Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: b0QzWlokwAS13eEW/VPvdcC6KtIHCk+4VKGMqUZxgbI=
Subject key identifier: 37:E8:48:6C:42:39:95:FE:40:55:48:01:9E:9C:2E:4B:64:CD:BD:5A
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 01962F065D642E74BB0859BF951227E6D220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 0FEC
Signing time: Sun 13 Apr 2025 12:01:08 +0000
Manifest this update: Sun 13 Apr 2025 12:01:08 +0000
Manifest next update: Mon 14 Apr 2025 12:01:08 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: j8IqEFKs/qkm42xm87FpGWGD3kFyHtWmyiWC366c1bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:5d:64:2e:74:bb:08:59:bf:95:12:27:e6:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Apr 13 12:01:08 2025 GMT
Not After : Apr 14 12:01:08 2025 GMT
Subject: CN=37e8486c423995fe405548019e9c2e4b64cdbd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:52:30:16:e9:aa:64:5e:76:3a:22:93:44:
89:93:9a:bc:9f:72:a4:ef:31:eb:f0:f1:a9:90:a7:
1c:bb:c7:2c:bf:b4:ed:bd:b5:56:6e:a2:48:a4:42:
41:9b:65:99:8d:2d:3f:ed:9a:67:f7:90:33:50:3e:
c2:9a:ec:d7:f8:9f:47:e1:ae:2d:aa:4c:18:44:af:
4b:b5:bf:83:a2:3d:62:bd:37:dc:f0:25:5a:a9:a7:
1a:d1:4a:69:b8:4c:8e:59:27:4b:67:5a:a1:f3:e2:
49:81:a9:d0:81:49:bf:96:a8:bd:3b:79:79:f7:27:
55:4d:8c:2c:80:b1:72:1a:ff:d9:a5:69:bc:57:a8:
38:18:56:8f:a7:d1:de:e1:08:54:9c:a4:d6:ac:29:
d7:c1:90:89:05:02:c7:69:d6:c1:0a:17:97:e2:57:
5a:bf:b8:eb:5d:76:2b:b9:ce:38:af:cb:dd:aa:76:
f3:53:22:35:93:0b:e5:2d:47:63:22:29:78:89:27:
83:75:54:9b:e6:43:52:fc:62:9e:1d:60:4a:b4:83:
87:be:ed:86:ba:97:94:91:81:4a:35:c9:b5:06:67:
dd:f5:5a:49:21:f1:fa:37:31:ff:cf:99:d6:11:b3:
78:ce:5b:72:ab:07:c2:be:f0:db:99:ff:be:f9:d7:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:48:6C:42:39:95:FE:40:55:48:01:9E:9C:2E:4B:64:CD:BD:5A
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:37:28:0a:1c:eb:51:33:ea:d7:e6:04:ce:25:d3:97:32:
42:65:4b:13:f2:38:f3:35:42:82:46:78:77:14:43:98:92:17:
90:51:ac:87:61:8a:7b:79:82:71:5b:5a:a1:69:e4:02:8c:da:
48:38:ec:ca:74:b3:d4:e9:66:d1:48:fc:21:36:93:46:e7:a1:
34:5e:74:79:10:0a:67:c8:de:1d:f1:c0:90:4a:5b:ea:07:e0:
6a:df:9c:e7:ef:f6:d4:d9:29:22:cb:95:9b:d5:1f:d3:b6:8d:
79:d5:b2:00:38:3d:fb:71:f7:65:55:11:81:4c:11:b1:b1:82:
23:c7:61:b8:1e:db:73:25:98:fb:54:7a:6e:c9:84:28:4b:56:
3a:29:82:8b:d3:e9:d8:58:aa:c6:07:32:5b:03:42:12:68:d9:
ed:b7:ce:cc:f0:8f:df:68:bb:b6:62:c1:f3:8b:c3:8f:c8:a6:
47:98:84:7d:59:21:fb:b3:04:7e:c9:32:03:f3:f7:d6:f1:11:
d0:27:20:1b:21:a7:ef:c8:5b:8c:1a:9a:68:d8:78:83:14:1b:
c1:9f:f5:58:ae:51:0c:69:2b:32:d3:d9:39:19:50:e7:c9:61:
7e:e6:93:2e:61:24:4c:e0:56:5f:31:d0:3f:bd:0b:37:e0:d4:
e7:60:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net