Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: lNBKDpIjqkSEEjMvnd6VN/UfUIJCQEW3EbY8qkfA/oI=
Subject key identifier: C2:F0:E4:5B:BF:A4:67:0E:1F:A7:EC:57:CC:64:D7:AD:63:50:6F:54
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 01962E986667E9F35D1BE511614A4B78ABBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 10:01:01 +0000
Manifest this update: Sun 13 Apr 2025 10:01:01 +0000
Manifest next update: Mon 14 Apr 2025 10:01:01 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: wZzDGt5/99wuRk+xWd7OsemDf9EyYL9rLllezhUz86E=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:66:67:e9:f3:5d:1b:e5:11:61:4a:4b:78:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Apr 13 10:01:01 2025 GMT
Not After : Apr 14 10:01:01 2025 GMT
Subject: CN=c2f0e45bbfa4670e1fa7ec57cc64d7ad63506f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:0e:9d:2d:e7:32:6a:4d:db:47:c2:b9:08:
90:6c:eb:08:21:2e:86:f0:fa:e9:41:2e:f8:1b:17:
ae:fe:97:6e:7c:0e:58:20:cb:75:58:77:01:b4:25:
d9:3d:13:b9:bd:bf:bb:56:82:b2:5e:36:66:74:c2:
7f:af:43:59:5c:0d:75:eb:e4:4b:82:10:bb:a2:da:
fa:12:9b:ff:67:51:4b:92:56:0a:4c:18:48:ef:c5:
d5:48:48:a3:de:b3:17:cf:67:61:6e:80:be:5d:32:
42:e2:71:f6:6e:5d:05:be:37:76:0a:05:9e:60:b7:
8d:c5:ee:4d:bb:36:62:8a:7a:8c:92:4b:db:79:51:
ed:4a:10:da:4d:9a:65:f4:20:34:b5:9e:46:cc:ac:
43:00:2f:ef:1f:be:ce:9e:4c:d6:5f:7c:52:9f:f4:
41:63:1e:a6:e6:0d:9a:5c:3e:e5:42:97:50:4c:3c:
9e:63:01:c9:d2:0c:c8:87:fc:37:3f:80:81:ed:97:
c3:aa:ba:e6:33:ca:e8:48:59:7e:7f:b9:70:8c:23:
71:30:42:92:8e:84:4f:54:10:6e:dc:52:35:68:db:
e6:cc:5c:bf:cd:23:f1:5f:16:16:d4:82:4e:60:12:
6a:32:a2:09:59:3b:e7:eb:ee:70:d4:b9:15:be:b0:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:E4:5B:BF:A4:67:0E:1F:A7:EC:57:CC:64:D7:AD:63:50:6F:54
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:89:fc:68:4e:80:18:40:7d:41:7f:16:1e:89:1e:d3:6e:5a:
25:25:94:a8:91:80:8a:d3:8e:31:aa:27:b3:db:9b:70:d9:95:
00:36:e2:96:0a:ee:ac:36:f0:91:06:60:88:ec:f4:f6:de:60:
ae:64:c2:dd:c0:78:4c:4e:2e:b6:bc:25:15:a7:cd:82:74:e0:
b3:1c:30:1d:fd:0b:83:a3:29:e0:e1:e4:f9:42:d6:f0:6e:ef:
c1:77:f4:e7:75:0b:5e:7b:95:55:8f:19:1d:bd:2c:f0:f6:a1:
64:13:93:18:53:53:96:77:fd:0d:3a:63:85:e4:1c:5d:db:54:
79:49:86:63:96:44:b5:e9:bf:12:43:06:9a:d7:c0:66:36:5e:
b8:3b:81:78:0d:0f:c9:e0:45:9c:06:57:4b:d8:9a:c6:b8:72:
d7:86:90:42:cb:0b:6a:df:e0:a3:02:54:14:4b:e3:e8:b0:22:
02:b4:73:af:77:38:1f:b8:fd:96:91:cf:72:de:a8:d3:2d:72:
b0:15:bb:f6:ca:d2:0b:35:23:c4:43:99:7d:d8:72:e3:eb:35:
80:94:bc:31:57:74:49:37:04:eb:09:2a:27:70:5f:7e:f6:5b:
59:9b:b1:c6:6d:ca:0d:39:f2:92:db:48:ac:01:48:38:15:80:
81:65:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net