Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: mrPX6NKqPG7SGUsEvSRpUD7RJtZLD3GquDVXVMXzwcE=
Subject key identifier: A4:E0:FD:19:49:F3:D4:AA:DE:FE:B7:43:A1:9C:D0:D2:EB:23:A9:30
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 01962F3DA9889F1BCCE5202080B109C98D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 08BC
Signing time: Sun 13 Apr 2025 13:01:32 +0000
Manifest this update: Sun 13 Apr 2025 13:01:32 +0000
Manifest next update: Mon 14 Apr 2025 13:01:32 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: m37GWO2w8S6U2jTWF1sJOC9x9HQ53XeRN3qHmaVR8bE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:a9:88:9f:1b:cc:e5:20:20:80:b1:09:c9:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Apr 13 13:01:32 2025 GMT
Not After : Apr 14 13:01:32 2025 GMT
Subject: CN=a4e0fd1949f3d4aadefeb743a19cd0d2eb23a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:92:82:61:a1:c1:03:36:6e:9d:eb:d1:f9:
0d:7c:48:37:d4:63:8b:e3:13:15:80:39:fd:00:d2:
8e:8f:74:71:49:77:c0:7d:cf:b5:51:dc:c8:0a:92:
10:05:5a:ec:7f:2f:b1:29:06:07:f4:4f:9e:dc:aa:
f7:07:71:89:30:11:70:00:ef:d9:e0:38:9f:24:e1:
0e:31:54:b7:8c:40:f5:b3:30:af:e8:2b:9e:ae:95:
ea:6f:a5:f2:f4:c8:82:bf:4d:c9:dd:74:4e:a8:67:
b9:d6:97:ba:8e:ba:a8:5a:ff:43:62:b1:40:49:52:
6a:59:2e:2b:ed:d6:47:b2:b8:2d:a1:96:e4:c9:d3:
a6:71:5b:4b:0a:21:0a:7a:ca:a4:3a:4a:71:56:ea:
e9:84:46:88:3c:a2:56:1e:7a:3b:8f:cc:28:be:4d:
cf:f3:49:33:c6:75:cd:f2:ff:83:1a:d7:31:b7:40:
08:59:f3:d5:f6:e0:bf:32:61:1b:7c:2a:74:04:ca:
4c:d5:5e:d8:88:b8:42:1f:8b:e7:d1:ed:ab:b5:63:
d9:91:b3:8c:0a:31:c1:5b:83:d0:a2:76:d5:95:4c:
a2:50:80:c7:18:98:70:d3:ab:f9:83:0e:94:40:53:
66:8f:59:c8:a9:0a:3b:39:e0:1f:ea:6c:a7:a4:c1:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:FD:19:49:F3:D4:AA:DE:FE:B7:43:A1:9C:D0:D2:EB:23:A9:30
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:d5:b3:91:92:32:8d:d0:4f:75:16:6a:35:49:f2:c9:74:
20:35:6c:92:e3:77:72:a0:68:6f:d0:c9:6f:36:e9:8b:5f:fb:
ed:41:b0:15:2d:2f:84:01:d1:bd:9c:28:fa:c5:d4:86:35:f2:
ba:25:bd:21:e5:88:b7:4b:81:09:d9:2d:af:fc:7e:d8:19:7c:
b8:72:c1:52:b8:7c:35:18:59:ab:60:f1:f1:b1:c0:ae:bf:65:
bf:45:4d:fc:0f:eb:e5:f5:53:93:9d:62:e3:4c:1b:64:d1:9c:
93:9f:21:fa:22:33:26:df:49:9b:f3:e7:30:86:3f:11:80:eb:
1d:96:b6:ec:ae:ec:79:28:b0:5b:ed:62:72:f6:92:fc:52:cd:
36:5f:f0:36:ec:05:d9:12:e3:d0:49:98:8a:90:77:d1:94:c0:
45:78:3e:67:10:19:64:a3:db:d2:c2:f3:f3:f0:e4:ed:6a:1d:
4c:d7:c7:3a:ce:4c:34:ef:79:33:63:d6:47:a1:3e:e6:19:26:
cf:c4:82:9f:6d:53:a5:59:14:e3:23:58:cd:4d:32:17:69:fd:
d9:b8:ba:4d:7c:10:fe:f4:b5:4a:75:d6:b1:fc:54:0f:99:48:
bc:b9:b4:af:de:fe:fe:bf:80:81:f5:bc:cf:d2:9f:44:0e:56:
8c:f3:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net