Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: lmOWwqRVGN1BdV49iqFxrqEMD3hIWcWiCbeYaV9iCCo=
Subject key identifier: 87:D6:94:0D:EC:AA:27:55:4F:5D:C0:D8:0B:BA:2E:74:E3:BE:F2:CF
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01962F3DBCBCF030C9B22B59A793DAB1684E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 13:01:37 +0000
Manifest this update: Sun 13 Apr 2025 13:01:37 +0000
Manifest next update: Mon 14 Apr 2025 13:01:37 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: S7VYk6RnHGq3Jj14zTc9SdIYhBbteI/mymXMS5cx8d8=)
2: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (hash: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:bc:bc:f0:30:c9:b2:2b:59:a7:93:da:b1:68:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Apr 13 13:01:37 2025 GMT
Not After : Apr 14 13:01:37 2025 GMT
Subject: CN=87d6940decaa27554f5dc0d80bba2e74e3bef2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:81:8b:9c:ef:10:75:c4:de:79:38:c4:e1:
14:b4:80:a9:26:fa:56:77:ba:e9:97:bd:71:21:17:
bf:fa:dd:80:b0:50:df:dd:4c:08:4e:6c:c2:e2:50:
79:c5:f4:b5:51:29:4b:69:e0:1c:11:2c:b6:8f:c9:
2d:f7:24:17:b5:e4:8c:59:86:05:90:6f:d1:73:1d:
5a:6e:8e:77:72:69:c2:5e:e5:40:41:6f:2c:3b:47:
1c:2d:21:c8:6d:c6:a7:e7:f5:59:15:08:e6:99:2e:
46:f1:c1:b3:2a:5b:c9:72:06:2a:ef:a3:fd:41:1c:
10:3d:69:e2:4d:35:ed:d2:d7:43:a7:2a:43:b0:54:
b8:d7:cb:42:5a:a2:b6:a8:c1:42:51:0b:73:4b:79:
d7:38:a4:e0:1f:80:0c:d9:99:5d:51:7a:aa:94:08:
a7:23:9c:58:55:20:10:2c:da:30:5b:4c:3a:5c:02:
33:c9:11:ea:f0:e7:c8:a0:5d:93:b3:ab:83:f8:53:
3f:99:4e:57:1f:f5:26:c8:b3:67:ab:8b:93:80:69:
78:c4:82:85:70:7a:09:7f:88:c1:63:fd:ba:46:18:
42:3a:6f:33:ad:c1:7f:d0:c4:46:c1:65:38:33:f1:
4a:15:9e:07:8f:8c:6c:c6:24:1d:33:da:8e:7a:44:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:94:0D:EC:AA:27:55:4F:5D:C0:D8:0B:BA:2E:74:E3:BE:F2:CF
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8d:a3:82:98:89:79:52:77:68:ca:a6:b5:a8:26:64:61:51:
93:95:c6:1a:39:27:68:da:db:5d:02:39:7c:4c:4c:5a:d1:e4:
20:84:96:34:95:b2:fe:53:e6:ce:d8:b5:d7:16:24:fd:4a:6b:
ac:76:08:71:dc:21:f2:d8:76:bc:d5:10:19:61:af:11:e7:ce:
af:11:31:38:f3:91:04:80:b4:e4:7c:ed:dd:88:6e:c4:3a:75:
70:7a:09:00:40:05:d5:9b:8f:a5:40:fb:b0:14:86:d6:19:85:
87:4d:86:66:55:48:09:97:5a:08:aa:c4:65:6f:3c:6e:68:17:
fe:10:27:8a:d0:cb:bd:2b:37:37:8c:c0:f7:64:e3:d6:8f:bb:
53:c5:4e:59:bd:d4:fe:30:4a:cc:4b:be:10:3a:96:1a:e4:e2:
7d:53:a4:ed:d5:98:78:5e:92:8d:c5:61:43:ce:1e:5c:ee:54:
6e:25:8b:72:ae:3b:93:53:5d:7d:bf:ca:ac:b6:48:b3:05:77:
a4:7b:2a:4d:b7:6e:c8:91:bb:f4:4f:89:20:1c:3a:55:2c:a8:
59:3f:4c:2c:76:64:6a:0a:bd:57:f3:03:bc:18:25:cc:cf:34:
84:09:f0:e0:28:81:34:3e:b7:33:94:cf:1b:82:71:fe:62:5e:
e5:35:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net