Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: RJCFKqKYPWsLSxwG1Ugw0Pw7USvpq1WtwQ/Cq87hm74=
Subject key identifier: 39:3C:97:BC:0E:D2:17:C8:AF:40:3A:F4:74:66:61:1A:69:A6:26:AD
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 01962F74B00F150584E4AD59224C18ACEB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 14:01:38 +0000
Manifest this update: Sun 13 Apr 2025 14:01:38 +0000
Manifest next update: Mon 14 Apr 2025 14:01:38 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: e7C4OmygRUoBtD/9AvCXVQCoSs2RkB+GFnk2nEVTX+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:b0:0f:15:05:84:e4:ad:59:22:4c:18:ac:eb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Apr 13 14:01:38 2025 GMT
Not After : Apr 14 14:01:38 2025 GMT
Subject: CN=393c97bc0ed217c8af403af47466611a69a626ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:91:23:73:a6:f6:55:0b:84:20:c4:69:3a:
f7:4b:d0:01:94:8b:36:12:ee:9a:08:d6:95:95:fb:
85:af:5e:ad:37:19:87:b1:b1:68:15:19:dd:22:ed:
6a:99:5b:5f:59:4c:c0:6a:a7:b1:44:8a:1c:08:05:
ec:9d:85:87:2d:6e:5c:97:c1:a9:6a:71:29:c7:a5:
54:00:1e:e3:ef:90:30:85:e0:24:b0:2a:4e:15:b6:
6f:94:86:fd:ca:4b:c5:6f:04:a7:c4:b7:ee:37:ef:
dd:7c:22:97:87:4c:7e:5d:ba:5a:49:63:99:c3:50:
97:5e:d7:c0:f8:47:b1:65:7c:04:52:62:95:60:33:
d8:74:8a:70:11:40:f3:c5:c5:7b:2a:a6:75:45:fc:
f2:60:5c:f3:9d:55:31:96:7b:c0:d6:53:a3:fb:55:
7c:4d:91:b6:43:7b:e0:24:cd:a7:18:2d:5e:25:51:
17:ef:2a:79:ca:01:75:e0:27:d5:5e:ab:62:ec:e5:
9c:a3:cf:93:0b:ba:d3:58:72:08:7e:30:40:bd:84:
4f:82:4d:61:eb:43:0a:56:58:1f:39:f2:43:df:81:
e0:b0:8c:08:27:16:5b:9e:8b:49:fc:4b:77:12:88:
9b:3b:3f:fc:83:9d:0a:88:70:b7:c3:5e:b8:76:ac:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:97:BC:0E:D2:17:C8:AF:40:3A:F4:74:66:61:1A:69:A6:26:AD
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:f5:21:e8:a4:eb:e2:b6:1a:b9:99:9e:eb:37:47:c9:32:
bb:de:a5:59:9a:65:57:92:10:38:05:f8:be:e7:d3:c2:b8:88:
1b:90:f4:37:fe:fa:09:c2:a9:05:b2:c9:f5:6e:69:c5:91:5d:
86:25:70:5b:19:89:ad:d8:77:93:26:da:ca:87:56:65:e6:93:
93:95:5c:09:dc:f2:7d:a2:bd:f6:20:2e:be:bc:f2:aa:fc:c6:
21:59:f2:fe:0d:2a:15:5c:cb:98:31:a0:a0:cc:17:6d:25:b1:
72:c1:2c:d8:f7:30:b3:26:7e:eb:fa:b4:48:6a:66:6f:aa:e8:
36:fc:a4:d5:cd:1d:9a:95:0e:2d:ff:f6:53:24:6f:9f:99:b8:
b0:25:67:66:a3:29:55:47:e0:1d:97:8f:ee:64:c1:5c:30:72:
d5:ef:e6:46:75:be:a1:66:c0:bd:1c:4b:a0:40:9b:30:38:8e:
9d:fb:47:bc:be:12:0d:9f:41:1f:63:18:4d:37:45:87:3f:59:
e6:4b:1d:b8:87:3d:5e:06:0d:e1:98:2e:bc:96:d4:0a:0f:79:
2c:1c:5a:f7:38:8b:79:20:f2:9a:e0:bc:24:55:4d:73:e3:0c:
1f:07:be:ba:02:ed:d4:9d:3f:e0:eb:ee:bd:51:30:75:12:3b:
1d:e1:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net