Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: 7R5qn1tsNL7K97dOsH2O0zUAwK6ryhBsmp2cghMGRHA=
Subject key identifier: 20:D4:E1:02:8A:9F:0C:3F:07:F8:20:2E:57:26:96:F4:90:96:72:C1
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 01962FAB204D6DC157137BA4670E9E75C73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0BD2
Signing time: Sun 13 Apr 2025 15:01:06 +0000
Manifest this update: Sun 13 Apr 2025 15:01:06 +0000
Manifest next update: Mon 14 Apr 2025 15:01:06 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: rMqud+VB907BIbV5qcxbezbOZdPwk7gohzAs/1mrvDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:20:4d:6d:c1:57:13:7b:a4:67:0e:9e:75:c7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Apr 13 15:01:06 2025 GMT
Not After : Apr 14 15:01:06 2025 GMT
Subject: CN=20d4e1028a9f0c3f07f8202e572696f4909672c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:69:da:7b:60:c2:5e:b0:ce:62:51:e7:cd:
ad:03:54:7e:b0:f2:45:04:de:78:63:50:3c:82:94:
32:fc:f8:8e:00:9e:01:55:5d:2e:34:6f:37:77:a5:
06:e7:93:8b:49:14:76:11:eb:ac:d7:4b:f5:3d:f1:
41:8b:fa:40:89:32:07:9b:05:bd:c4:2f:bf:69:24:
f6:6a:1c:ab:60:eb:6c:c2:f7:0e:90:e4:ed:f6:f0:
70:cd:7c:f6:35:47:aa:89:4d:c8:ff:cd:40:07:dc:
53:0d:3b:19:18:6b:0c:ca:ac:1f:84:f6:ce:8a:cb:
11:6a:0b:99:fc:e9:02:bd:94:56:56:81:31:98:6c:
f3:45:13:0a:9f:bb:b4:35:79:65:c3:0e:32:84:95:
35:10:31:69:7d:82:f0:f0:ef:7e:0c:0a:4d:66:b8:
43:b8:b9:cb:4b:f4:9b:ce:49:d3:fa:b7:ec:7e:f2:
bc:ac:5c:17:80:8b:a6:dd:bf:f6:63:4e:41:ac:b7:
17:8c:16:85:2e:81:1f:52:f3:45:30:1a:b7:14:5b:
b0:fc:ca:73:6c:5d:26:5b:7b:61:f4:7f:ad:39:0b:
cb:5a:8d:e2:e2:61:39:10:00:d7:e0:26:71:8c:18:
bb:3d:9b:be:99:9e:18:80:4b:43:af:b1:f6:de:89:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:E1:02:8A:9F:0C:3F:07:F8:20:2E:57:26:96:F4:90:96:72:C1
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:ff:6d:21:d8:a6:29:a6:3d:28:d8:05:7a:f3:bd:1d:e7:
39:6e:61:eb:1e:11:4c:06:c2:8d:f3:b4:2a:46:7b:62:6b:16:
b0:4f:42:f0:9d:cc:1f:ca:08:ed:bc:b8:65:56:d8:f4:5e:56:
b1:f8:fd:a3:2b:55:4a:79:98:8f:bb:4e:86:de:b9:02:26:12:
dd:5d:37:4e:99:f6:0f:5b:7f:c5:86:ca:1c:bd:75:24:a5:c3:
9a:f4:0d:27:fd:26:a9:6b:e0:93:64:63:68:88:69:56:b6:1a:
2a:77:02:4b:30:1b:b1:31:e4:49:47:d6:c1:04:04:83:0e:8f:
3e:d1:0d:e9:e8:57:ea:72:de:30:fb:c3:27:39:18:75:76:2e:
fd:11:86:d2:1d:bb:3e:74:01:7f:35:be:7d:8f:4d:90:1b:b8:
73:c6:82:ba:14:1b:e3:b9:fe:0e:79:d4:fe:27:f5:1f:76:f4:
79:d4:f3:68:ee:fc:eb:2c:e0:40:96:80:6c:5c:31:c5:25:b5:
8b:5a:16:df:ec:3e:76:89:dd:77:4d:8a:2f:6b:09:fa:b2:fd:
84:58:0e:f4:de:09:2c:1f:f3:ff:3a:c9:44:49:01:95:f9:da:
4e:8b:fc:57:ab:aa:54:3e:c2:ed:05:4c:97:a8:a2:f0:dd:6f:
bd:1e:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net