Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: uHwNzVS5yEZ619BDEO3prLlUzCUPk5BDP8Y4wcyGeGA=
Subject key identifier: 74:64:61:60:FC:BE:6A:59:34:68:77:3D:9D:FB:8D:77:01:49:A1:A6
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 01962FAB54C3DD2F680C25583DB1CBE85629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 01DE
Signing time: Sun 13 Apr 2025 15:01:19 +0000
Manifest this update: Sun 13 Apr 2025 15:01:19 +0000
Manifest next update: Mon 14 Apr 2025 15:01:19 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: OOVM8i5qbMH/bTekjVH40Mk5I1/jIv0BDpEJ0cVXVS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:54:c3:dd:2f:68:0c:25:58:3d:b1:cb:e8:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Apr 13 15:01:19 2025 GMT
Not After : Apr 14 15:01:19 2025 GMT
Subject: CN=74646160fcbe6a593468773d9dfb8d770149a1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:41:fe:d7:4a:07:7b:32:03:4f:77:06:52:
bd:54:e5:99:e7:f3:ed:9a:4d:a0:b3:db:3a:ec:59:
f4:ad:56:5e:6e:da:40:74:e3:fd:15:ae:7c:29:89:
74:65:2b:20:91:ca:18:35:59:22:6f:37:38:80:d7:
9a:b3:c4:df:f9:ca:93:38:e9:2c:4e:58:75:00:73:
9f:da:19:6b:4f:46:be:9c:ab:8b:b8:30:d3:a7:18:
a3:45:b9:cc:58:8f:91:53:8f:3f:7d:a9:8c:c0:95:
6d:01:94:ee:49:6e:8f:b5:6c:e2:9f:39:8c:df:e9:
0b:a9:bf:0e:12:43:16:60:6b:bd:b0:4a:a4:f5:b0:
d1:c5:e9:12:f9:1a:45:9a:15:d0:bf:95:6b:64:b3:
fb:82:22:a8:33:0a:be:82:30:50:36:75:a1:2f:9d:
04:56:b1:35:fd:7c:a8:10:74:86:60:3c:e3:19:d8:
83:8e:92:9b:62:e0:88:60:05:04:34:e0:e1:9b:87:
48:cc:73:19:f4:e1:f1:05:8e:e3:d6:d0:d5:03:be:
3e:5f:f2:40:de:5d:d5:68:bd:f5:7d:54:15:4b:26:
dd:8c:58:a1:52:16:62:b2:1e:86:bb:e8:76:c3:13:
18:37:9b:a7:f9:dc:3c:96:fd:de:88:e8:41:4f:c9:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:61:60:FC:BE:6A:59:34:68:77:3D:9D:FB:8D:77:01:49:A1:A6
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:38:8f:5a:8c:b5:34:02:9b:16:f1:39:bb:c7:73:29:c8:ed:
5c:07:f4:ec:c1:df:a9:3d:00:c6:10:9f:fa:50:4c:a0:54:0a:
53:c0:a5:c2:b5:99:52:4c:71:7e:ec:42:b4:34:e9:cf:6a:de:
8b:72:fe:eb:72:33:62:23:87:42:14:42:42:6d:54:29:da:dd:
03:b3:30:bf:f6:f2:17:65:4d:b3:ec:cc:65:cc:e0:61:75:4d:
e0:4b:fa:15:22:b4:b1:3d:11:d4:98:5d:fa:df:b1:bb:11:c7:
ac:eb:c6:77:cb:17:47:2a:23:2a:4b:a9:6e:31:60:89:99:23:
3e:30:a1:2d:90:fc:9a:90:4f:97:f4:4e:88:a0:db:26:24:9b:
49:38:9e:88:48:df:e4:51:a0:64:a4:cf:d9:8d:38:37:04:76:
fb:35:20:d1:65:d8:4b:f9:84:74:52:23:01:a9:6e:d1:6b:23:
83:4d:64:4c:81:1f:73:47:33:f8:c4:6c:26:b4:89:0b:59:dc:
bf:f4:b7:eb:f3:d5:4c:00:e2:86:7e:18:c8:8d:8a:c5:9b:88:
d0:e3:6f:fa:a0:ea:a1:aa:29:a0:ff:9d:de:e8:b7:67:79:6e:
52:97:60:57:0f:74:1f:3c:49:d2:a4:8a:42:6e:ae:79:92:49:
56:dd:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net