Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: 3/yeGWnY7DaVenk2LdtMyGI3q4E7NQAaYEL/EnY/TYM=
Subject key identifier: F5:C8:E7:00:11:1F:95:EB:B3:0D:78:CE:63:D7:D8:49:A6:00:DC:12
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01962E61FD19B906D39D0C4C4CF7F55D0D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 25
Signing time: Sun 13 Apr 2025 09:01:35 +0000
Manifest this update: Sun 13 Apr 2025 09:01:35 +0000
Manifest next update: Mon 14 Apr 2025 09:01:35 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: pP59T+lx/l9Y1/xeOWgpu5DHAxMqq0DvW/c4zC6fxro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:fd:19:b9:06:d3:9d:0c:4c:4c:f7:f5:5d:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Apr 13 09:01:35 2025 GMT
Not After : Apr 14 09:01:35 2025 GMT
Subject: CN=f5c8e700111f95ebb30d78ce63d7d849a600dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:8f:d7:14:7e:b5:4f:9e:f5:db:08:bb:70:
a6:01:09:48:3f:fd:ff:18:04:a8:ee:49:41:43:df:
81:da:4f:58:ca:9f:3d:bd:14:f0:1b:d8:b0:3c:27:
88:e1:5b:f3:00:2f:55:fa:75:a2:c2:b3:66:e0:1c:
d1:1a:d2:44:a2:14:6c:1e:bd:cc:b0:31:44:ef:c0:
9b:ab:8f:e0:89:3f:11:05:01:c0:39:44:e4:3a:2e:
3d:9d:b5:b6:b5:98:2a:b4:44:6f:98:23:bd:81:ef:
52:7d:91:72:e9:c5:5b:cb:b8:9b:80:c2:94:29:60:
f7:28:2a:cc:1d:e0:44:ee:22:8d:30:5d:a6:00:8a:
95:82:a9:9e:8f:9c:31:a6:b3:40:10:cf:96:05:91:
5e:53:94:90:dc:e0:77:c0:cc:9a:5e:5a:22:4e:cd:
59:a0:ca:d4:51:82:1b:5c:36:6a:b9:46:98:08:36:
45:91:7b:77:06:f4:67:b2:83:b0:4c:bd:f9:8d:2e:
6b:99:74:02:14:82:1b:15:94:b6:77:36:10:68:72:
2e:44:f6:01:77:35:31:c7:f5:25:e1:bc:ca:77:90:
3f:d6:5b:42:8d:40:a8:61:72:2f:05:c4:89:6b:cc:
7b:c0:f5:d1:51:17:76:1b:b4:6d:2e:53:09:5d:97:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:E7:00:11:1F:95:EB:B3:0D:78:CE:63:D7:D8:49:A6:00:DC:12
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:8d:96:39:90:7d:c9:a7:07:bb:a1:b5:4f:81:44:08:f0:
72:f1:47:81:8b:c9:38:f4:ce:e9:f7:05:b8:86:0a:37:aa:3f:
cf:6f:3b:25:1c:4e:41:83:13:be:cf:17:ae:64:82:4c:45:9e:
73:32:40:5d:ad:d6:18:84:cf:96:57:56:67:7c:75:97:2c:b5:
45:14:be:10:85:92:89:be:d8:ae:af:7e:d5:c6:ae:bd:74:4e:
26:10:8f:ae:93:b6:ed:5b:cb:92:91:e8:48:b5:82:78:70:3b:
51:92:ba:ec:1d:4d:ff:b6:3a:ea:4a:09:0f:51:ae:0d:70:a9:
ba:17:d4:57:6e:c8:8c:77:c9:9b:59:70:7b:1d:79:dd:01:db:
7d:dc:b2:e4:2a:ea:e5:d6:39:41:2f:23:37:30:f8:c2:3f:ee:
ab:e4:9b:64:11:80:74:b1:c1:73:5f:c3:75:16:8f:52:b4:81:
69:73:7a:b0:15:29:a7:f6:02:9d:fd:9a:1d:6e:de:bd:16:43:
5e:32:84:58:f5:3b:42:99:56:a0:db:c7:fb:15:91:d9:2f:f2:
72:39:21:50:ff:65:9d:30:95:b9:45:5d:1a:9d:90:43:c7:39:
c0:6c:b8:ae:1d:3e:d1:ce:48:c9:b4:3f:f6:e6:ff:7e:29:7b:
a9:6a:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net