Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: QRLCbqLw9s/M7ko7ccVv4kNqXy4rfxn9VXx24b+oi/0=
Subject key identifier: 57:84:8E:90:1C:7D:3A:D7:9C:AA:8D:57:C9:EA:74:07:AE:D5:DD:3F
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 01962F3D989BD370D6FF23FEF5A9F777022C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0C27
Signing time: Sun 13 Apr 2025 13:01:28 +0000
Manifest this update: Sun 13 Apr 2025 13:01:28 +0000
Manifest next update: Mon 14 Apr 2025 13:01:28 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: OVA8tJX95G1N2qd1sz2LwJxebtSsC5QY8/W7xVTyNsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:98:9b:d3:70:d6:ff:23:fe:f5:a9:f7:77:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Apr 13 13:01:28 2025 GMT
Not After : Apr 14 13:01:28 2025 GMT
Subject: CN=57848e901c7d3ad79caa8d57c9ea7407aed5dd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:d1:eb:40:99:16:89:01:73:6f:63:25:ad:
9d:55:04:27:47:df:99:2e:7d:82:f3:74:65:9d:79:
4c:0c:63:70:c8:e3:74:d6:fb:fa:a5:d2:54:21:3d:
49:72:80:c9:46:7c:25:d7:4f:cd:4d:85:ed:b6:29:
fa:1f:88:eb:7a:21:24:76:48:35:76:63:c8:ce:72:
4e:8b:2b:57:bb:b5:e2:b8:60:cf:06:35:e3:d8:98:
cd:d4:3f:b5:dd:33:cb:7f:85:7c:f1:9c:07:ad:95:
6d:c3:a0:e6:6b:26:5f:96:44:b2:6e:ee:bd:d0:48:
33:71:03:10:1e:b2:9a:e8:bc:71:29:45:72:42:b7:
ee:2e:0e:3c:4d:7e:65:a4:6f:63:6b:10:a8:ef:37:
7f:f0:98:f9:ae:4f:b7:e7:18:61:e3:73:8a:15:18:
a3:3b:dd:63:d4:66:c4:b1:2f:b5:da:30:92:7c:b8:
23:48:15:55:83:bd:dc:90:14:2b:81:e9:36:22:90:
9e:d4:bf:98:51:8f:58:87:44:94:53:f1:71:d7:aa:
b5:24:03:89:3a:9d:f8:82:2d:38:a7:28:5f:61:4e:
db:57:46:1a:07:cd:94:33:cc:5f:36:a6:76:62:89:
dd:57:09:1d:03:c0:9c:54:00:26:3d:a8:79:03:4c:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:8E:90:1C:7D:3A:D7:9C:AA:8D:57:C9:EA:74:07:AE:D5:DD:3F
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:89:44:72:19:a0:72:9b:9f:38:24:e1:b1:b8:e5:7e:03:e8:
19:e1:86:56:3d:ff:22:e9:2e:3a:c0:e1:75:35:cd:5a:fe:5f:
c3:f3:dc:f5:69:4e:60:c2:b8:2b:30:79:e0:86:2b:41:2b:44:
ac:99:aa:28:52:28:93:40:7f:b9:3a:e1:67:85:fe:47:5e:51:
a8:a2:82:6a:30:10:0b:19:1f:78:f4:68:44:66:4e:15:92:ce:
db:2d:d6:03:56:99:69:3d:ce:87:0c:43:16:7a:59:ef:e3:64:
87:30:56:58:bb:30:01:75:3e:15:ba:0b:cb:1d:94:d7:23:bb:
7e:c8:d3:f7:20:7e:bb:68:50:62:47:f3:fe:8d:37:70:32:db:
96:ae:71:79:95:9a:c0:fc:f8:5a:3c:e2:fe:b7:0b:3e:d6:58:
7c:6a:f3:e6:2b:b5:93:d2:d3:02:df:60:e4:74:4f:ca:d0:7e:
ca:67:1a:81:65:97:9b:e1:5d:e3:9d:71:b5:4b:72:4c:ca:95:
13:45:94:82:dd:17:76:bb:cf:da:13:e6:60:31:39:70:ce:43:
76:9b:1e:50:58:6a:33:5c:02:a3:20:63:6a:31:b0:2e:8d:e0:
48:4a:a3:6a:1b:ad:72:06:03:e5:7a:5a:0e:b4:5d:d8:91:8e:
36:2a:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net