Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: nO9fcLX2h8wPfSK0yyLt6tQimyhP1BkifGBLFKjVj3o=
Subject key identifier: 20:9C:61:9F:7E:27:0D:65:A0:68:01:8E:D3:A8:FA:8D:79:5C:5A:E7
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01962E986F0E5FDB54DC1C6A8E96E96C1921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 10:01:03 +0000
Manifest this update: Sun 13 Apr 2025 10:01:03 +0000
Manifest next update: Mon 14 Apr 2025 10:01:03 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: VslBaimy2rk+bLTIWS0gSrXuazJnveeLVreTgCpVH3Y=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:6f:0e:5f:db:54:dc:1c:6a:8e:96:e9:6c:19:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Apr 13 10:01:03 2025 GMT
Not After : Apr 14 10:01:03 2025 GMT
Subject: CN=209c619f7e270d65a068018ed3a8fa8d795c5ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:14:67:70:2d:4f:97:b2:d4:6a:1f:1e:89:
42:10:89:30:4e:2a:ee:6e:ac:71:f2:57:b9:ee:48:
47:95:9b:8a:77:de:a6:15:c1:08:cc:32:62:6c:d2:
c4:a8:ac:b4:e8:20:0e:bf:6f:08:75:de:1f:dd:c1:
16:54:31:96:c2:19:18:65:09:e4:74:d9:c2:79:9b:
a9:1a:ab:40:fe:f0:2e:94:66:4c:58:4a:56:9b:72:
bd:74:d6:6b:f9:04:42:6d:3e:1c:f6:f0:d2:72:59:
1e:5f:51:72:5f:fa:6a:f7:3f:67:9b:6a:e0:8f:33:
e9:76:b9:f9:03:13:a9:0d:65:a4:e6:42:2f:fc:07:
65:f4:b8:e7:02:d7:58:2f:14:76:04:57:bf:f3:68:
f5:49:6d:0f:3e:f3:60:63:80:58:b0:bb:14:6c:4b:
43:27:9d:a3:59:1f:9c:ef:5f:38:34:84:c0:42:91:
f5:c4:f5:9f:c3:8d:de:e2:ff:43:68:9e:87:a7:51:
fd:26:18:6d:b1:c7:a6:d0:b8:3b:53:38:1c:29:54:
29:28:be:f7:68:e7:db:39:99:4c:3d:54:90:fe:67:
92:43:bc:ea:94:95:77:60:47:17:1f:70:4c:af:c1:
b6:a6:89:b5:6d:26:ef:fc:88:56:31:1d:36:0a:3c:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:61:9F:7E:27:0D:65:A0:68:01:8E:D3:A8:FA:8D:79:5C:5A:E7
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:02:14:71:c0:8a:87:48:eb:75:36:16:5e:0f:23:1b:ac:
e7:3d:ab:d4:aa:5c:c5:6a:e2:71:d9:d7:58:6c:ae:60:76:99:
53:4b:bd:11:db:b4:1e:b2:f5:86:27:35:57:8a:83:5c:c6:50:
29:4e:cb:32:58:99:20:41:d2:46:2f:01:3b:67:3f:b7:f6:ce:
3c:c5:c5:a3:7d:ed:9b:1b:01:83:a5:e6:b9:aa:cb:43:16:9f:
3f:a6:57:cd:9b:a5:df:84:4c:7b:4a:cc:ce:81:69:f3:d6:52:
9f:51:41:6d:1e:5a:43:89:b6:14:b6:1e:08:94:a5:bc:0d:34:
92:89:1b:40:84:2b:a0:85:e2:96:9b:e8:6e:53:af:32:26:4d:
78:dc:8d:2d:52:e3:e4:3f:60:62:fb:dd:58:4c:0e:fd:1d:d7:
a5:3a:65:18:76:c9:78:90:d8:59:8e:ef:ee:d6:81:f1:c9:d9:
da:11:09:49:73:90:49:64:1e:ef:31:44:5d:ff:c5:92:12:1e:
25:8a:78:df:b3:53:d1:78:b5:9a:c0:9a:e1:c1:47:41:30:60:
f9:ef:b3:af:e5:da:e8:11:36:0a:19:d7:82:2a:88:28:2b:6c:
6b:d3:52:aa:3d:81:52:59:26:54:bb:f6:43:2e:55:3e:77:fb:
55:44:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net