Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: aZoi0gkeTfXnsxZtkbAOwAv883Rmvy7Vww4BG1KhQSA=
Subject key identifier: 99:F4:5D:B4:E2:FD:B4:1A:51:FA:D3:19:79:9E:18:B5:A5:16:A6:F0
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01962ECF715D02946CFAAC9BF214053FDA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 120D
Signing time: Sun 13 Apr 2025 11:01:09 +0000
Manifest this update: Sun 13 Apr 2025 11:01:09 +0000
Manifest next update: Mon 14 Apr 2025 11:01:09 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: HnF5ysUiWn0loUasJGSPPrBJZSLq4I59zRBuCKQnk+U=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:71:5d:02:94:6c:fa:ac:9b:f2:14:05:3f:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Apr 13 11:01:09 2025 GMT
Not After : Apr 14 11:01:09 2025 GMT
Subject: CN=99f45db4e2fdb41a51fad319799e18b5a516a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:c3:31:77:4a:bc:18:82:7b:d5:fa:66:13:
14:ed:9f:4a:8d:7f:1f:9e:fd:b5:17:bb:bb:86:88:
1f:d9:ce:be:7d:74:f9:2e:bf:e3:ff:b4:23:0f:40:
f9:07:ba:47:da:5e:e3:13:31:64:e9:ca:2f:8e:58:
91:1c:78:4a:94:c5:a5:84:02:3a:73:66:06:04:ae:
04:cd:91:83:95:41:69:cc:a7:a6:e4:eb:d3:e0:f9:
e8:db:f6:41:02:dc:29:1e:e7:84:b2:2b:74:d6:d8:
14:1e:03:f4:b2:d1:aa:5f:99:a2:27:4f:4a:f5:fe:
9e:70:86:9f:79:0b:4b:5d:71:4f:da:58:d1:1e:76:
65:3e:e8:67:f1:01:2e:22:70:1f:c7:f4:cd:f0:1f:
77:74:7d:6a:b7:94:fb:94:93:c3:f0:44:04:af:f3:
4d:cc:09:7e:d8:af:b4:40:81:d8:6d:ce:42:04:7d:
3a:d2:88:23:00:93:2f:af:ea:60:69:39:57:51:2e:
90:90:47:2e:01:af:81:40:75:53:1f:c4:7b:52:a4:
35:ab:f3:43:6c:fd:d5:dc:c8:2a:da:b8:c2:ff:c1:
34:ae:0b:99:8d:98:30:5a:ca:04:b4:89:14:91:5f:
4f:b7:04:93:ce:59:8c:8a:0a:14:77:2c:8a:78:78:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:5D:B4:E2:FD:B4:1A:51:FA:D3:19:79:9E:18:B5:A5:16:A6:F0
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:77:5d:19:c9:66:b5:24:06:97:e9:31:dd:10:5b:ae:93:
91:6b:b7:d1:5d:a4:22:54:2e:5c:16:72:ce:87:6b:c4:cc:60:
4d:29:75:b7:50:55:86:c0:fc:f6:00:91:f2:76:d1:14:03:ec:
84:88:66:8d:5e:fa:f4:43:15:0f:a7:48:5a:01:bf:55:96:85:
8c:ac:c4:f6:87:ac:5b:01:e5:a7:08:13:6e:2b:2c:4b:fa:06:
51:be:a8:ae:20:cb:fc:3b:ac:f0:0f:5c:08:e9:aa:96:63:73:
57:14:97:ef:1c:57:4c:74:5d:eb:16:a2:96:ea:7e:76:1a:d3:
d2:75:af:0e:49:56:84:1f:dc:f0:af:a4:7d:43:6d:b7:38:c7:
3e:24:e8:d4:6a:e8:be:d5:b8:e1:79:a6:70:5f:61:b9:66:3d:
49:15:64:49:48:c2:17:13:78:5b:a8:51:0d:b4:ed:e0:cf:f6:
6b:f4:f4:47:3f:a9:d8:b7:5d:af:2f:de:c1:99:d8:d3:83:53:
a2:1a:3f:27:67:f2:f9:15:18:9b:ac:ee:f1:c1:95:67:bc:f1:
d7:3a:46:7a:f9:94:f6:ba:f9:1b:27:a7:ad:df:4b:a5:65:0c:
f0:41:9c:71:3e:be:08:d3:76:0d:da:a3:e1:43:f8:42:c4:b7:
fa:b6:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net