Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: UNl84Qeh8I3sa36ThZBicnL0vvKtT0TGj333GFW91RE=
Subject key identifier: A5:99:40:5D:9D:4E:91:0F:C4:5A:02:76:61:65:14:DB:14:79:C7:F5
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 01962F06C621A689D53385C5AE1DA9B66678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 1383
Signing time: Sun 13 Apr 2025 12:01:35 +0000
Manifest this update: Sun 13 Apr 2025 12:01:35 +0000
Manifest next update: Mon 14 Apr 2025 12:01:35 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: 5e/V3a4H6qyIR/2qa6p0r3CyUI4h+eCLPxEkelqsZYg=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:c6:21:a6:89:d5:33:85:c5:ae:1d:a9:b6:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Apr 13 12:01:35 2025 GMT
Not After : Apr 14 12:01:35 2025 GMT
Subject: CN=a599405d9d4e910fc45a0276616514db1479c7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:96:c6:38:e3:c2:f2:a9:94:71:5d:a6:dd:
0a:3c:97:21:9e:9e:69:27:de:d8:63:d4:c4:3e:31:
79:1c:0e:f4:b3:e1:8f:6b:c9:b4:66:f9:4c:cf:c3:
e8:38:e4:e2:72:ff:c6:d4:17:b0:74:ef:8a:ff:57:
63:37:f1:70:dd:90:f1:97:b9:1d:ec:93:c4:93:b2:
e7:7e:5c:cb:f8:b8:9c:fa:65:e8:b5:da:80:88:7a:
f8:17:f1:af:e3:b9:ae:df:ce:e3:ab:3c:7d:9c:36:
aa:3a:8e:8a:b9:3a:a1:97:06:76:24:8b:7d:d1:85:
f8:5c:ed:44:de:bd:b2:99:c1:48:f9:93:10:32:90:
aa:db:25:ab:94:0b:56:06:9d:e6:e0:d9:c7:16:0f:
a4:e6:08:21:d9:d2:80:4e:1c:27:5a:1c:e8:ee:4e:
e4:47:9e:9f:ba:c1:30:b4:3a:c6:d2:eb:06:9d:05:
58:ef:9f:75:8d:2e:6b:3a:cd:87:28:ca:9e:d0:e8:
33:31:54:64:7b:ee:77:b9:9a:a9:b6:bd:df:64:80:
10:1a:59:e4:5d:65:34:f3:38:da:e8:80:a9:14:f1:
2f:ec:9a:e6:c0:48:eb:b6:c9:f9:78:dc:38:05:0b:
bd:83:aa:a7:ff:77:85:72:c1:19:2e:19:99:2e:c7:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:40:5D:9D:4E:91:0F:C4:5A:02:76:61:65:14:DB:14:79:C7:F5
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:2b:64:f3:54:96:5d:1f:59:5b:6e:96:71:7b:03:97:a6:
58:d9:90:39:36:e2:d2:23:95:6c:23:3b:a3:6a:bb:58:51:09:
af:13:db:d5:f1:b4:41:63:26:9f:1b:ba:a4:69:36:65:c8:e8:
ea:13:28:1d:a3:8a:89:ac:55:81:5e:0a:90:1f:f1:05:8e:e0:
18:7f:ab:37:35:bb:54:b3:c2:b5:3f:14:ba:6b:12:bf:55:28:
22:9c:8a:85:a8:31:28:e8:58:5e:45:c5:e3:75:a7:09:dc:ac:
d7:91:fe:bc:2d:f8:d4:36:eb:9e:d6:44:96:dd:2c:c8:d7:83:
15:d9:08:b3:f6:5f:9f:25:48:cd:17:3d:2c:d5:b7:6f:3c:f5:
11:44:60:9e:c6:b0:54:5c:8e:02:d6:06:64:68:1c:56:1b:a9:
99:d6:a5:53:58:fe:36:4a:a2:81:4c:10:40:08:23:4a:80:c2:
cb:6f:f2:f3:e3:81:40:92:b7:01:d5:55:6d:08:9f:96:c6:72:
f9:80:16:55:1d:3d:9c:5f:ba:4e:10:30:a0:d0:24:dc:c3:4d:
11:1b:cd:2e:8d:92:59:09:81:bc:19:ef:34:f1:70:a6:1e:f0:
36:b0:3e:72:49:e9:cf:a8:28:20:68:15:7d:a6:53:bb:ab:9a:
18:4c:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net