Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: 4drQ+EAuTV6G2ADWwG6zNRmCv/xZs2plFmmM05cdl4E=
Subject key identifier: 3E:4E:7E:6F:E4:23:72:95:5F:27:9F:D3:0D:C3:0D:B6:38:F9:1E:8C
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 01962FAB1CA1F880105ADA6C9B3C64C97553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 12D1
Signing time: Sun 13 Apr 2025 15:01:05 +0000
Manifest this update: Sun 13 Apr 2025 15:01:05 +0000
Manifest next update: Mon 14 Apr 2025 15:01:05 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: Ln+XUT6ymCjflgbT1NSel3H/7PDJxD2s59h7dkfYoek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:1c:a1:f8:80:10:5a:da:6c:9b:3c:64:c9:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Apr 13 15:01:05 2025 GMT
Not After : Apr 14 15:01:05 2025 GMT
Subject: CN=3e4e7e6fe42372955f279fd30dc30db638f91e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:de:66:04:a2:ab:25:2f:d4:61:86:4e:07:
23:9d:42:5c:e6:6a:35:87:30:02:13:9d:74:2c:20:
da:4a:07:cc:ef:f3:70:2d:cc:dd:c8:c3:17:93:de:
01:9c:b9:a7:3c:28:e6:bd:2a:e7:45:fa:26:96:f0:
89:a9:e2:a2:4a:86:e9:69:90:f4:2b:3f:1e:54:ba:
10:b5:c3:1a:84:ee:79:79:45:8b:e2:59:ae:59:c4:
39:13:60:1b:41:05:68:18:87:ed:f7:3b:99:30:f7:
10:51:8c:2e:cd:4e:50:a0:d2:bb:c5:50:b5:24:10:
f0:4f:79:7a:e7:dd:02:f6:9c:99:bd:15:62:c0:97:
b4:f4:0e:f7:0f:52:d7:4f:29:33:00:b5:df:35:94:
0a:57:33:fe:13:c7:17:23:d8:bf:21:da:6f:c9:d8:
d7:2b:45:57:fe:b4:37:a1:15:b6:25:55:17:ed:1e:
04:a1:e0:51:0a:88:13:30:d6:cf:50:8e:12:1b:9e:
41:4b:67:eb:97:dd:98:22:56:f7:d2:2d:3a:a5:b7:
29:4b:f7:71:31:09:35:02:f0:07:c9:71:76:b9:58:
d8:c5:f1:87:99:24:36:da:be:20:10:ca:86:86:6f:
ce:d9:9e:ff:7b:38:69:09:64:06:2d:d5:ff:93:cc:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:7E:6F:E4:23:72:95:5F:27:9F:D3:0D:C3:0D:B6:38:F9:1E:8C
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:2b:b9:69:ef:a4:8f:c5:ba:23:50:29:d6:e5:94:83:c7:
70:de:13:57:79:86:50:dc:67:d4:5e:f4:d4:cf:cd:4a:63:5b:
e3:90:cd:c5:09:5e:1f:d6:45:ad:f0:7c:1e:37:29:85:35:d2:
3c:86:37:fa:b5:25:29:e7:fa:7c:0b:07:1d:0c:6e:14:c3:a0:
49:15:9f:9d:c3:d8:42:69:6a:67:2e:d7:e7:90:fd:55:65:3b:
57:36:d9:4b:3d:5f:1e:f9:88:64:69:0d:8b:ef:8a:9d:eb:7a:
4c:68:c8:fe:d0:ea:7a:66:fb:bd:2d:61:c2:5b:4d:88:e8:a2:
55:98:52:e8:7a:06:f9:6a:19:5a:a0:73:66:92:57:b7:02:b1:
78:1f:06:5e:03:e0:b2:4c:69:fb:de:f5:2a:4e:ba:51:6f:77:
be:1c:d3:17:85:f6:51:61:73:25:a1:8c:33:5d:96:9c:a0:9f:
a9:d2:8e:93:01:45:5d:af:db:60:44:07:05:b8:1b:75:55:9d:
95:32:80:10:4d:65:ac:6a:e2:19:69:b7:22:ce:7f:96:1d:87:
29:33:cb:eb:57:d1:ac:51:b6:98:3f:6c:02:27:18:6b:d6:eb:
ab:0e:9b:cd:17:6e:01:ab:8f:55:05:c0:66:e1:a4:37:ae:bc:
48:88:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net