Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
File: kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft (raw, json)
Hash identifier: FbkDLP0/PoYQd1RMOLLTMZJtBw8Se+evfwmLoxHZUy8=
Subject key identifier: 20:04:99:61:DF:59:1D:7E:EE:70:42:74:C3:57:C8:82:66:BE:E0:D3
Authority key identifier: 92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
Certificate issuer: /CN=92680145cfb2371ecf4c364726b64708572c4223
Certificate serial: 01962F3D375432DBA3DDBBC6FA089DF88E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
Manifest number: 08F8
Signing time: Sun 13 Apr 2025 13:01:03 +0000
Manifest this update: Sun 13 Apr 2025 13:01:03 +0000
Manifest next update: Mon 14 Apr 2025 13:01:03 +0000
Files and hashes: 1: Q4eb_NSVD1Iy6yzBzsYZdGRXZqY.roa (hash: ZnYNRkpn3lYvlFcVLCOCLjxdS7Ti3DktlWPMIiudM+0=)
2: kmgBRc-yNx7PTDZHJrZHCFcsQiM.crl (hash: /oTr3ZuYBKFe1vCWm8BtKlOJ2EAvxqk9Wq1GLfHfhwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:37:54:32:db:a3:dd:bb:c6:fa:08:9d:f8:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92680145cfb2371ecf4c364726b64708572c4223
Validity
Not Before: Apr 13 13:01:03 2025 GMT
Not After : Apr 14 13:01:03 2025 GMT
Subject: CN=20049961df591d7eee704274c357c88266bee0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:d8:c3:87:90:72:e4:d9:85:87:54:27:2d:
9b:0a:fa:8a:ab:0e:39:ca:87:f3:14:fc:b0:dd:11:
30:c7:4a:14:09:87:09:24:5e:d0:41:e6:30:94:4a:
48:e8:cc:8a:4b:49:0f:06:16:33:1e:15:dd:2f:8f:
d1:d2:a8:a3:98:d2:2d:79:e4:c7:8a:1b:80:f4:d9:
aa:2c:a7:03:97:2a:dc:60:b5:84:df:6c:f3:f7:9b:
75:21:e9:88:30:6e:93:8d:a0:fe:0e:27:8c:df:2e:
b0:bc:7c:85:5a:71:c8:4b:ac:71:78:ac:98:7c:f8:
14:72:cf:a5:05:ee:10:61:9e:70:dc:19:4c:67:95:
27:66:10:94:6b:70:4d:df:57:53:75:19:a9:da:5c:
29:ac:34:bb:6d:e8:87:bc:31:2d:f9:7a:4f:78:c8:
c8:3e:07:2e:6c:70:fc:32:6f:a8:19:d4:2a:e0:29:
67:dd:14:4f:e4:67:aa:cd:3c:ab:3a:22:72:06:21:
b3:68:20:ae:91:6f:88:a3:65:48:46:3a:13:b7:df:
cc:a7:85:ac:de:e3:99:73:61:e9:1d:cc:b3:c4:b0:
4d:d5:96:e7:8c:7b:13:4f:3b:88:e3:58:26:3e:fd:
5a:3b:80:23:be:20:21:66:20:f9:41:7b:ac:a3:d8:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:99:61:DF:59:1D:7E:EE:70:42:74:C3:57:C8:82:66:BE:E0:D3
X509v3 Authority Key Identifier:
keyid:92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:ee:2c:a8:4c:66:cf:a8:2f:5d:a2:90:4a:73:35:c2:d3:
56:47:e7:d1:74:86:df:02:ac:fe:d5:4e:25:02:5c:18:d3:be:
0b:f9:44:c5:7c:ff:41:35:4e:2d:8b:a1:5b:ff:95:56:23:bf:
0b:4a:f9:6b:20:e4:54:17:87:13:69:69:59:0d:ad:00:be:54:
db:42:9a:27:1e:af:92:ba:20:c3:5a:0f:78:59:b7:e0:0f:ee:
0f:fb:c4:71:40:e5:f1:5d:25:67:31:62:a8:4d:88:d0:48:75:
f7:f7:35:4c:1d:b3:f9:f8:30:f2:ff:0f:13:45:f9:45:78:e4:
6d:d9:3d:24:af:cf:f6:c8:98:16:9c:12:3e:64:cc:b1:84:44:
d0:80:e7:a7:87:91:bc:74:00:a8:e4:1d:3e:04:8a:f9:8e:aa:
e3:d2:94:20:77:fa:84:f1:d4:2f:78:f8:45:43:d2:69:7b:18:
27:df:7b:b7:02:38:8e:dc:c5:70:ff:07:ff:d2:be:6e:9e:a3:
c8:a4:01:f0:d2:63:02:87:fb:20:41:c4:bd:df:d7:db:a0:a6:
05:da:65:fa:52:71:b4:ac:45:2c:f3:3b:45:c2:f7:23:7f:58:
e8:a1:cf:9b:63:fe:52:45:14:7b:c3:11:de:c2:25:5f:c9:69:
5d:ae:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net