Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: E/+ZoSihK/cddRBpWkV4YinsW1CDOhkDB6PvzG0C9d0=
Subject key identifier: 86:8A:AB:64:5E:4C:3B:21:A1:01:E6:21:D1:2E:90:35:7F:72:8F:A5
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 01962E2B1FF79E8500D320CE536F7B494DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1435
Signing time: Sun 13 Apr 2025 08:01:40 +0000
Manifest this update: Sun 13 Apr 2025 08:01:40 +0000
Manifest next update: Mon 14 Apr 2025 08:01:40 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: VsOfY6OOPr9Q5Usq8OVQZll2vjPvji4/7AWvYXEzRDA=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:1f:f7:9e:85:00:d3:20:ce:53:6f:7b:49:4d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Apr 13 08:01:40 2025 GMT
Not After : Apr 14 08:01:40 2025 GMT
Subject: CN=868aab645e4c3b21a101e621d12e90357f728fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:11:38:52:9c:0f:31:cc:cc:e6:4d:dc:62:
f2:cd:4f:a3:a6:06:55:3c:fc:6e:99:47:70:cf:15:
55:b6:3f:94:40:59:23:1b:90:6b:42:8c:ca:d0:09:
b8:c9:a0:b5:3a:97:ff:13:0e:53:7a:3f:07:7e:9a:
f2:24:3b:3a:64:e2:b6:bc:26:17:eb:94:d9:e6:72:
61:d1:21:90:71:2b:0e:25:82:12:4c:e5:da:94:d9:
a4:83:c1:59:a9:43:21:b2:ba:33:b0:84:26:6f:bb:
81:f8:85:c5:94:2c:6e:0c:98:7d:6e:c8:7b:eb:8f:
2c:18:ea:45:0e:0b:88:b1:1f:2b:35:27:41:4d:1a:
b6:08:dc:35:db:e2:28:3a:cf:a9:82:59:0f:d3:fb:
f3:8d:ae:01:d3:4c:6d:cc:c1:de:38:17:93:70:ad:
ce:9f:56:24:a9:98:5f:87:12:eb:d6:8b:34:23:65:
0b:da:ee:a4:e6:eb:5a:ec:ca:86:ba:4c:58:53:d3:
d3:fb:1e:c8:6a:15:b0:d3:c1:e3:83:ac:9d:bf:cc:
d3:9e:03:51:7f:a1:37:8a:3a:0f:1a:20:45:65:05:
5e:d3:fc:e9:01:62:76:b0:9f:51:d6:9f:f0:41:e3:
2a:ec:70:9a:fe:aa:79:47:57:9f:6f:7b:89:aa:81:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:AB:64:5E:4C:3B:21:A1:01:E6:21:D1:2E:90:35:7F:72:8F:A5
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:c6:10:85:98:c8:43:48:7c:ba:75:3c:c1:92:ee:d3:42:
78:8f:02:66:12:f3:a1:77:63:1f:82:03:ed:77:e4:9a:f1:8a:
62:67:13:2d:d5:0c:87:81:89:92:3e:92:bb:9e:54:21:ba:0e:
b8:b0:cf:5b:7b:e8:2c:c9:77:ff:44:e6:57:49:b7:be:ee:1a:
58:0b:87:86:25:ad:a6:ad:cc:76:6b:5e:7d:01:40:6e:03:3a:
05:36:25:a6:bc:5c:79:d1:65:62:7c:6d:d9:73:ad:1e:5c:a4:
d0:fe:b6:8b:fe:20:6f:ec:94:aa:2c:2e:ad:00:78:95:ee:7b:
19:3c:fa:d8:86:34:e8:a2:ea:f3:6f:e2:eb:af:45:4b:24:fc:
97:1f:42:54:22:1d:19:ec:c2:99:7a:dc:50:05:b9:27:92:b4:
24:d3:a3:ab:f0:40:f2:15:6f:b6:e1:6a:b3:37:96:69:77:1a:
54:2b:f3:6b:8f:df:93:32:ab:2c:47:58:14:ae:f0:49:17:82:
14:5c:5d:2e:96:44:07:42:e3:be:20:2b:8e:65:25:86:cb:7f:
cc:73:6b:d9:f4:10:1a:ce:f3:83:31:5c:b3:3b:df:48:61:c0:
95:53:95:d4:f5:cd:89:71:f8:4b:81:ea:d9:46:84:80:6f:cd:
16:46:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net