Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: XgXIVtq4nwVImtzQXxUDLAIA7dxN73RefIpr+zhUEIo=
Subject key identifier: BD:99:4E:4E:D9:9E:1C:9D:7C:B7:B0:48:CB:E5:A4:7E:29:0C:73:3F
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 01962F748C17EF8DAA4960C9880B38DE6C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0A36
Signing time: Sun 13 Apr 2025 14:01:29 +0000
Manifest this update: Sun 13 Apr 2025 14:01:29 +0000
Manifest next update: Mon 14 Apr 2025 14:01:29 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: D4mxma8wP5SqiUF3euNCqmxRZ0akcrY6r/jrHPn0a1U=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:8c:17:ef:8d:aa:49:60:c9:88:0b:38:de:6c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Apr 13 14:01:29 2025 GMT
Not After : Apr 14 14:01:29 2025 GMT
Subject: CN=bd994e4ed99e1c9d7cb7b048cbe5a47e290c733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:cf:5a:2c:db:4e:9a:4a:d5:5e:be:9b:22:
10:94:98:9a:ad:ff:8d:59:25:4f:75:26:61:fd:b1:
57:67:09:58:28:b9:19:1a:09:62:10:66:dd:4d:0d:
e2:e0:bf:a9:77:34:12:97:dd:f3:76:5a:d0:05:d0:
a9:bb:05:ad:ef:55:d5:30:e0:d6:27:dd:29:70:f0:
3c:e3:2d:6c:02:85:7c:61:e6:be:be:45:0d:42:f9:
67:91:04:8d:81:76:1b:48:47:55:49:0a:51:a6:af:
a3:fe:c7:7f:57:d6:35:33:ed:9c:3f:67:cd:7d:6f:
49:8c:0d:a1:76:02:14:69:4d:15:47:7d:bf:a6:29:
65:1a:23:cc:52:6d:86:87:7e:6c:08:c9:98:fc:80:
e4:71:c4:a1:9f:f6:85:35:1c:7a:8e:4c:ec:a1:fa:
27:42:b2:1c:06:ff:0f:e6:04:15:c2:cc:09:ad:bb:
b7:6c:99:96:12:ea:89:c0:3d:29:c1:bb:f2:13:7b:
24:f3:c4:9b:6b:ee:af:83:db:fc:28:71:ae:9a:73:
f9:e5:e2:57:e7:8d:17:55:04:a1:03:46:60:ca:69:
3d:76:5b:bd:42:66:51:98:1e:15:6e:6d:54:f4:8b:
7e:fd:cc:a2:55:c7:95:2f:7d:56:52:69:25:86:f0:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:4E:4E:D9:9E:1C:9D:7C:B7:B0:48:CB:E5:A4:7E:29:0C:73:3F
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:c1:47:d5:d6:e8:d8:a3:12:31:11:a8:d8:d4:83:bb:be:
f5:0b:9d:6b:75:7f:49:c3:d8:ad:90:c3:17:00:36:c5:f8:92:
91:64:26:53:30:7e:b4:76:05:12:5b:87:93:06:2e:a0:52:f0:
9b:07:0a:62:f2:fa:cc:30:50:cd:bd:6f:8a:0c:3b:2c:3a:a1:
d4:d2:a1:40:28:e2:04:18:6e:3c:4e:5a:55:9f:0c:71:51:4a:
34:a3:a0:26:02:d4:56:a1:05:5e:92:5e:58:b5:ee:63:3c:ae:
a7:6b:54:97:b0:3f:4a:04:b7:5b:55:90:cb:7c:64:8b:87:84:
08:cf:e9:15:b4:4c:92:77:a7:7c:fa:91:29:4f:c6:f0:f1:06:
ae:36:ec:20:12:09:01:e2:07:20:2b:6a:6a:20:61:13:90:40:
cc:82:63:0d:12:5c:9f:f3:30:1e:0b:2d:43:3c:a8:24:e3:50:
ae:16:85:52:70:76:95:e5:87:54:28:76:77:db:0c:ff:e2:f9:
30:07:9f:34:1f:bf:86:31:1a:63:90:c5:35:c8:fe:16:4b:40:
7f:f3:1e:4c:27:45:85:60:b5:7a:c4:2a:ed:08:c5:97:b5:27:
c9:92:9b:fa:92:c3:4e:46:c0:d9:8c:21:ad:e8:46:89:e2:d2:
04:99:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net