZvGKA/Al740gvM=)
2: gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa (hash: Vulwf36QNx7RGJe8bRF+33pZQ4PnBvk6alC/bHmOvgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3256 (0xcb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 4 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0DF9B711DFD65FAE0E658F0E7D80A78211D6887D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:6f:4c:58:c5:cd:80:10:af:93:7d:43:52:
d4:fe:64:de:5b:0e:4a:92:21:8d:51:38:c6:4c:75:
64:71:08:5a:0a:17:85:d1:f4:1a:f9:2c:e1:86:9b:
76:6c:53:d8:bf:88:a2:e0:5c:8b:5d:9b:64:18:b6:
91:1a:f9:9a:5c:97:09:34:4b:30:e4:61:7f:67:e1:
e0:ea:25:26:80:ff:25:86:b8:be:68:89:4a:f0:b1:
5f:3b:91:56:39:c3:3c:51:c4:21:2b:d3:37:65:b4:
84:45:45:6b:ad:45:75:e8:cb:a1:78:48:d6:0c:ad:
ec:b5:08:d1:fc:3f:56:8b:ac:da:4e:73:e2:ae:cf:
86:e9:97:18:b0:aa:fb:59:3a:40:3f:d0:b2:7b:07:
16:81:22:0d:7f:e5:6d:c2:0e:bc:ef:b4:fa:21:e1:
f2:cf:f1:90:34:82:80:49:e7:2d:1c:d7:c7:ae:84:
c2:8c:2d:18:27:f0:88:31:c3:10:f6:88:e8:30:75:
ba:e6:80:f5:38:90:e2:4e:cc:df:ce:3b:f8:a6:0e:
8b:96:96:3f:af:e1:d5:11:4d:e4:e2:09:c2:f2:77:
af:9b:25:6f:63:88:cf:cb:5a:3f:e4:3c:cc:a5:d1:
0f:66:ee:8e:49:2d:78:4c:90:93:1d:e8:70:42:d1:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:8d:02:22:ff:67:b6:25:17:d2:d6:3b:9f:e7:01:39:9b:
52:95:5e:48:98:55:b4:41:fd:19:c2:aa:d3:0d:b6:a4:d3:c8:
51:91:1c:c3:37:61:60:e7:be:d5:50:7e:d9:59:ca:b8:db:0d:
68:f7:7c:a0:66:9f:35:36:57:73:5f:8c:7b:14:c3:0d:68:3c:
b6:67:0a:53:e9:2d:45:0b:bf:30:55:a6:8e:fb:2c:2b:c1:40:
20:ba:38:3d:c9:be:8e:80:04:73:96:19:e4:df:72:c7:1d:79:
63:f7:cc:96:70:53:ca:f1:ad:1f:b9:55:84:b8:2a:51:25:64:
f5:50:2a:8e:24:ab:15:6a:a7:4c:47:66:88:3e:a0:c6:ff:91:
c1:8c:f9:c1:71:77:71:3e:43:14:4d:63:28:6c:79:49:62:29:
e6:df:41:f7:29:25:86:47:c4:7b:f8:db:21:fc:0d:8e:8b:d8:
ee:76:79:1b:96:c2:46:7e:ed:a7:6d:79:61:b7:70:bc:f4:b3:
fe:7a:3c:69:75:39:9c:23:e7:0e:f9:c4:16:71:72:97:95:37:
e7:b4:a6:69:50:35:37:e3:b7:8b:f8:72:61:1e:43:f9:28:f6:
69:3b:05:41:15:b2:55:3f:be:0f:16:74:9e:cd:88:bb:43:32:
d5:ac:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:50:05 2025 by rpki-client