Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: 3RbXj6vtyd/mnxKG8WWvAsDDFwYv1RA3zJw9L7K+fV4=
Subject key identifier: 8D:4B:2E:5E:75:EC:AF:19:65:B6:7F:E8:C3:2E:0B:AC:C5:62:48:A5
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 01962F0665765EEC958C63161FB7E44337F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 12:01:10 +0000
Manifest this update: Sun 13 Apr 2025 12:01:10 +0000
Manifest next update: Mon 14 Apr 2025 12:01:10 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: jD0Swb29t8hpy+o3pb1nY0n4LJjcWVH5dsmHt66s6KM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:65:76:5e:ec:95:8c:63:16:1f:b7:e4:43:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Apr 13 12:01:10 2025 GMT
Not After : Apr 14 12:01:10 2025 GMT
Subject: CN=8d4b2e5e75ecaf1965b67fe8c32e0bacc56248a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:17:6b:7f:67:48:4a:bf:08:e1:54:ab:5e:
20:b7:d2:49:4d:93:bb:e6:11:0c:6a:1c:14:b2:b9:
55:6d:02:dc:2a:5e:76:ca:5b:40:b4:31:a4:36:d1:
a9:86:27:37:f8:9d:5d:c0:1b:8e:81:52:20:fc:39:
c8:69:a6:16:6a:3a:9c:af:9c:a3:7f:8e:1b:93:d9:
78:48:aa:5c:8f:34:a8:eb:dc:f5:31:40:c8:8c:16:
44:14:fa:e0:3c:00:47:14:9c:5b:ab:09:1a:c2:aa:
b8:10:5d:49:b2:04:f4:2e:89:2a:d2:96:ef:73:bc:
1a:84:cc:4c:ce:a6:2b:5f:43:32:cd:48:fa:8f:1d:
38:3d:6f:49:9a:fd:f6:70:89:4b:a5:06:53:0c:66:
f7:05:17:43:bb:2e:f8:28:12:c5:79:05:42:ec:03:
65:65:c7:a7:f6:7b:89:52:f3:48:54:cf:16:82:1c:
f1:01:ea:06:5d:f9:1e:e7:33:7d:92:ec:f3:aa:a6:
db:38:18:86:96:a7:a6:ca:fd:f2:fa:f1:08:3f:98:
a9:4c:61:b8:47:c3:61:c2:d2:4b:61:db:80:ee:4a:
a9:10:cc:a3:94:bd:a5:67:6e:d5:6a:6d:0f:dd:27:
ac:59:24:15:14:57:75:24:4d:64:63:78:b1:36:2f:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:2E:5E:75:EC:AF:19:65:B6:7F:E8:C3:2E:0B:AC:C5:62:48:A5
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:c7:17:fd:48:11:39:c7:45:35:7f:97:9d:3a:f2:b7:fd:
99:f9:6d:2c:a7:99:1d:8a:60:04:c4:7c:8a:c1:8c:60:d8:e1:
e9:fc:2d:fa:28:20:26:a1:37:8e:cf:ab:46:03:bb:8f:31:7a:
c3:08:c3:0c:ea:35:48:e6:94:8a:53:0c:da:38:85:85:a5:19:
c3:6b:ff:c5:73:c1:f0:01:53:dc:7f:02:2e:94:cc:85:7e:c9:
84:1c:d7:1c:cf:25:fe:03:22:e1:4d:b8:75:b1:1d:6d:71:ac:
24:fc:64:c5:63:37:67:77:f1:48:61:38:d5:01:9c:29:7b:b5:
95:de:80:a4:3c:71:f8:f9:1f:6e:93:b5:9e:6f:e8:47:c3:17:
02:b2:a6:2b:5f:ca:d7:2c:45:a5:fc:04:1b:ee:d8:02:e7:be:
f9:89:f7:27:6b:a2:e8:24:26:3d:d9:93:20:05:90:6b:e2:c3:
27:cb:38:53:65:5d:b6:05:ac:9e:ab:6d:32:42:0e:04:0b:e3:
93:15:78:ba:71:c0:44:16:e5:c7:5e:a0:60:a2:88:b9:74:9d:
a4:81:22:af:a0:2b:4f:46:18:64:c5:f5:e4:45:ca:c0:5c:57:
97:e0:c1:25:b0:97:70:0d:d5:85:38:2a:6b:23:8a:5c:27:88:
be:81:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net