Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: rrq/d+AvSGWWg9vQ7jnufRRYHO6Op+3ybLUOMVKIEWg=
Subject key identifier: D4:5E:85:E2:C8:0C:15:70:DD:C0:72:E7:79:98:20:34:AB:0E:E3:BE
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 01962FAB5F3F64B71A7E9F097A1876D1DC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 08F8
Signing time: Sun 13 Apr 2025 15:01:22 +0000
Manifest this update: Sun 13 Apr 2025 15:01:22 +0000
Manifest next update: Mon 14 Apr 2025 15:01:22 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: 6iJQO2Jx8mRGgUSBwlYQM9/5nceo047huY9BrExboUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:5f:3f:64:b7:1a:7e:9f:09:7a:18:76:d1:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Apr 13 15:01:22 2025 GMT
Not After : Apr 14 15:01:22 2025 GMT
Subject: CN=d45e85e2c80c1570ddc072e779982034ab0ee3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:1f:7b:d7:7e:43:2b:2f:07:16:03:03:c8:
92:b6:ff:98:14:fd:f1:6b:f9:e0:45:07:bc:ce:13:
e6:6e:51:9e:35:f3:9d:b7:33:96:2b:26:6c:99:f3:
c1:96:48:c6:1b:31:4e:8b:27:8b:43:e1:27:97:21:
bd:28:b9:41:56:88:54:3e:9c:8d:2c:8e:3c:05:57:
b6:e3:41:76:98:ce:e0:10:7e:c0:61:d7:11:35:2b:
cb:7f:66:53:fb:b4:27:3c:4c:e2:63:82:ab:dd:38:
45:c2:6d:18:35:07:fd:05:e7:92:9e:4a:b8:8f:16:
20:9e:88:b9:b4:25:62:26:0a:c2:f9:d6:30:09:6e:
84:69:77:b7:87:a1:e3:fb:e8:6e:40:c8:4c:4d:37:
e0:a6:76:2b:55:2e:d9:de:3e:5e:71:f3:5d:b0:bb:
f9:31:e6:48:01:de:05:bc:62:8c:2f:df:18:67:35:
84:6f:e9:59:08:bf:b1:35:a2:87:7c:64:c6:10:57:
14:b8:1c:90:49:0d:ec:12:ee:b6:f2:91:a8:65:73:
64:62:66:07:4e:30:29:fc:d9:e3:1d:1e:9b:60:24:
2c:54:d1:74:8f:55:0a:f4:5d:b8:47:69:13:20:36:
20:ed:7f:f9:a0:cc:9a:33:90:1a:1f:e1:91:bc:cf:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:85:E2:C8:0C:15:70:DD:C0:72:E7:79:98:20:34:AB:0E:E3:BE
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:96:82:95:15:5c:f6:d9:63:6f:95:4c:ee:cd:79:19:16:5c:
02:d5:17:6c:e1:59:fd:de:40:c1:00:cc:bb:c7:3d:9d:8d:1b:
3a:a4:cf:25:4f:24:16:dd:f3:83:f2:87:70:76:d7:b4:a1:93:
d7:b8:f8:47:e5:8d:e8:9a:26:11:af:38:ba:0b:5d:f6:c7:56:
29:bc:dc:81:c7:8f:af:70:9e:e3:89:28:16:91:84:80:d9:7d:
c9:a3:0e:a4:08:2c:9b:28:d3:6f:ef:40:97:b4:64:14:76:60:
05:f7:68:04:85:83:fb:57:38:50:6e:44:a3:d9:f4:44:e9:da:
09:de:ce:fc:bb:1d:ce:f6:a4:94:a4:c7:a3:47:0c:e2:f8:1b:
54:dc:f1:7a:7b:98:f9:9f:9e:b0:80:92:ee:2c:8b:1f:91:77:
79:b5:00:ca:95:89:99:d3:f5:c6:29:ae:f9:21:47:4d:8d:ef:
00:da:d6:eb:4f:5d:b0:45:e8:66:7b:a6:f6:eb:88:76:58:eb:
36:83:3c:03:59:85:81:88:28:27:bc:d5:f6:a5:37:8b:be:00:
c3:2c:83:f0:fb:cb:90:e9:48:bd:43:40:a5:c2:32:f6:16:ac:
90:3c:42:91:fa:40:a2:e2:34:bb:bf:df:23:99:18:99:46:73:
18:6c:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net