Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: pFLzI10dASUmA3FdRBRA7E3lT0lFNOJkNPV447dBNi0=
Subject key identifier: 3E:BC:06:59:86:EF:2F:6E:70:42:AE:CA:F1:F3:66:68:4F:3D:06:E1
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01962F069479B7F25A9D3E96F8F4EF3090AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0A0D
Signing time: Sun 13 Apr 2025 12:01:22 +0000
Manifest this update: Sun 13 Apr 2025 12:01:22 +0000
Manifest next update: Mon 14 Apr 2025 12:01:22 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: 4TzZc0pTcyIKAr3H57B0EV1hp4bV0G4ZUEuYE7S0eR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:94:79:b7:f2:5a:9d:3e:96:f8:f4:ef:30:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Apr 13 12:01:22 2025 GMT
Not After : Apr 14 12:01:22 2025 GMT
Subject: CN=3ebc065986ef2f6e7042aecaf1f366684f3d06e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:31:f9:b2:18:6d:79:80:d8:5c:d3:47:7f:
d2:32:49:bc:bc:36:aa:33:95:1c:61:4e:72:37:f3:
dc:02:09:9e:f5:05:1c:33:04:ca:fc:d9:d5:44:9e:
dc:4c:fa:b6:2f:3c:07:30:57:7f:41:e0:9d:93:5b:
c4:3a:35:9c:20:28:3d:0d:c6:c2:91:b1:a3:a7:e9:
28:f4:7d:bf:c2:f1:09:0b:35:55:74:cf:05:db:0e:
ad:54:10:f5:13:fb:8e:db:35:be:b6:29:17:ef:87:
39:06:40:d1:72:39:ff:df:bd:df:6d:12:13:62:8c:
04:56:8f:fe:e5:75:b2:9d:fd:0e:8f:c7:1c:2e:47:
b9:33:b1:26:4b:a4:2b:7a:5f:e2:77:76:a3:67:2b:
3c:08:30:c9:24:ef:c1:6f:5f:5c:9b:52:5d:ff:e9:
6c:a3:17:19:c2:57:e0:6f:e8:4e:74:a5:c1:67:79:
72:11:b3:55:ff:c6:c3:1f:39:fb:79:a6:51:72:cf:
d0:ae:91:25:cf:9a:dc:8c:d1:00:99:19:1e:dd:76:
fc:86:65:cf:9c:7e:eb:de:28:86:6f:e6:51:ed:65:
5a:bb:2f:c2:aa:90:3f:a7:28:33:bb:20:c8:81:8e:
50:f3:dd:a1:04:dc:0e:16:57:b5:c8:3a:84:dd:65:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:06:59:86:EF:2F:6E:70:42:AE:CA:F1:F3:66:68:4F:3D:06:E1
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1c:77:2d:e1:8d:3b:8f:50:88:79:98:b2:ab:39:c6:cf:05:
a4:2b:b3:11:2a:37:6d:b3:e9:75:ad:28:d2:7b:dc:7e:49:27:
96:12:a9:bc:cc:a9:92:19:db:23:b8:39:7b:cd:95:55:30:a9:
16:98:66:91:e9:2e:6e:8b:b8:9d:2a:8c:b2:06:1d:f0:e4:23:
74:e7:ae:56:8d:e5:f3:d2:27:96:19:b9:f8:79:01:df:b3:51:
80:21:26:22:0e:85:3a:b7:f7:26:2a:01:65:10:c7:de:66:e7:
fd:52:3e:80:73:93:33:9c:09:f5:bd:3d:d9:ee:0b:6f:15:35:
28:7c:18:63:61:8a:22:3a:e8:d3:c4:73:82:b1:81:08:46:57:
54:f5:df:2d:2c:db:66:76:15:93:0e:d9:33:7b:24:ff:38:a1:
e1:89:9f:a9:9e:f3:c0:a7:e6:31:1a:ec:5d:dc:f4:3a:36:24:
3a:27:12:9f:bc:1c:ae:df:e1:19:57:53:13:47:ea:89:8d:4a:
87:2c:b3:08:31:51:6a:d2:51:e5:8b:c3:2a:a3:c0:e0:0c:39:
65:22:98:b7:c0:aa:d7:dd:cc:79:df:31:43:f4:98:dd:9d:68:
1b:e0:a2:25:61:47:b2:bd:35:9c:c8:f7:b1:1e:12:f8:74:c4:
76:52:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net