Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: ahmVI29vBRv2tBC3Sezhy4I1wS6onnQpUo2srcm5zdU=
Subject key identifier: 70:A8:F5:52:4A:3E:DD:D7:BD:AB:4D:17:3C:52:F0:9E:A6:C3:B3:FC
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01962DF40163C8E900DEFFB1805208085B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 07:01:27 +0000
Manifest this update: Sun 13 Apr 2025 07:01:27 +0000
Manifest next update: Mon 14 Apr 2025 07:01:27 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: EvMNIOIOtqiMp1Rlqzh0otGIkesdSBNVdlKJaogOq8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:01:63:c8:e9:00:de:ff:b1:80:52:08:08:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Apr 13 07:01:27 2025 GMT
Not After : Apr 14 07:01:27 2025 GMT
Subject: CN=70a8f5524a3eddd7bdab4d173c52f09ea6c3b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:c7:9d:ec:30:39:8d:86:bb:ff:54:e6:6f:
48:af:16:d4:4b:70:fb:07:03:09:c5:40:38:0c:bb:
cd:1d:96:97:75:c9:d0:9d:b5:c3:f9:7d:5a:d4:0c:
65:ba:fc:9e:a5:2d:db:fe:30:36:de:1d:29:d7:81:
9d:d7:0c:ab:e1:f8:76:b6:67:d0:14:0d:73:48:dc:
8d:b5:bc:16:af:03:9d:18:65:c4:b0:a0:97:9c:11:
68:53:95:d9:23:3f:b7:e7:41:be:67:5a:03:3a:89:
d7:74:c0:89:75:76:90:f9:45:ec:48:0a:d6:28:6f:
18:a1:fa:2d:10:ca:ee:2d:6c:f6:09:81:63:1c:0f:
73:52:01:27:24:b7:f5:23:f6:be:c5:c2:bb:09:78:
c4:17:03:40:d3:24:82:31:d9:53:3b:10:dc:d8:35:
e9:16:30:9e:c3:95:59:90:ff:08:97:80:4a:7b:65:
ca:0c:6d:d1:b7:83:e0:4c:e3:19:12:6b:0f:49:c2:
49:a9:ad:50:13:5f:ad:6f:01:e7:44:6c:7e:f3:57:
84:cb:ee:60:be:d7:74:71:fd:83:a8:a6:88:aa:b4:
a4:a6:ef:35:bb:b1:15:c1:9b:ff:3a:ab:2e:cb:04:
b0:5e:c5:84:4b:38:77:bd:b3:50:d9:62:4e:95:39:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:F5:52:4A:3E:DD:D7:BD:AB:4D:17:3C:52:F0:9E:A6:C3:B3:FC
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:40:eb:59:ff:1a:dd:4a:02:d6:58:49:ed:3a:b4:81:6a:ff:
a1:98:e4:e2:56:33:80:0e:40:51:03:9e:af:ae:0f:a1:8b:fa:
12:74:c1:14:73:83:a6:3d:01:ab:78:28:f9:61:55:98:89:d7:
2e:4c:6c:89:0d:2f:fc:55:d7:2c:ee:6f:0e:58:b1:9d:b8:14:
27:a0:df:20:95:9a:d5:59:cb:d4:d0:a6:49:c7:aa:72:e7:4b:
9c:3a:c0:ed:f4:24:4f:15:a6:1e:0f:8f:f0:83:e2:0d:80:5f:
cf:d2:88:3a:bc:cd:81:f9:85:c6:7d:2f:55:34:5c:8a:be:14:
c8:48:88:66:6b:8b:e7:3e:1b:37:8e:97:f0:a1:18:18:86:9e:
a7:e5:ee:6e:d0:4d:c8:b7:7f:4e:c6:41:61:c3:b9:2f:e2:73:
ee:0d:8a:21:0c:09:d1:11:7d:41:3d:30:15:cc:c4:91:fc:0e:
6a:9f:82:f2:41:67:e8:f2:24:60:44:20:da:30:69:5c:20:b5:
b1:06:67:dc:dc:ec:c0:c9:d8:fc:bd:06:12:f6:fd:c8:44:61:
6a:61:9b:b9:f7:88:7e:27:96:05:c4:bb:be:ee:e5:c4:60:31:
eb:60:40:86:c5:95:18:c0:d2:95:32:a8:5e:27:42:46:c9:80:
ac:d6:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net