Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: VbSFnOTULQ71ekXBrpf9wO8T2j8WhxXJcQQXNU1KAGs=
Subject key identifier: CA:36:55:0E:79:D9:5E:B5:78:2F:E5:77:2B:D5:34:5E:45:D3:1D:38
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 01962E9953C1926A86C350C8686DA0D8721C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 040D
Signing time: Sun 13 Apr 2025 10:02:02 +0000
Manifest this update: Sun 13 Apr 2025 10:02:02 +0000
Manifest next update: Mon 14 Apr 2025 10:02:02 +0000
Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=)
2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: QnRZUGdxL5eSYaGcqUJ+6zJk0cEWk8L+rlEW5B0dbAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:53:c1:92:6a:86:c3:50:c8:68:6d:a0:d8:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Apr 13 10:02:02 2025 GMT
Not After : Apr 14 10:02:02 2025 GMT
Subject: CN=ca36550e79d95eb5782fe5772bd5345e45d31d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:d1:23:02:13:23:86:4e:bd:ca:4b:9f:b5:
45:8a:f9:22:17:f3:b0:b1:0b:79:b1:61:26:3f:91:
8c:86:ba:78:22:f6:50:bb:27:f1:02:de:66:29:85:
82:39:ee:00:27:72:0a:76:0e:7f:3f:2b:d3:71:c4:
56:4b:87:cc:71:8d:55:58:44:2d:c2:59:b2:e5:51:
31:0c:f4:13:4e:94:0b:9d:74:81:eb:e3:a3:4f:fd:
f8:80:8a:dd:e9:b0:b3:45:46:e8:27:dc:45:fc:53:
ff:97:de:cc:85:5c:94:f0:58:75:bf:14:9a:01:b2:
90:05:40:6d:e8:8c:05:05:b0:2b:c5:b4:7f:2f:49:
92:30:af:f8:30:8b:59:11:98:dd:4a:b9:55:56:e0:
fe:94:11:ae:5d:d9:fe:0c:35:3e:8e:98:0f:bb:d0:
bd:55:8a:72:e8:66:8c:c5:b9:e7:a3:d5:b3:f9:00:
41:08:bf:21:c4:ac:e5:d5:3c:a6:41:6a:66:e9:d8:
34:93:a9:87:54:4c:44:dc:eb:00:de:93:9b:7c:48:
ec:20:7b:f2:fd:bf:83:24:eb:a7:9a:b2:da:59:af:
9e:c9:22:ce:25:bd:56:c4:29:1d:9e:b8:55:98:a9:
6a:14:9c:54:a2:5c:9f:ad:74:13:11:dd:7b:ef:be:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:55:0E:79:D9:5E:B5:78:2F:E5:77:2B:D5:34:5E:45:D3:1D:38
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:9b:01:f1:26:63:41:5a:c1:ab:bc:17:d9:ef:d0:8f:8a:
95:4f:17:49:65:c5:4d:9a:f3:72:05:7c:78:63:52:18:01:e9:
97:ea:de:28:94:c1:41:3b:3e:d4:db:b3:b2:ef:ae:0d:fd:d0:
8f:70:31:29:09:c5:6e:74:96:d3:96:26:da:d6:2d:ab:36:dd:
bb:ca:66:f8:10:10:2b:8d:fa:03:7d:42:81:48:bf:86:ee:c8:
7e:89:49:ff:6e:e3:8d:63:20:7a:5e:a3:a2:b5:b5:bd:d6:a3:
71:04:da:00:17:7f:80:e7:25:af:ea:17:ed:3b:cf:a3:a7:9a:
e1:d3:64:3b:92:a6:64:3a:45:71:b6:59:e6:fd:6e:9c:3b:e5:
97:51:ef:56:d5:3e:39:9c:90:32:0d:6b:fe:d2:8b:98:3a:29:
88:1c:a2:20:58:9d:42:fb:a0:b7:1e:46:26:2f:a0:c4:55:28:
e0:06:7f:47:53:e2:59:3f:8c:89:a3:8d:18:69:bc:09:18:b3:
0f:48:9f:a7:ee:ab:ef:cc:9e:ec:a0:fc:f3:91:eb:f6:b9:23:
5e:a5:eb:dc:d8:cd:4b:b1:67:9f:92:b5:33:61:ca:97:07:70:
72:94:c9:e4:51:0a:fe:a1:57:66:a9:87:ce:ef:d6:3a:0d:84:
e3:07:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net