Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: BQuGLQDM7dqGfmUPBnJZKa5h1UhrniE6On8wzv4/EFw=
Subject key identifier: 98:13:3C:A8:53:B2:FD:C5:F9:E7:B2:AA:56:CB:30:49:3A:F6:EC:CD
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01962F3DF6EB0849B04AE5B8F45F1D3953AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 07D5
Signing time: Sun 13 Apr 2025 13:01:52 +0000
Manifest this update: Sun 13 Apr 2025 13:01:52 +0000
Manifest next update: Mon 14 Apr 2025 13:01:52 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: k0zjJcWSPdrEBOLNZHtNcpVt+EdY4k7iUgXnSZ2mf10=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:f6:eb:08:49:b0:4a:e5:b8:f4:5f:1d:39:53:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Apr 13 13:01:52 2025 GMT
Not After : Apr 14 13:01:52 2025 GMT
Subject: CN=98133ca853b2fdc5f9e7b2aa56cb30493af6eccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:8c:13:df:42:f6:3a:3a:03:5b:f0:0d:89:
28:ff:db:24:2f:25:5c:aa:94:03:1a:fa:81:8d:2d:
cb:35:fe:30:22:cb:d0:3e:61:e0:96:0f:3d:34:a4:
90:00:59:ee:a4:ec:77:ea:26:87:61:f4:76:d0:a2:
9f:8b:5f:60:d9:7c:42:0d:9e:0d:16:4c:8c:90:f4:
1e:0a:82:05:cd:cb:7a:22:e1:d9:9b:b8:0f:dc:7d:
2a:f3:e4:c6:9c:5f:3b:aa:50:52:f8:a2:2c:d4:2b:
3e:74:70:08:f6:6d:ad:38:c4:64:81:2c:13:96:56:
69:cb:75:1b:d0:c0:ec:c3:79:40:90:c4:95:7a:df:
ea:91:16:4b:32:8b:05:7c:65:f7:b3:c7:d7:6f:81:
60:74:05:c9:b8:c6:ba:c6:20:c2:4a:00:2b:2d:96:
55:b2:08:4b:53:09:ef:8e:32:5f:a2:94:12:ef:9c:
c6:73:23:68:e2:07:d9:32:df:ef:d8:97:33:f7:4b:
e1:8c:78:57:b8:9c:6e:6b:cb:61:f7:65:b2:3e:56:
19:5e:dc:57:88:01:ce:d2:e3:ed:96:13:19:f1:e3:
15:10:2d:cb:52:7e:ee:36:59:21:20:1d:fb:7c:eb:
65:a8:18:0a:47:59:61:8b:f8:27:1e:43:41:88:44:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:3C:A8:53:B2:FD:C5:F9:E7:B2:AA:56:CB:30:49:3A:F6:EC:CD
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:53:c5:9b:72:f4:d9:75:3e:b2:db:9d:4f:b9:ba:e5:40:15:
15:9c:b5:ab:e3:fe:50:a1:8e:2d:6f:d9:ed:eb:3d:ba:3c:03:
74:85:54:84:67:13:81:6e:69:65:8a:85:43:7b:27:53:23:af:
2b:1a:7e:b5:9f:10:09:39:7f:dd:67:1a:81:c6:f5:4d:b3:4b:
7a:f5:9c:dd:8c:8a:a8:6e:8b:55:fc:fe:15:e8:e7:65:e8:e4:
f5:a6:78:89:1d:67:a7:61:81:e9:ae:c7:78:4b:4c:a0:9f:d9:
67:13:0d:b7:d9:48:19:36:2f:31:a9:4e:f3:33:ac:60:02:c1:
d3:0f:0a:c5:ab:2b:b5:2e:7f:fd:45:a1:48:f0:35:21:7d:eb:
4e:81:ba:7e:18:a8:f0:92:92:c9:ac:03:a5:32:a0:68:54:91:
1a:e5:90:17:c5:c0:e4:0b:ab:6f:3b:67:03:e8:05:c4:57:47:
3a:54:d9:9e:c3:48:e2:57:9d:3d:da:eb:e8:b7:2b:d7:f6:a3:
3d:02:50:47:7a:cc:39:f5:c6:f2:70:eb:52:d9:e5:38:f0:4e:
2d:57:60:e4:12:2f:b3:cc:bf:a3:a2:0e:bb:de:a0:35:b4:76:
a2:0e:2b:c1:58:10:97:3f:36:10:93:09:50:13:db:83:40:65:
2b:50:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net