Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: YI7XEiEdV1mmC4DzYyombAhYTYiu9nmPUee62wErfQw=
Subject key identifier: 35:37:50:6F:9B:2A:93:43:95:D2:39:0E:74:EF:32:05:0D:35:2E:7A
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 01962E619A4A2ADF4625D91AE7E246B03162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 147B
Signing time: Sun 13 Apr 2025 09:01:10 +0000
Manifest this update: Sun 13 Apr 2025 09:01:10 +0000
Manifest next update: Mon 14 Apr 2025 09:01:10 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: HRVPHV91uO0GjastxjdKhWr8yvNYgyY4/6OffdIwC1M=)
2: bcS-hsDeO0gtgs28TEiHyvA81q0.roa (hash: CeE5W6otaxPvfHxN+lyC5C8i9p819egn6IV1iHF00Ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:9a:4a:2a:df:46:25:d9:1a:e7:e2:46:b0:31:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Apr 13 09:01:10 2025 GMT
Not After : Apr 14 09:01:10 2025 GMT
Subject: CN=3537506f9b2a934395d2390e74ef32050d352e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:21:aa:36:99:f9:83:f8:6d:4f:6d:8f:10:
9a:ab:5b:81:de:a0:85:f3:53:89:dd:aa:22:9b:4e:
a5:3a:91:4f:7b:98:0c:f0:cc:d7:2a:5e:65:74:bc:
d9:ed:28:20:93:3f:d7:0e:cc:2a:38:a5:d6:a1:2e:
7c:1e:ea:03:64:b7:1c:2f:a1:9c:3f:66:00:5d:17:
75:54:23:54:75:87:34:1e:cb:c7:76:11:9d:14:ce:
a0:ac:bc:a0:63:d4:29:46:c2:7d:b1:42:5c:f9:ea:
dc:11:5b:b9:25:2e:87:ec:0b:82:c2:a2:94:4b:5b:
b0:69:ec:85:63:90:67:4e:7a:5b:07:91:b5:ad:66:
69:87:d9:6a:b1:0e:5c:9c:ff:14:a9:04:27:4b:40:
d0:82:00:f8:d2:a6:e7:b7:f5:8e:b8:32:80:4f:7c:
a6:85:d9:53:3c:f7:54:d4:24:8a:4d:03:06:f1:ff:
bd:48:53:d0:f7:47:58:57:6b:0a:76:10:65:f1:07:
98:c5:ae:45:f1:bc:cb:18:94:85:f8:96:aa:72:e2:
ca:3e:af:a7:87:c4:38:25:12:a6:40:70:a0:7c:d1:
a5:ab:31:68:26:63:8d:94:f2:a9:7b:49:52:df:52:
14:46:5e:e3:63:94:20:d5:14:2c:26:6c:70:3b:26:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:50:6F:9B:2A:93:43:95:D2:39:0E:74:EF:32:05:0D:35:2E:7A
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:68:73:a6:42:ae:df:0e:52:35:5c:2d:f9:bc:5d:95:1c:
2b:f3:f6:20:f2:cd:97:e0:65:6c:b3:da:c5:bb:92:4b:b4:dc:
87:67:af:85:cf:74:7c:1a:2a:be:1c:42:67:46:cc:e6:cd:a4:
e2:e6:56:f0:b0:50:e5:72:74:1b:42:27:98:a7:3a:66:eb:5c:
6a:8a:64:50:89:65:8b:8c:34:b0:18:20:54:55:fd:b1:ce:71:
03:2a:ff:6c:4a:5a:f3:8f:04:20:55:a0:46:46:2c:15:1b:64:
04:ff:f4:2a:d6:8c:2d:e5:ad:c7:dd:12:25:e0:17:7e:54:45:
74:e7:36:e2:6b:30:4b:6e:08:42:1c:a1:bf:30:06:c4:75:ff:
bd:63:57:d6:13:73:da:9e:cc:16:bf:8e:2e:42:85:e5:e5:33:
3f:2d:b4:53:e9:91:c4:e3:46:1a:43:08:f4:f1:3f:a3:df:87:
90:ec:f0:bf:93:16:e8:36:86:46:22:ac:4a:7c:e0:ff:b9:77:
b2:aa:74:53:c7:ec:ac:46:0d:23:8f:3c:a8:5f:f4:dc:43:59:
cb:e3:8b:7b:f3:da:3e:c5:a1:e7:7e:1a:ed:09:7d:40:91:a7:
9e:1c:7f:b1:d7:2d:61:3f:79:e7:5e:c2:72:e2:a6:aa:24:28:
02:4a:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net