
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: JpTUlgjWOKEunqEQ0w4tFnnfQoaHw8LNSjihNYzD4a8=
Subject key identifier: 8B:A5:E7:A3:B1:21:CA:DC:67:B3:57:15:68:A1:C1:7D:B8:B9:BB:C0
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01962E996F19C75002597856E98AB929E47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 10:02:09 +0000
Manifest this update: Sun 13 Apr 2025 10:02:09 +0000
Manifest next update: Mon 14 Apr 2025 10:02:09 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: pbWzLC57QviEd2eSIW3Z6MHbFJ+lBIc4dlm3Niq0YGU=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:6f:19:c7:50:02:59:78:56:e9:8a:b9:29:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Apr 13 10:02:09 2025 GMT
Not After : Apr 14 10:02:09 2025 GMT
Subject: CN=8ba5e7a3b121cadc67b3571568a1c17db8b9bbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:c7:77:00:72:65:fe:3d:49:b3:8d:bd:78:
05:ea:78:73:58:1d:31:a7:64:11:0c:ca:39:f9:de:
85:27:79:fe:57:00:e9:d0:ea:63:3f:92:88:f7:3e:
82:2c:7a:26:76:93:80:12:1a:92:22:fa:5f:88:75:
cf:cb:36:c2:51:64:5c:ba:3c:c3:ce:a4:cc:83:a4:
fe:6f:15:48:80:62:d2:6b:58:62:9c:d6:75:a0:f2:
af:c1:27:5f:70:3f:b6:7d:50:f3:d2:f2:02:f5:6c:
f4:bf:48:6f:32:51:0d:f6:8f:56:89:c3:2d:9a:38:
b6:5e:fc:80:60:30:4b:2c:03:b6:72:f3:84:93:67:
6d:bd:6c:6c:01:74:7b:76:3b:47:21:e7:49:13:59:
0f:38:2f:8d:8e:e7:d8:e1:75:f6:90:4a:50:0b:3a:
d2:64:53:dc:1c:a8:df:59:74:0b:3c:af:c3:07:c2:
20:67:a0:1f:bb:2b:44:d2:cc:84:bc:ad:96:bf:4b:
6c:0a:79:5d:65:8a:26:ca:24:53:8f:ac:c1:98:d2:
cb:0c:dd:c8:01:84:95:1b:28:7c:b9:cd:29:c3:d4:
f9:e6:8f:1b:b6:3e:b2:24:d8:56:77:fe:92:0f:a0:
ff:b9:07:3a:d1:69:df:80:c9:5c:68:ba:b2:6f:1e:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:E7:A3:B1:21:CA:DC:67:B3:57:15:68:A1:C1:7D:B8:B9:BB:C0
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:4a:3f:29:46:da:cd:a3:d3:55:24:f6:f3:3a:36:7d:08:
90:17:98:92:57:9a:36:76:97:4c:aa:b9:99:ad:bc:6e:0f:f5:
d7:60:15:0d:63:3b:28:be:11:84:41:bf:00:98:6f:a9:03:90:
e9:1c:19:18:8c:e6:06:c1:dc:9b:c2:42:74:83:56:54:d4:31:
05:28:5c:64:fd:86:60:47:49:c8:b4:2f:21:c7:95:bd:f9:5b:
2d:b2:13:0c:ad:bb:ec:cc:cf:49:fe:57:98:78:cc:f6:64:5e:
01:19:89:2e:1b:92:85:3a:93:c6:00:b2:f9:fc:d5:0e:8d:6c:
e6:7f:39:70:db:1f:26:80:39:54:7f:e0:19:d6:56:98:b3:9a:
7e:66:19:e4:0f:95:95:90:b8:f1:65:d3:6f:46:bf:b0:cd:c3:
55:69:c0:98:dc:b8:53:38:40:33:a9:81:b8:6d:f3:4b:5a:83:
1f:84:5e:00:ef:a4:ee:a4:ea:20:e1:16:92:32:a7:e1:a1:fd:
ae:32:87:27:1c:5e:3d:dd:f7:ed:4b:81:a8:f6:01:58:e4:9e:
d5:d5:b5:cc:ac:db:ec:c4:74:7d:e0:63:a8:fc:13:e0:bc:9b:
0d:6c:99:ad:88:db:d5:74:ba:08:23:d3:f9:81:1a:93:7f:14:
aa:fa:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net