
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: l5kTh9ZgiMciSaVBVMD4cxf7wGUaiOZoDzLVum+WZxI=
Subject key identifier: 80:90:B1:21:CB:85:38:94:53:8F:1B:E8:9B:C3:21:F0:64:2B:54:44
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01962F3D689822E0121F31C8F602DAE89325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 14C2
Signing time: Sun 13 Apr 2025 13:01:15 +0000
Manifest this update: Sun 13 Apr 2025 13:01:15 +0000
Manifest next update: Mon 14 Apr 2025 13:01:15 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: BPozkvPdOmn3kBcvLkVy7RL0fmCxSLwLwUn0zYbF0r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:68:98:22:e0:12:1f:31:c8:f6:02:da:e8:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Apr 13 13:01:15 2025 GMT
Not After : Apr 14 13:01:15 2025 GMT
Subject: CN=8090b121cb853894538f1be89bc321f0642b5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:01:5d:29:92:4d:c1:17:3a:c9:e0:6f:14:
33:ba:32:f5:57:a1:a3:6f:72:d6:fd:09:f9:26:3c:
bb:32:10:58:29:2d:2a:db:d0:10:2f:84:52:7f:f9:
93:26:27:82:13:fa:65:6a:f5:55:9a:1e:dc:a8:81:
39:ae:5b:d4:e7:f2:22:ee:55:6d:3e:c9:f2:87:e8:
3c:f0:40:70:46:fb:cd:c6:41:41:0c:76:65:cb:2e:
40:74:f5:7b:dc:30:5b:a7:f0:98:4a:88:dd:cb:74:
f0:92:97:dc:e8:23:a9:6f:69:a4:1a:d1:2a:9a:f0:
80:91:57:42:89:60:7b:f1:58:6b:c5:5d:af:2a:dc:
8b:09:0a:84:fd:d1:65:e1:11:38:94:3a:16:42:71:
ad:0e:78:9f:79:65:6f:3f:82:6f:16:05:f2:6c:87:
a2:09:78:4e:b1:1a:28:d0:ae:04:7e:5c:2a:a2:92:
2d:ac:c5:a1:69:d6:2b:2c:42:4a:6c:d2:20:03:d2:
04:20:b1:66:37:5a:be:19:8a:c8:ce:1c:41:b2:a8:
48:e8:98:38:4a:7d:ea:29:78:85:c4:91:9f:d2:50:
97:c6:77:b9:3f:97:df:92:87:ea:c6:af:96:cf:bd:
f9:92:24:2d:b8:f9:d6:1e:30:20:df:9a:e8:64:f7:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:B1:21:CB:85:38:94:53:8F:1B:E8:9B:C3:21:F0:64:2B:54:44
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8c:c8:de:1f:5f:b6:01:a0:4a:18:99:d9:bc:fa:54:5a:9c:
a9:24:c0:63:24:47:f3:24:6b:ca:3f:fd:9b:ec:0d:dd:99:d4:
cd:dd:6c:6d:cd:dc:5a:f5:98:1b:db:8d:f2:07:00:f6:0f:58:
a0:c3:16:16:0d:6b:df:fc:67:f2:2b:be:3b:5d:06:2d:73:c0:
8e:cc:e5:fe:30:e0:21:d5:ab:22:92:43:07:86:62:fe:74:1b:
b0:9c:24:06:b4:81:66:43:0b:57:1b:92:41:32:61:00:7c:3f:
07:65:0f:f9:81:39:20:05:7b:45:45:5b:db:7a:72:7a:35:cf:
9c:82:cf:c5:70:09:c5:35:2c:f7:6d:e8:96:da:29:fd:b4:7f:
8f:ea:8a:68:4f:b1:f7:f7:69:d8:08:76:40:5d:0a:15:a3:27:
24:5c:0a:da:31:55:fb:b1:fc:50:94:e9:f9:f9:e6:38:87:46:
73:40:f6:d2:26:69:9f:b8:ed:2d:cf:a9:58:b6:d9:89:77:b7:
47:06:ad:14:e6:13:66:b3:8d:92:b0:2e:7b:45:11:e1:f8:99:
7d:00:16:b3:55:b6:7a:19:15:a6:97:5c:8d:fa:48:3c:d0:b5:
0b:52:21:ea:8b:44:23:67:e2:e6:44:fa:20:5f:b2:c1:b6:c6:
8c:ac:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net