Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: lCJRRbZlvtUW+UMd/t4kUVg58DxeY2nP7KdZZ2LJ8mc=
Subject key identifier: 3B:55:22:DB:9B:DA:EB:44:EA:A1:0E:5D:3C:F5:49:4B:66:DF:05:F7
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01962F74BCDB192B4FEF13EAC2F4302C4879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0C9D
Signing time: Sun 13 Apr 2025 14:01:41 +0000
Manifest this update: Sun 13 Apr 2025 14:01:41 +0000
Manifest next update: Mon 14 Apr 2025 14:01:41 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: FXWZ1lu/qHGYgHm5/dBrmnjmXXMDLYle2yPxrxYJ+ZE=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:bc:db:19:2b:4f:ef:13:ea:c2:f4:30:2c:48:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Apr 13 14:01:41 2025 GMT
Not After : Apr 14 14:01:41 2025 GMT
Subject: CN=3b5522db9bdaeb44eaa10e5d3cf5494b66df05f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:1f:a9:f6:c8:37:73:8e:34:63:ae:27:3a:
f4:af:76:80:17:47:f6:c2:56:1a:5d:b5:12:2e:5b:
44:9c:67:28:3a:a0:7e:bb:8f:4e:b8:86:f8:ca:ea:
c6:83:5e:7f:6b:44:55:ce:1f:bf:87:e1:7e:8a:e6:
95:b7:06:1a:12:23:31:33:63:95:91:3f:60:fa:a7:
54:98:e9:40:0e:8c:df:1b:c7:1e:c9:12:c3:88:01:
9a:0e:61:7e:89:a0:2f:00:05:d3:c7:df:7d:47:d5:
41:23:3a:a3:85:dd:8d:42:5d:65:f2:2e:28:8a:4e:
18:a8:62:52:a6:e1:6e:ac:87:82:c3:df:4a:0a:00:
96:7b:4f:05:a6:85:56:57:8c:1a:29:70:80:0a:d5:
22:3d:48:95:92:e3:ba:c2:58:a2:32:94:63:cd:73:
e0:bb:31:fc:55:59:43:6a:fb:fa:60:46:bc:fc:f1:
94:67:9d:f5:de:c3:6a:4d:5e:34:90:20:bf:01:23:
8d:d6:67:e1:7c:86:63:4a:0f:ae:a7:31:6a:54:16:
6c:8d:4e:d8:5b:65:b9:74:52:46:cc:cc:68:26:2c:
bf:73:aa:48:a5:36:bc:68:ed:6a:6a:e9:57:bd:a9:
de:e7:70:af:27:22:a1:ce:c3:15:99:79:cc:96:2c:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:22:DB:9B:DA:EB:44:EA:A1:0E:5D:3C:F5:49:4B:66:DF:05:F7
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:1b:13:1f:b2:ab:c4:4b:7e:76:bf:61:7e:5c:e7:2d:57:
bc:9b:25:1e:87:62:53:8c:32:99:73:7c:98:94:7e:58:2c:c9:
61:06:bd:4d:87:60:8f:b5:7e:41:89:66:2e:bc:56:68:eb:ca:
68:e4:c0:db:e9:ed:b8:7b:da:97:c6:cf:fb:e8:d0:1d:4b:ac:
11:ac:4c:0f:13:b8:4e:fa:ef:7a:ab:2d:ca:e8:fe:d3:ae:80:
08:c5:73:06:4a:c3:18:5b:35:ad:32:8c:33:b3:4e:62:a7:69:
38:23:5a:98:c8:12:0f:ac:29:cc:c3:0e:8e:a4:81:f1:e1:97:
8d:05:11:a0:c5:68:b2:2e:54:e5:98:bb:b0:55:dc:83:b3:0a:
c9:f7:39:da:4b:a9:fa:37:77:cd:8d:9d:9b:33:55:f7:6d:d7:
2d:e6:7f:7c:8b:0c:d4:72:4e:68:e6:26:05:22:0b:e2:8f:0d:
7c:64:fc:bf:56:24:8e:3e:27:22:69:28:e1:32:52:55:d3:b0:
fd:3c:a8:26:96:4e:6a:66:5f:6e:23:51:75:8a:cf:c4:eb:55:
14:61:f3:69:bf:e8:47:04:50:79:b2:ce:af:af:4c:24:26:1c:
f0:f4:e4:51:58:d3:cd:d9:70:bd:1c:04:33:c4:8e:ec:4b:a2:
0c:a6:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net