Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: 65lntF0j236SQy0N7cWe8F+l06mScgfdsvbpDIRHK0c=
Subject key identifier: 32:E8:92:B5:09:25:51:C9:82:9D:DD:88:2C:5F:00:51:F0:DF:36:27
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 01962F745B2A0C8514D4EF3FEFA4C26C4EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 0F99
Signing time: Sun 13 Apr 2025 14:01:16 +0000
Manifest this update: Sun 13 Apr 2025 14:01:16 +0000
Manifest next update: Mon 14 Apr 2025 14:01:16 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: wAT7RJaNPz9KfmutykBPn3Ejhh9APvuWScCjT/mcSh4=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:5b:2a:0c:85:14:d4:ef:3f:ef:a4:c2:6c:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Apr 13 14:01:16 2025 GMT
Not After : Apr 14 14:01:16 2025 GMT
Subject: CN=32e892b5092551c9829ddd882c5f0051f0df3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:2c:46:d6:b6:b6:71:ed:c5:46:31:69:e2:
6b:73:20:fe:b9:70:ac:e0:15:f4:80:56:27:da:cb:
6e:52:a7:84:0e:74:4c:85:0c:ae:c9:42:78:5f:56:
86:17:7f:fd:22:a4:cc:00:25:07:af:42:be:82:3e:
44:b7:65:96:db:b6:03:52:16:4f:71:70:ec:c5:ad:
3d:0b:d3:f2:65:e4:f3:f2:bb:5c:05:35:95:95:9a:
2d:34:0f:80:78:f1:fe:31:b3:88:96:b3:7a:a3:5b:
f6:e3:af:38:0c:01:f8:b7:68:16:f2:5d:f3:95:8c:
13:cb:82:af:12:d3:40:21:35:5a:9f:ab:1d:84:37:
f8:17:4a:a1:61:d9:19:a4:95:94:7a:e6:28:4f:1c:
e2:d6:1c:b0:d8:90:1a:93:6c:b7:51:12:c2:f8:65:
56:3e:9a:2e:33:b9:58:46:e2:a1:27:2d:d7:54:65:
aa:3b:79:5d:45:1a:f6:37:ba:c2:37:5f:84:fa:a1:
9f:98:b3:41:26:8f:85:c2:0c:96:0f:f0:5a:27:20:
12:98:e2:48:8c:ec:0b:8b:24:a7:74:f9:1f:63:5b:
0a:8e:b1:09:b6:a4:58:ba:8e:98:23:5c:42:75:7b:
41:8b:50:5f:0a:8a:00:2a:e2:cb:a2:c4:f0:fa:ba:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:92:B5:09:25:51:C9:82:9D:DD:88:2C:5F:00:51:F0:DF:36:27
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:e8:d3:3d:bc:50:9f:cc:29:23:53:5f:ba:c7:ed:20:42:
68:0e:8d:f0:42:ff:f9:3f:00:f9:8c:f5:b3:f0:1a:f3:f5:c5:
db:d4:63:7c:84:9c:50:9c:73:16:30:1f:ca:34:52:6b:ba:02:
4f:1c:39:db:df:64:7e:07:d9:e9:25:f1:54:99:7e:e9:e1:8a:
a9:26:6d:62:32:ba:f0:bc:27:31:76:ce:bb:25:48:41:88:cc:
b1:6d:cd:ba:5f:3a:75:ec:09:ea:6f:cd:94:f7:f0:19:5b:34:
a2:3b:65:2e:d3:d1:4b:d3:f0:d6:9c:01:26:33:ae:62:36:4d:
e8:b7:8a:4b:d3:1f:81:13:6f:ed:05:ea:6f:31:b4:02:53:51:
f3:07:7f:64:f5:dc:16:22:83:9c:43:98:83:5d:45:78:7c:42:
ad:6e:2a:c6:91:dc:3e:86:32:14:00:ad:40:99:33:d6:9e:bd:
68:9f:c9:b7:4c:10:32:d5:22:fc:2a:f5:aa:0a:dc:fa:41:b9:
2b:5c:bc:95:2f:b2:ea:30:56:53:6e:1c:7b:03:57:34:71:83:
31:42:15:0b:d5:84:ab:02:fa:37:78:f7:90:38:97:6e:a1:f1:
73:52:39:8d:75:8d:ec:8a:80:fc:75:3d:2b:5d:70:bb:62:ba:
f9:fc:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net