Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: 46ydGd7v2SaVDUOCObcDi5P95QdvTBSjXtdbgolZfbQ=
Subject key identifier: 5D:F7:53:82:D6:5F:DC:D1:58:CC:07:E8:7F:AB:12:EA:21:01:2F:70
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01962E995665C5456F0C8624C0AF839BE4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 10:02:03 +0000
Manifest this update: Sun 13 Apr 2025 10:02:03 +0000
Manifest next update: Mon 14 Apr 2025 10:02:03 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: smdkUp4+eoo1XiaZcybk0ZZuAEL5gEuTX5GuDKIbEMM=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:56:65:c5:45:6f:0c:86:24:c0:af:83:9b:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Apr 13 10:02:03 2025 GMT
Not After : Apr 14 10:02:03 2025 GMT
Subject: CN=5df75382d65fdcd158cc07e87fab12ea21012f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:dc:5c:01:22:65:5d:2d:35:ed:65:aa:ec:
87:61:33:fe:14:0c:8b:4e:b3:52:56:4e:9f:e7:f4:
9f:d6:b6:82:e7:65:12:ef:01:d6:80:69:06:ea:da:
5b:6d:e3:c6:d5:dc:c9:2e:62:c5:d4:c3:ab:97:08:
ef:ce:1e:3e:08:85:f6:9c:0d:65:7a:55:eb:2c:55:
16:f4:c1:9a:1e:d9:16:f4:f8:37:5c:cf:41:5a:61:
d2:93:aa:e8:67:1f:f6:77:70:73:ef:e3:23:02:cd:
fe:7c:12:1c:89:fd:d9:8a:63:6e:f5:a9:22:1e:50:
4e:f7:25:0d:c4:15:f3:b7:47:99:2f:8f:3e:ac:99:
37:ff:7b:be:4e:cd:00:eb:4e:46:6e:8a:2d:ad:6f:
d6:f7:a2:de:e5:76:6a:e1:56:43:02:d7:ec:3e:88:
d4:d6:1f:b9:f0:73:94:f9:dd:0b:42:13:ac:50:f6:
d4:c6:46:c0:db:56:96:8a:ed:8d:54:1c:bb:e4:66:
f8:92:1f:fa:54:e8:69:ac:3a:45:e9:37:92:e5:6b:
58:a1:9d:95:7c:29:1e:31:3e:4e:3a:e3:62:f6:1e:
90:2f:b3:97:0c:23:cd:54:46:e8:7f:ed:32:7f:d2:
6d:79:65:15:04:0d:7d:d7:fa:c3:6d:8e:ff:9f:ad:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:53:82:D6:5F:DC:D1:58:CC:07:E8:7F:AB:12:EA:21:01:2F:70
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:38:ac:18:ff:2c:6c:2f:7d:90:27:81:93:58:29:45:bf:
77:c4:12:c8:d2:5d:00:aa:67:01:d6:5f:ed:58:61:7c:1b:8d:
7f:4d:35:df:d4:cb:30:f2:82:9f:2f:6c:e5:87:ac:0c:7f:d6:
b9:7c:bd:2f:74:b5:ab:25:c2:50:58:a8:ca:40:bf:7e:0c:d6:
ba:42:c4:d6:30:75:b9:7d:6b:cc:c4:5e:6e:48:c7:f1:8e:b8:
2f:6f:ca:92:c4:3b:79:e0:06:f1:1d:6e:f6:42:eb:f1:f1:b0:
a1:ac:cc:d4:2d:a5:db:6a:bb:d9:0a:66:0b:de:b2:c0:71:6d:
fb:2b:8a:97:40:58:fd:5e:ad:8b:86:fc:c2:71:d2:24:61:ff:
f2:ad:5f:35:ab:fa:10:f5:26:18:37:c9:e0:af:2c:f0:a8:8f:
ef:14:f2:12:05:dd:04:94:93:9b:45:94:79:f7:67:b2:0b:04:
d4:23:c8:80:aa:52:e3:2e:4b:44:b5:39:1f:77:e7:8a:a1:de:
fc:92:5f:ea:60:52:61:9f:54:dd:9b:ef:62:c1:ed:f2:8a:32:
88:c6:57:e8:03:aa:77:e1:2f:16:eb:6a:c0:b1:39:d8:5f:9b:
57:e0:cb:e0:1f:bf:60:2f:41:8c:fb:4e:66:ab:ce:2c:39:0f:
e3:71:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net