Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: DUfrhlF2Tm9NNLQ3ca5tHPX7MLBtgG9v4EET4kfC9NY=
Subject key identifier: A5:64:AF:52:22:E9:F7:66:5A:8E:7F:2F:49:B8:26:F8:3B:D5:0B:F0
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 01962E2B35BE661B25E7A4DAE8D0E818449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 024E
Signing time: Sun 13 Apr 2025 08:01:45 +0000
Manifest this update: Sun 13 Apr 2025 08:01:45 +0000
Manifest next update: Mon 14 Apr 2025 08:01:45 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: a0JFXpD8WKfIE89x/hmEm+/hrE3CwpXMYxC90rlEVRk=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:35:be:66:1b:25:e7:a4:da:e8:d0:e8:18:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Apr 13 08:01:45 2025 GMT
Not After : Apr 14 08:01:45 2025 GMT
Subject: CN=a564af5222e9f7665a8e7f2f49b826f83bd50bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:fd:c2:44:eb:1b:30:f7:a4:d8:b7:47:da:
48:14:80:47:21:89:b9:6f:17:ac:fa:43:79:8f:fb:
5d:41:f1:43:aa:a0:0a:a1:41:f8:00:cd:9d:16:94:
2d:8e:86:e4:b5:c4:b8:1a:52:bb:70:15:04:4c:9a:
48:d8:3b:28:27:94:8b:60:10:a9:fd:0f:80:3f:10:
7a:7e:3f:eb:83:96:d2:a3:24:da:18:b0:fe:80:f7:
75:b8:c8:f9:ae:bd:f3:2a:5f:5a:14:31:4c:5a:e8:
20:0a:14:6a:98:68:19:d1:a4:fb:7f:42:b9:5f:ba:
19:9e:9e:d0:dc:09:e8:10:99:50:d1:d2:aa:55:bc:
52:f5:d5:36:78:98:f4:a9:90:b5:73:8c:d1:5a:7a:
fe:6c:8d:1a:52:e9:39:75:d8:3f:2f:05:d4:9a:ab:
90:ae:21:4a:06:4b:46:2c:00:f1:aa:04:ab:e5:27:
cf:95:b1:fc:d5:02:ed:b1:27:d8:25:f8:38:ff:17:
b8:23:9e:cf:66:44:e5:d2:28:d0:51:d5:e9:0f:0c:
cb:cd:92:19:f1:56:28:ad:e4:f1:93:13:50:06:64:
96:2b:70:96:6b:22:ed:10:12:88:81:a9:70:74:2d:
6e:54:fa:7d:8d:36:3a:44:86:b3:1d:fb:c4:c6:f4:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:64:AF:52:22:E9:F7:66:5A:8E:7F:2F:49:B8:26:F8:3B:D5:0B:F0
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:0a:13:ef:b7:a4:2d:9e:94:a3:88:46:40:b0:f3:13:6a:
91:82:72:8e:2e:57:51:94:58:f3:d6:03:e7:c7:2d:7c:b5:d1:
1e:f1:09:be:c3:ef:ff:fd:36:03:d4:d4:6a:f4:77:a0:34:51:
63:5f:e5:aa:d9:6b:ce:06:a1:6d:b5:3d:53:fe:c2:78:78:1a:
33:55:27:0f:f7:cd:2a:21:45:7f:aa:8f:55:7d:a8:32:8b:d0:
3a:e9:8b:25:b1:08:c0:e9:40:f5:b1:3d:8b:3f:8a:d1:d2:a6:
08:ae:9d:aa:9f:3c:6d:80:63:16:d2:b6:7d:aa:e7:45:9a:71:
ce:57:87:da:06:c8:f1:23:67:85:23:20:58:61:d1:a2:ba:2c:
ed:95:52:46:3c:fd:a5:e4:24:5d:72:f7:9b:9d:cc:d8:76:f3:
8d:68:f0:d5:57:ce:19:e7:20:ba:7e:03:46:be:7d:aa:1d:f0:
3b:5a:22:eb:6b:c9:d8:8f:a1:15:57:dd:c0:43:7e:63:8a:74:
73:51:fd:37:cb:79:89:cc:9a:e4:31:dd:28:35:95:e2:ef:9a:
03:fc:c4:93:82:46:dd:d0:db:7b:db:e8:1c:43:31:e6:6a:42:
42:00:9b:28:2f:bd:6a:65:a8:e4:49:fe:da:75:cf:cc:40:ba:
48:53:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net