Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
File: hWyvHy8CkUARBe9osllX3FVVENI.mft (raw, json)
Hash identifier: xK5dwx0SPygGocx31krM+OC8opHcwhImVyBAKc4WsNI=
Subject key identifier: F3:D9:F7:67:2F:80:42:56:CF:61:04:DC:9A:1C:8B:3A:E1:58:F1:4B
Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2
Certificate serial: 01962E990F0E6AF0CAD3FDBEA27C70476D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
Manifest number: 1055
Signing time: Sun 13 Apr 2025 10:01:44 +0000
Manifest this update: Sun 13 Apr 2025 10:01:44 +0000
Manifest next update: Mon 14 Apr 2025 10:01:44 +0000
Files and hashes: 1: GpIZ4jE-9ieq_ECexQxa_m3ORPw.roa (hash: IjDJZYXavRzEltys5gXrAE3D7K9MgVcCUjh6DyqqaSM=)
2: hWyvHy8CkUARBe9osllX3FVVENI.crl (hash: y8QRZiHmm7c+jLd4ulCVMOEy+2xEzrV+qLDrQuF/MVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:0f:0e:6a:f0:ca:d3:fd:be:a2:7c:70:47:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2
Validity
Not Before: Apr 13 10:01:44 2025 GMT
Not After : Apr 14 10:01:44 2025 GMT
Subject: CN=f3d9f7672f804256cf6104dc9a1c8b3ae158f14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:f6:87:2f:71:94:51:98:5d:e9:5c:4f:03:
e5:4b:bb:38:bf:da:16:2e:5a:76:0b:e8:34:f3:c4:
84:82:60:62:de:20:db:62:3b:33:0b:42:c9:b9:c3:
b1:e7:db:a7:ee:5e:2e:5c:bc:b5:71:08:a8:85:be:
27:25:56:70:9c:d3:6e:3c:c1:ae:e1:8a:e6:f7:18:
88:2d:d9:5c:c1:a9:1d:12:6f:c6:7b:6f:77:f7:f5:
df:9c:be:25:5d:6f:d1:9b:bb:d0:d6:7a:a5:08:d1:
40:b8:17:da:93:24:4b:c8:ef:d5:bd:7c:f4:b7:15:
3a:57:c2:3a:27:db:ac:28:42:c1:69:86:8e:3c:f7:
40:45:9a:57:9c:60:5c:5a:a1:86:bb:bb:85:25:3c:
c0:ba:ab:8a:55:56:fd:cb:7b:bd:0a:ca:82:8e:d6:
49:d8:40:b5:90:05:b9:65:3b:0f:53:af:fe:e3:20:
71:66:a0:03:1d:fe:25:28:72:16:22:fb:67:7e:72:
16:a5:ec:45:fc:56:01:99:df:15:55:fa:d9:aa:69:
55:e4:d1:ee:aa:4f:08:fa:57:fb:0c:19:b9:04:37:
1c:1a:fd:4d:26:55:9c:b0:c1:b5:0a:16:3b:ef:1d:
46:db:ca:d1:fd:09:1b:08:6c:8c:96:54:85:b7:49:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:F7:67:2F:80:42:56:CF:61:04:DC:9A:1C:8B:3A:E1:58:F1:4B
X509v3 Authority Key Identifier:
keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6e:d9:1e:8d:7c:fd:85:2b:0e:93:08:e2:94:47:c9:87:91:
64:22:1b:35:5a:f6:6c:ab:14:76:0b:55:0e:57:25:fc:15:84:
fb:ea:d7:f7:c2:19:82:02:00:01:7a:28:39:f2:f2:eb:7a:14:
7b:2c:54:57:68:4f:16:6b:dc:37:48:d1:3e:76:19:79:a3:aa:
9d:0c:1f:d0:3c:5c:41:8c:6c:06:e1:6f:01:d5:b5:c1:94:bd:
53:ae:cd:f0:2a:de:45:0d:1d:ac:15:dd:69:c3:9a:01:4f:3d:
1c:a4:60:21:0b:54:f9:d6:b5:7a:14:31:98:21:42:3f:c2:27:
b3:1a:71:3e:80:9a:ba:9e:d0:b9:f1:15:70:cc:c5:66:0b:9d:
20:24:ba:d6:5a:ae:a2:10:4f:30:8a:ce:08:8c:b7:1b:3f:54:
06:a5:1e:21:c0:6d:a8:94:47:ce:fe:07:c2:88:6f:97:be:49:
8a:dd:84:4b:48:02:69:11:1e:e0:e0:b0:ae:99:28:7e:e1:ec:
c6:f7:ba:f9:f6:b0:38:f0:a2:5e:6e:7d:99:8a:99:41:47:57:
c2:c3:d5:11:42:b4:0d:8f:23:20:61:48:55:bd:0c:27:0d:24:
72:04:d0:ad:08:67:1b:68:b4:4b:9d:93:f2:9e:c7:eb:57:f3:
ca:0a:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net