Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: 2Aa3UyxvNoKlzpeEMKfSYzvNSpuSUI7cIojd8rNjhQ4=
Subject key identifier: 0F:0C:D4:F1:E0:AE:4B:D2:B8:AC:C2:56:83:D3:D5:CD:24:10:04:9B
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 01962ECF84DAC3899977F0351A56FEE8B3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 11B9
Signing time: Sun 13 Apr 2025 11:01:13 +0000
Manifest this update: Sun 13 Apr 2025 11:01:13 +0000
Manifest next update: Mon 14 Apr 2025 11:01:13 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: T4v+qm6bYN8QW5lzbZZrkiSP0Ajh9l/VKYoOy3ll9cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:84:da:c3:89:99:77:f0:35:1a:56:fe:e8:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Apr 13 11:01:13 2025 GMT
Not After : Apr 14 11:01:13 2025 GMT
Subject: CN=0f0cd4f1e0ae4bd2b8acc25683d3d5cd2410049b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:f1:64:c6:cd:a5:44:92:a7:e3:f8:c8:ce:
ec:50:7e:29:8a:d4:e3:67:15:15:32:87:79:63:20:
60:b1:b3:8e:15:89:59:03:7b:d8:df:7a:28:1b:3d:
03:81:95:87:46:29:41:11:08:2c:cd:99:75:a9:cb:
a4:09:03:c2:51:4e:87:f3:be:12:fd:2a:87:fa:9b:
a5:0d:d0:de:7c:7d:1a:d6:85:78:ab:c5:e6:2c:2b:
43:b5:a3:ef:52:83:2b:7c:17:e3:67:f6:56:ef:66:
b9:63:cf:d8:22:ce:e0:dd:5b:46:a6:c5:80:18:d1:
fe:70:6f:c9:a7:9d:74:a1:17:b8:f4:51:7e:85:6c:
6b:ce:c7:13:96:a4:c9:be:26:a0:45:16:5e:4f:a6:
3a:c6:4f:d8:24:40:54:aa:da:fd:04:0f:c3:7a:8e:
d1:28:5d:e2:bd:89:2d:05:66:00:38:d9:00:4b:30:
cd:61:d0:31:61:af:7f:da:da:e2:56:32:cf:1f:4a:
f7:8d:35:63:49:ad:5b:4f:57:b6:fd:ad:02:f3:b5:
59:ce:31:59:ef:d1:38:e4:9c:92:3e:39:14:26:ae:
b0:b8:7b:57:ec:3d:20:75:a3:d9:d4:b5:5c:4b:7c:
12:41:bc:27:f7:85:0a:f9:59:74:42:05:48:29:e0:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:D4:F1:E0:AE:4B:D2:B8:AC:C2:56:83:D3:D5:CD:24:10:04:9B
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:29:49:be:a3:c8:f0:d6:f2:61:ad:9c:14:d2:4d:c2:e7:
9b:a3:23:d6:e3:19:df:d5:f9:3e:40:d3:d9:07:ca:37:14:f9:
9d:93:1a:59:3d:95:94:40:e2:51:ab:fe:43:ed:41:67:aa:5b:
58:09:36:17:4b:17:54:ef:70:6d:f3:89:de:a0:9d:39:ed:b1:
04:6c:28:88:b0:31:b0:5d:9c:1d:85:dd:27:2e:89:81:52:3a:
13:ef:07:74:18:f9:9f:47:8c:8e:21:ec:52:56:f4:b8:57:32:
d4:d2:ad:37:b7:48:b9:6f:7c:a4:9a:1f:26:16:ef:8d:5b:c5:
ff:bd:99:c2:7e:48:bf:2d:d4:da:af:e4:b4:cd:d8:7f:a6:dd:
47:cb:40:8b:5e:0f:ac:89:56:b9:c7:14:53:a5:3a:15:8c:7c:
9e:80:26:00:96:91:b0:a8:3a:fa:3f:9c:d6:55:0d:be:80:27:
89:cd:e5:43:67:d7:63:00:77:20:b8:f3:41:7f:28:da:6d:d6:
e3:fb:22:24:a6:62:46:21:7a:9e:54:ca:3f:83:d8:bc:87:28:
be:53:c7:04:a6:d3:32:7d:b8:76:6e:fe:db:2d:74:66:1f:17:
8d:a7:2a:31:39:80:0d:cf:2c:ce:a9:c3:28:5a:2a:3c:94:74:
37:c2:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net