Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: +eNudjJKOfdYA2GAwAhVCt5rtdZF2pCDs4G1Vsgvyu4=
Subject key identifier: 8D:4A:D3:CA:4D:A6:95:40:7C:27:80:11:3A:2C:AC:FC:04:20:0E:51
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 01962FAB8B659AB71FE8945C83CE838C95B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 14D0
Signing time: Sun 13 Apr 2025 15:01:33 +0000
Manifest this update: Sun 13 Apr 2025 15:01:33 +0000
Manifest next update: Mon 14 Apr 2025 15:01:33 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: teo4roA5lFRE/wBV6Nx21iXAjiw2c4sqHoSnnHJZUjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:8b:65:9a:b7:1f:e8:94:5c:83:ce:83:8c:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Apr 13 15:01:33 2025 GMT
Not After : Apr 14 15:01:33 2025 GMT
Subject: CN=8d4ad3ca4da695407c2780113a2cacfc04200e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:0f:3f:b6:43:bc:ed:91:01:73:08:ae:99:
c9:44:c7:ba:97:38:dd:7a:d9:4b:76:a7:87:cd:e4:
06:dd:8c:21:88:72:d8:35:47:b6:f0:c0:0a:23:38:
29:39:66:5f:a3:a2:c3:38:93:e5:16:5d:86:ed:e5:
b4:56:0d:08:8a:a7:5a:2a:55:82:12:ea:de:c9:5a:
79:81:02:24:4b:70:02:50:05:10:71:13:1a:c7:eb:
48:69:64:10:e7:d3:bf:12:75:ce:fa:b3:8f:88:0e:
14:b3:bb:ac:47:ad:4d:8d:55:e4:cc:99:dc:4f:b8:
bd:8a:59:23:76:7b:a8:45:64:c4:ba:02:bf:34:3e:
e6:54:ba:7c:dc:9e:ca:a9:69:69:3c:b9:3f:62:c8:
6c:66:13:be:73:31:48:06:16:8c:c1:1b:8f:ff:44:
e8:b7:82:ef:75:ff:ca:08:37:9a:44:0f:8e:b9:12:
3c:2b:b6:76:ae:48:06:42:d4:16:f4:bb:90:58:3a:
ef:c0:0d:7c:d0:7c:fd:b4:bb:17:bf:9f:f4:a9:ee:
59:a2:16:91:82:93:3a:cd:f1:79:b1:98:2b:38:36:
36:43:f8:4c:30:28:4d:a4:88:73:98:05:a8:05:f5:
3d:4c:ee:38:87:18:10:20:7f:99:62:f4:b9:7f:dd:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:D3:CA:4D:A6:95:40:7C:27:80:11:3A:2C:AC:FC:04:20:0E:51
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a2:fb:2b:cf:25:98:1a:23:17:9e:61:97:04:ec:9e:35:5b:
d3:31:b6:4b:07:7e:2d:27:af:72:c9:6b:29:63:51:61:f1:f2:
0f:bf:9b:55:7c:2e:47:0e:cf:5f:c7:5d:c0:58:c2:f8:db:63:
89:ce:a3:29:e1:b1:aa:5d:bb:3b:c3:05:6e:24:76:cd:81:34:
7c:ff:9b:cb:39:ff:38:90:43:20:02:15:ba:f8:6c:01:39:ec:
c2:12:f7:76:b2:f4:25:ac:e7:be:c3:8e:b4:a6:0a:8e:62:c2:
cf:bf:56:5b:3a:91:e7:32:fe:de:6a:58:ce:12:9f:c3:10:09:
58:47:ab:63:93:16:f1:05:52:24:7e:04:7b:7d:4b:7b:86:a4:
2a:60:54:bd:51:88:a7:0e:ee:cd:b1:a0:39:4e:34:2b:f0:cc:
73:24:4d:d0:34:8d:bd:cc:9b:65:51:4c:23:5f:9d:19:c5:98:
e8:f2:50:ad:7b:a4:84:b0:86:45:16:1d:8b:2e:37:dd:f4:d2:
4e:b9:ac:1a:32:c3:1a:9c:84:92:0a:7a:31:6d:0c:a9:ae:09:
bd:e1:44:cf:22:2f:a6:53:5d:a7:30:ae:fc:8d:a2:8c:05:91:
a0:ab:5e:8f:9b:1b:20:17:9c:c2:9b:f4:38:c9:5c:22:13:cc:
f6:b0:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net