
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: mbQVgmXqwf3dkLOZv7hyGPVGZmS9nZ8l1OrrEXPr2LI=
Subject key identifier: DE:28:8C:94:4C:82:0C:94:66:F5:77:DD:07:89:4B:DE:14:40:3F:26
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 01962F06A9AFF7184DD43C0AC07B6704629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0340
Signing time: Sun 13 Apr 2025 12:01:27 +0000
Manifest this update: Sun 13 Apr 2025 12:01:27 +0000
Manifest next update: Mon 14 Apr 2025 12:01:27 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: Ox4xKpDATSw5RRFCBEK7e2mSZJMhIwdJ2nF8M/ZksYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:a9:af:f7:18:4d:d4:3c:0a:c0:7b:67:04:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Apr 13 12:01:27 2025 GMT
Not After : Apr 14 12:01:27 2025 GMT
Subject: CN=de288c944c820c9466f577dd07894bde14403f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:8a:c1:38:e5:e8:ce:b8:96:4d:67:62:5a:
e6:ac:85:90:07:9d:6f:c6:10:d3:45:01:b3:83:a6:
04:b3:c6:ea:89:35:24:72:d2:03:ce:c5:a5:d6:7e:
c0:bc:fb:6b:dc:ff:5d:96:bc:13:92:16:09:c4:0f:
d9:53:cf:9d:ca:0f:f3:f9:64:f0:0a:0b:7d:05:66:
dd:c2:08:f1:4b:54:87:d4:88:e5:1c:10:69:6c:06:
60:41:6a:13:10:3c:4a:a3:8b:88:ff:c7:2b:b7:01:
cd:e1:b6:92:cd:ec:fa:bb:89:ce:1a:92:fc:ff:18:
d0:83:42:f8:86:23:05:1d:d2:ca:ed:e6:9c:39:f6:
3d:e5:4d:63:56:51:2b:d9:70:2c:14:6a:5c:66:1c:
1e:44:6c:97:e0:4f:ac:a9:4c:ae:16:69:1a:03:90:
4b:49:f5:4f:c1:d0:c3:66:d7:c7:68:d5:cf:69:ba:
d8:5f:c8:1a:c4:70:23:57:8b:ad:44:00:35:c5:e1:
07:ac:a4:ca:2f:47:f1:1d:56:5f:c6:12:bb:ce:85:
3d:0d:e0:e6:22:9e:43:42:1c:ef:4c:24:58:d7:50:
04:78:6d:5c:8d:58:47:fd:36:7c:af:ce:18:cc:06:
63:78:d7:1a:f1:22:7d:c7:bc:89:1e:d0:06:a5:82:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:8C:94:4C:82:0C:94:66:F5:77:DD:07:89:4B:DE:14:40:3F:26
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a5:9f:c7:40:2e:96:21:bf:98:81:4d:f5:ea:5a:0a:1b:fa:
38:62:e0:a0:d3:29:c4:a6:5e:9f:c7:24:99:d6:e6:86:7c:b4:
2b:7d:33:e4:b8:5b:73:3e:05:6a:30:b1:ff:95:32:22:cb:46:
25:76:de:20:27:19:18:71:88:58:cf:6c:d2:53:a3:42:3b:db:
fd:83:89:0a:c2:97:29:92:36:fc:33:59:ab:c7:8f:14:22:b5:
98:03:f8:b6:2d:bd:6d:fe:db:57:c2:29:04:cd:cc:1d:a7:91:
e2:7b:85:20:4c:91:ac:d7:e4:9b:8e:bd:4c:c9:58:44:8a:c7:
7c:80:fa:fd:12:74:06:49:e5:a2:08:1a:8a:4e:a8:f5:e7:c6:
86:77:a3:52:18:a3:66:b2:e0:cb:2d:42:d6:d9:87:9f:97:6f:
4b:43:a1:59:fe:63:f5:c2:55:8b:89:51:cf:d6:c4:b5:f4:52:
53:7a:3b:b4:7c:9a:b5:e8:7c:8a:d3:0a:c8:b0:43:bf:0e:50:
e7:0b:6a:85:16:a7:f4:4a:54:8b:8d:64:e3:12:0a:a8:db:d8:
74:08:1d:e8:51:48:d6:0a:2f:82:30:c7:d1:a7:d5:70:d5:0d:
c7:c4:17:25:f2:92:34:f3:bc:95:a6:ed:23:90:90:f2:75:31:
c1:51:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net