Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: BOAqAYTS4MuqfImXG3ZllW8ZrwLRs50AErRtUzPXxMA=
Subject key identifier: 57:38:5D:D1:B7:8D:45:42:2C:D7:9F:0B:8D:02:BE:DC:D1:B5:87:79
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 01962F06F1F07C4A498E37D7AEFF4C4AC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 12:01:46 +0000
Manifest this update: Sun 13 Apr 2025 12:01:46 +0000
Manifest next update: Mon 14 Apr 2025 12:01:46 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: zqhVqRxWPTtsl7y78vwntrZnU3s+qlFxEJwqDLIFjqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:f1:f0:7c:4a:49:8e:37:d7:ae:ff:4c:4a:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Apr 13 12:01:46 2025 GMT
Not After : Apr 14 12:01:46 2025 GMT
Subject: CN=57385dd1b78d45422cd79f0b8d02bedcd1b58779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:e6:3c:56:09:eb:1e:5d:d2:df:94:28:1d:
99:0f:f0:d7:96:5b:22:d0:f9:c8:bf:91:74:75:d2:
cf:aa:b0:47:aa:79:44:c2:4c:d7:3c:f1:58:0a:cf:
85:9d:f6:be:03:c9:23:1b:1a:e9:65:95:ec:cc:5c:
e1:d2:a0:31:a0:88:a2:84:2d:9b:7f:b6:d3:f2:14:
03:e4:44:e4:d7:53:cc:76:38:fb:ec:3b:26:f1:40:
7f:f8:b4:9f:e3:5f:13:5e:68:e6:73:9e:5e:28:e3:
9d:56:55:5d:e0:8a:b6:8d:08:82:3c:35:0b:47:9f:
3b:7b:9b:5c:d6:ea:a2:cb:0b:d7:00:c5:0d:9b:05:
65:d3:f6:1d:e0:a4:2d:0c:78:57:d8:a5:7d:7a:2e:
65:bf:e0:0b:67:18:24:cf:5a:89:6a:d5:ea:ff:7d:
ce:8a:e0:71:0b:9a:23:b6:d1:31:6c:ce:a2:75:de:
3b:32:b8:e7:4a:f2:82:3f:60:49:bb:12:e4:5e:7c:
df:52:b6:78:7b:4e:e5:b3:00:14:75:f5:55:1a:c7:
34:36:44:1a:34:4e:cd:18:c7:67:22:3b:15:c8:f7:
fc:16:8a:bf:13:c8:18:fe:94:e0:5a:b5:72:fe:10:
35:eb:92:57:d5:19:3f:c2:ec:ea:bd:3e:77:62:fb:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:5D:D1:B7:8D:45:42:2C:D7:9F:0B:8D:02:BE:DC:D1:B5:87:79
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:b1:2e:8f:9c:82:8d:0c:be:db:84:fd:ff:02:19:74:0a:
58:c1:74:e9:c4:f8:a9:64:44:fb:a0:85:e7:22:ba:fa:b4:eb:
ca:df:e2:77:50:ea:ae:b4:2b:fd:f3:a6:22:82:7f:38:63:4a:
6c:e4:a8:95:53:3f:22:e0:c0:f5:6e:a1:52:b4:8c:c9:d0:43:
52:d7:b5:bd:63:51:7a:2d:6b:93:12:14:e3:a0:d5:f1:74:be:
d1:ac:ca:58:d6:05:eb:6c:82:89:a2:75:cf:25:76:d1:4f:28:
e5:59:6d:f9:69:17:28:cb:67:28:03:40:ed:c5:da:8b:32:ef:
31:d8:8f:81:3e:d2:89:25:da:32:0b:60:dd:c7:30:1e:09:8f:
66:24:ef:76:a2:a5:93:d9:70:1f:2e:05:48:c8:aa:22:b6:5d:
b4:6f:2f:31:84:94:89:92:8d:a0:f3:a7:59:32:72:68:f9:c4:
36:d9:e9:40:3b:94:79:25:a8:43:52:e1:5b:ab:3b:d3:11:17:
ac:01:dd:be:01:12:e1:81:88:b6:e8:37:e6:80:54:d7:46:df:
92:61:6a:b8:80:70:8d:46:26:74:24:d2:d5:34:14:bc:f5:02:
50:ba:f3:e9:87:60:23:33:3a:92:75:9a:90:39:75:b9:00:c4:
d3:50:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net