Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: 0kSnsCeU7D+Zumnyq7BW9ZyiHun1g35R+8vdusfOPms=
Subject key identifier: 08:82:A1:FF:1B:8E:C5:84:EF:47:8B:CB:69:85:8A:45:9B:31:97:09
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 01962F74ED04ABE5D93D24056973B2D3FA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0C9F
Signing time: Sun 13 Apr 2025 14:01:54 +0000
Manifest this update: Sun 13 Apr 2025 14:01:54 +0000
Manifest next update: Mon 14 Apr 2025 14:01:54 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: q7qquAieheAA8AMSd0v9iQEl1C0sYYKy92CFkdTx2JY=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:ed:04:ab:e5:d9:3d:24:05:69:73:b2:d3:fa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Apr 13 14:01:54 2025 GMT
Not After : Apr 14 14:01:54 2025 GMT
Subject: CN=0882a1ff1b8ec584ef478bcb69858a459b319709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:8e:d2:97:6b:b1:25:31:d1:cd:db:9e:a7:
be:82:c8:27:64:0a:6f:6f:15:29:94:68:c6:ea:9f:
39:56:24:ab:e2:40:17:52:a7:1c:9c:d9:e2:8c:0a:
2b:69:34:d1:4b:e7:83:12:ee:89:61:39:f2:c2:cf:
0e:8b:53:c7:83:0c:ce:73:49:03:33:c6:36:0e:a6:
5b:35:fd:3d:e0:f7:11:23:0c:12:33:52:7b:e0:20:
8e:22:2c:b9:4d:80:b7:40:0e:30:32:87:e2:4a:aa:
30:30:25:68:67:05:b3:72:57:9a:a1:65:bc:28:7c:
56:84:ae:5c:53:1b:be:57:60:79:08:1c:6f:ae:30:
08:2e:15:25:6a:60:c9:9f:cf:45:ba:da:41:9b:1d:
af:d6:37:6c:a0:f2:a1:cb:41:3f:29:67:1e:cf:30:
c2:0c:33:10:5e:22:66:08:6a:73:9d:32:bb:da:e1:
d1:4f:c8:53:d0:74:fa:cd:9b:88:42:c1:23:b4:c4:
1f:17:9f:a4:05:8a:85:00:c8:e3:c4:95:82:ec:33:
1f:49:01:4c:4d:df:73:cf:bb:d3:bc:b2:00:7c:09:
d6:7c:6f:45:b8:77:f7:a9:90:b3:8f:23:89:7a:05:
44:7c:4d:3c:29:d6:05:9a:84:e5:f1:c1:2f:67:85:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:A1:FF:1B:8E:C5:84:EF:47:8B:CB:69:85:8A:45:9B:31:97:09
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9c:36:e8:45:71:c6:99:41:94:31:64:02:ee:a6:43:24:b0:
28:7b:a7:34:4c:1f:f1:d8:1b:4d:6e:ae:95:5c:1b:8f:fd:cc:
83:e5:4f:a0:30:cb:1a:90:1c:86:b0:83:c8:14:8a:83:b9:7a:
57:63:d7:fb:c0:61:ba:4d:ac:b9:d6:49:38:dc:e6:9b:71:f6:
b7:7b:b6:3b:36:ab:01:4d:a1:0d:e2:b5:f6:8f:c4:fc:dd:dc:
23:7e:b5:a1:da:d8:35:01:cc:c6:f0:d2:d6:7e:e7:87:aa:96:
2f:dc:45:29:cd:58:61:90:53:f2:e2:ce:b4:6c:e1:7e:8c:54:
d5:bc:80:1d:f5:47:e9:b5:f1:0c:2a:fe:ea:ef:1d:7f:a4:5f:
2d:78:58:64:b1:29:3b:d3:d3:da:5f:af:56:7e:62:db:25:78:
1e:40:11:08:fd:05:f4:19:ff:88:c0:71:b6:dc:a5:08:3f:57:
40:af:7c:f2:ce:46:9f:b7:50:07:47:f7:f9:da:bb:b7:f3:ce:
d2:42:c3:4e:7e:df:74:66:11:94:bf:5a:c1:8f:9f:83:2f:0a:
12:0b:33:dd:d7:e0:b1:8c:41:3e:d4:ea:ae:17:10:93:a2:6a:
c6:f3:7d:f5:0a:63:a9:0a:ff:fa:68:05:9f:97:2c:4b:cc:f9:
8e:68:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net