Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: kXCiAIO5djtWPfCreWBo9if5bpzhCkIKRdKJ4zqlGb0=
Subject key identifier: 04:C2:B2:76:C4:90:1C:F9:8C:E7:58:DC:FE:FA:F6:25:04:80:81:4A
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01962FAB7709904E5C7BF0DC4E2AE0B39C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0ED1
Signing time: Sun 13 Apr 2025 15:01:28 +0000
Manifest this update: Sun 13 Apr 2025 15:01:28 +0000
Manifest next update: Mon 14 Apr 2025 15:01:28 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: 8CM5MVXxSk9TMb9oHlVjkkOgeTXd8f5PmYWRA16v7wc=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:77:09:90:4e:5c:7b:f0:dc:4e:2a:e0:b3:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Apr 13 15:01:28 2025 GMT
Not After : Apr 14 15:01:28 2025 GMT
Subject: CN=04c2b276c4901cf98ce758dcfefaf6250480814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:d1:0c:fa:bb:fa:90:10:eb:de:ac:0d:90:
c4:c4:1c:ec:86:68:c9:af:4b:26:ba:a4:50:3d:20:
c9:de:1f:ae:2d:86:20:97:60:3a:59:a7:a4:7d:9c:
b4:b9:e1:cc:7c:de:ac:5e:9b:19:bb:45:11:1e:5a:
39:e9:14:ae:f4:88:5e:87:89:ca:f1:91:c2:b9:b5:
bf:97:71:5b:78:6c:26:72:fa:f5:92:b4:bb:79:12:
52:58:ab:7c:3a:97:0a:d6:2d:0d:c0:b2:a7:3c:4f:
3b:ae:89:5d:70:aa:df:70:1b:f3:39:e4:da:e9:43:
59:2f:c9:cc:14:08:88:d6:1c:d2:cb:7b:9d:13:c6:
26:01:d9:d4:14:a9:e4:d6:3b:3a:a0:d3:33:e2:02:
e7:6f:07:2f:59:5f:db:93:33:db:73:78:95:87:1f:
7e:41:a0:b8:92:c5:d0:c6:b8:6e:02:f4:a5:68:30:
54:64:93:d6:77:32:62:5e:c8:27:38:00:60:6a:e9:
44:9b:d5:22:e2:63:31:98:dd:3f:01:a3:d6:44:d4:
80:c8:8e:2e:84:23:fa:d6:14:5b:5e:c4:15:4f:3d:
e7:67:20:27:33:4d:ba:2f:7c:d8:55:1b:77:a5:ce:
62:c2:2f:73:da:aa:e0:5f:2f:ef:a6:f1:b4:a6:e3:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:B2:76:C4:90:1C:F9:8C:E7:58:DC:FE:FA:F6:25:04:80:81:4A
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:58:10:73:2b:87:62:bd:80:f4:d1:ab:d7:ca:a0:d6:fe:49:
6e:05:7e:70:0e:ef:ef:ac:2e:0a:8f:4e:2a:d9:81:66:d5:ff:
e7:15:34:03:47:ea:47:e4:24:fd:dd:a1:e9:4d:1a:45:85:af:
11:a9:5f:ba:e1:67:35:61:e3:0d:16:69:36:71:8b:92:f0:0d:
fd:cd:a7:76:f6:a7:61:9b:36:84:a3:c4:98:95:ab:f0:0d:da:
d0:c6:e0:11:3a:41:e6:ef:aa:93:e3:88:13:a3:b4:d3:4a:4e:
bb:87:73:b6:1f:8f:5b:21:82:f0:75:ed:26:7d:9d:50:67:7e:
34:28:7f:cd:13:7e:bc:9f:cd:12:bf:39:69:84:b5:7e:06:4f:
dc:23:3e:3a:be:90:4d:8a:5b:15:e8:e6:a9:2d:15:20:a1:d1:
1b:dc:fc:7c:81:a4:2e:a0:f1:ff:17:5f:ce:ab:ae:25:3e:3f:
46:30:62:4e:64:95:ae:e5:91:05:6e:2e:c1:c8:29:73:5b:15:
e4:9d:7b:4a:c3:08:db:21:a8:67:0e:26:19:70:59:33:f6:5b:
ce:08:21:31:30:96:3e:5c:5f:21:22:1e:78:24:4b:d6:db:7f:
ad:f4:00:e5:39:6c:bb:0b:45:7c:31:6f:f6:91:2e:8c:70:61:
ce:e1:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net