Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
File: MRhnu6fuzPKwTBIquOws8ecvxeo.mft (raw, json)
Hash identifier: wBtX65Z38upUGOaGWPYhPWI3996HgXqJdQiwFxxpglE=
Subject key identifier: C9:E0:03:AA:15:98:41:2C:89:5E:C4:20:D2:FE:8D:30:60:95:FE:4E
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 0195EC818D73DACFC460CB01111712300E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
Manifest number: 0982
Signing time: Mon 31 Mar 2025 14:01:08 +0000
Manifest this update: Mon 31 Mar 2025 14:01:08 +0000
Manifest next update: Tue 01 Apr 2025 14:01:08 +0000
Files and hashes: 1: 9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa (hash: soTAduWcheeUJCzzhhLzacDsCRQw6shBkj/UDzhlxwg=)
2: MRhnu6fuzPKwTBIquOws8ecvxeo.crl (hash: 0oILMtBdRrtFEHGfakhIvgAB2cjEDvSqmfPI9GmX77k=)
3: Oweo7u97UcaDvU5cgvfnY2HVBiA.roa (hash: 9UVd3DPB1mzF9n8MAqzmlxVsZVW6nxguJq5SMTbJCP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:81:8d:73:da:cf:c4:60:cb:01:11:17:12:30:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Mar 31 14:01:08 2025 GMT
Not After : Apr 1 14:01:08 2025 GMT
Subject: CN=c9e003aa1598412c895ec420d2fe8d306095fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:98:30:4a:7e:81:1b:2f:14:10:a2:8d:d5:
ef:85:29:e5:29:aa:b5:7b:61:ac:1d:bf:dc:d0:f9:
57:a7:04:fc:f8:cd:16:b2:d1:6d:7d:3a:51:17:3c:
d2:f1:e8:2f:d2:41:37:db:43:26:e0:e7:49:de:c6:
c5:79:e1:2d:78:ef:01:69:84:0c:33:59:da:be:47:
65:ed:ca:e1:17:34:36:5f:40:6b:21:cc:64:ff:42:
08:7b:ac:c0:77:cb:52:8c:d7:ae:17:6f:58:25:b5:
df:4a:a1:22:cc:62:93:10:b1:6c:04:89:a6:03:1f:
af:e3:06:53:df:35:dd:75:00:37:5e:1d:0e:d8:6d:
aa:f9:ce:40:cd:10:c1:90:6d:23:e4:71:33:78:47:
b5:7e:ae:22:8c:6b:31:50:0e:c0:3f:ca:a7:32:a7:
0d:5d:26:de:70:63:e7:7b:b5:cf:70:20:26:f6:57:
f1:4f:6d:c4:06:bf:02:11:03:3c:00:d1:ba:91:cd:
ca:5c:35:af:1c:05:25:38:ea:af:7a:45:1f:81:37:
51:f2:de:f9:40:36:7e:ad:49:bb:ab:9b:21:7e:08:
1f:75:72:84:e4:ff:f3:db:29:52:28:22:ce:90:f8:
d1:88:dc:cd:9b:69:45:1a:80:ec:c3:16:da:30:46:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E0:03:AA:15:98:41:2C:89:5E:C4:20:D2:FE:8D:30:60:95:FE:4E
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:ff:07:1b:c4:69:47:52:f3:ca:3f:d2:8e:ea:c4:4e:5e:f0:
dc:8f:6f:eb:49:9b:67:ce:f6:f4:5f:16:c6:13:58:95:83:77:
68:00:4c:4f:ce:35:b0:34:cc:38:c0:2c:87:aa:af:b7:7f:6f:
66:01:40:11:bb:51:37:15:2a:cb:f5:54:b0:42:ab:42:09:2c:
a0:8a:a2:69:a5:9b:7f:1a:cc:33:5c:4f:92:9c:71:c6:91:dd:
e8:bd:72:d2:45:37:ce:87:91:58:d4:52:43:b4:83:49:db:6b:
57:9f:db:35:53:59:be:5d:e4:7c:3f:43:62:7f:1d:67:73:f2:
6d:bc:16:bd:ba:2e:07:06:28:90:9c:ac:98:76:c5:e1:98:6d:
3e:a5:fc:86:4c:c9:0b:9f:5d:46:d2:ac:d9:0a:2c:9f:11:ae:
f0:93:68:42:47:be:0b:e0:dc:b7:43:35:65:0a:62:01:ec:79:
90:ec:0d:c8:bd:a9:bf:9b:0d:0b:3f:f3:3b:fb:86:cf:ef:36:
a0:a5:79:8d:33:f9:95:c9:00:29:8d:2f:41:37:57:02:ff:b5:
62:71:5d:c5:56:9d:70:a4:f7:a0:80:ac:3f:9d:91:e4:5f:32:
30:04:cf:2e:38:6d:62:23:b7:82:f4:d3:31:e5:8a:10:8b:62:
6c:77:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:12 2025 by rpki-client on console.sobornost.net