
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: /PBLpQD+nC08GaMfIuEfo5UnR+FbCoSqpMcUkKojvRA=
Subject key identifier: 66:0E:D4:1B:F4:B7:94:6B:86:D9:9C:9C:60:5B:5A:02:5D:5F:D1:76
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 01962F06810E9ACC489C9AB9343D3FB03FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 06C3
Signing time: Sun 13 Apr 2025 12:01:17 +0000
Manifest this update: Sun 13 Apr 2025 12:01:17 +0000
Manifest next update: Mon 14 Apr 2025 12:01:17 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: hJ/2ND8jRs+pEkOwETAVK+Bm0tvxsYkhGSofFXK6u7I=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:81:0e:9a:cc:48:9c:9a:b9:34:3d:3f:b0:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Apr 13 12:01:17 2025 GMT
Not After : Apr 14 12:01:17 2025 GMT
Subject: CN=660ed41bf4b7946b86d99c9c605b5a025d5fd176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:b8:b3:04:38:cb:01:93:ca:06:dd:7b:55:
eb:e7:15:d8:be:85:bc:ad:56:05:d1:a4:4d:df:04:
68:00:d7:9a:f9:24:f5:3b:e2:e7:41:45:14:4d:b9:
da:4e:10:0b:9f:51:d6:bc:5c:ba:a2:81:69:7f:1a:
b6:8f:45:c0:40:93:e9:15:e9:ac:59:91:b2:98:1a:
91:2b:da:6b:ee:16:92:f8:88:cb:8a:ae:8d:2a:73:
a5:fe:a1:ce:1f:73:64:a5:0a:e2:90:ca:80:55:cc:
2c:b7:d4:ad:6a:9e:62:fb:df:35:6d:66:84:99:07:
62:3b:4d:ba:c4:8e:7b:0c:bd:75:59:be:fb:ad:a6:
21:26:89:0c:d2:c9:18:ac:cf:1d:02:a6:07:22:39:
ce:46:ed:5f:e3:b1:e1:c4:d7:a8:f7:1d:a5:81:ab:
4e:b7:0f:21:09:82:f4:67:f4:43:60:52:fa:93:25:
d1:bf:12:b5:44:3f:e4:12:77:c8:e0:13:aa:59:38:
ab:d0:6f:cb:42:07:5d:73:c9:f4:fc:d9:d8:dd:91:
34:4d:44:40:23:1e:91:45:26:0d:60:0a:a1:e5:a8:
22:05:14:b6:fa:50:fe:0a:de:e8:f1:b8:27:3c:8d:
08:18:dd:27:4a:6a:29:30:20:e3:9b:bb:79:ff:53:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:D4:1B:F4:B7:94:6B:86:D9:9C:9C:60:5B:5A:02:5D:5F:D1:76
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:82:d8:43:1e:2c:89:08:3c:3e:29:06:01:21:d4:1d:04:
a9:80:9b:1f:dc:07:fe:d2:83:9c:e8:82:50:53:ca:a1:e3:cd:
85:95:2b:ef:f8:2d:24:ec:b4:5f:d4:39:14:dd:4a:d7:29:bb:
24:37:28:4c:0f:e7:c0:8a:73:9c:5b:7a:f9:89:a9:72:2f:30:
43:d3:77:cb:0a:67:f3:6e:99:7a:5a:89:28:69:de:a5:f2:91:
a0:0b:16:92:5d:6b:aa:6d:ba:3b:36:5c:57:cc:9b:92:5d:43:
25:42:58:de:ee:bc:17:5f:4a:b5:a2:ff:a3:2d:aa:b9:1e:dd:
c4:14:30:3d:9c:28:39:ec:b5:b9:a4:9d:da:1c:84:c3:6c:fb:
40:4e:10:95:80:4f:61:66:1d:e9:6e:23:67:a8:af:fe:d2:99:
f0:d7:33:93:cb:36:71:22:e9:69:f2:7b:f1:1f:54:61:02:3d:
2f:e4:e7:79:c1:c7:f6:63:65:c0:b0:dd:40:8a:67:08:ae:58:
74:b6:24:d0:3e:97:86:48:f8:9f:7e:8a:d3:5d:eb:c3:d7:63:
fc:cc:da:e2:53:cd:31:80:1f:d8:cc:b2:6a:ad:29:c3:0d:81:
c5:fc:84:28:e7:62:92:ea:2b:df:d4:e1:9b:b2:38:d1:77:c4:
29:b0:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net