Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: KT6qKIQUAURmg3qVczz1V+6gQOx9lzAIXVj7ocViyDU=
Subject key identifier: BB:F8:55:0E:01:83:41:6D:24:C0:30:47:69:3D:66:88:D1:8F:61:05
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 01962E98BB00FFFBA93D1982B4BC03470104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 10:01:23 +0000
Manifest this update: Sun 13 Apr 2025 10:01:23 +0000
Manifest next update: Mon 14 Apr 2025 10:01:23 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: ojdxCE9XBN9zr22q9/VTFr51sz8GdUR13nSMCEzCJvs=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:bb:00:ff:fb:a9:3d:19:82:b4:bc:03:47:01:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Apr 13 10:01:23 2025 GMT
Not After : Apr 14 10:01:23 2025 GMT
Subject: CN=bbf8550e0183416d24c03047693d6688d18f6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:7b:0a:81:cf:15:89:ed:02:3b:47:98:15:
13:2d:30:93:37:cf:4e:41:3d:df:bb:1d:2a:8f:d8:
f0:64:a9:70:b0:b9:7e:1d:e0:a1:e9:e0:03:e4:98:
ff:04:f6:d3:b6:65:bf:9a:f8:14:bf:04:e9:e8:f2:
37:43:1b:d5:45:d1:5b:22:aa:1c:0a:85:ea:f5:80:
0f:e8:eb:b8:62:c9:e0:ae:f6:42:d6:89:2b:b8:f6:
70:94:9c:23:37:a9:01:73:a4:c4:83:90:c5:ba:b1:
63:30:b1:b9:f6:d2:3b:c5:bd:3e:10:7b:c4:3e:ca:
db:a3:6e:4e:20:10:d0:a3:ce:c4:ea:30:50:9b:e7:
fa:54:d8:d0:78:96:83:63:89:b5:21:03:1f:64:22:
9e:32:09:8f:ab:44:b6:ba:9b:82:fd:ef:1b:e1:55:
a6:9d:fa:9c:0b:36:0f:28:01:04:50:41:fe:6d:22:
fc:e5:10:bc:f3:f5:4a:27:2f:4e:69:a2:b7:a3:02:
60:53:c5:57:16:62:4b:be:f8:f0:17:59:d1:8e:c7:
a7:1f:3a:63:67:77:87:bd:02:c2:c2:4d:b0:d1:c6:
06:0b:a3:bf:95:09:a5:39:f7:fa:77:26:7b:da:d9:
60:6c:03:8b:98:6c:c6:58:e9:12:39:ff:2b:a1:4c:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:55:0E:01:83:41:6D:24:C0:30:47:69:3D:66:88:D1:8F:61:05
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c3:52:af:0d:27:b7:b2:73:86:ff:c3:75:69:ba:aa:16:c7:
60:6b:b7:78:bb:79:e8:66:90:b8:26:04:3b:f1:0b:ca:e7:db:
8b:28:28:34:05:4c:75:21:ef:b7:dd:45:c6:3b:05:e1:2e:47:
ba:f7:36:2b:13:73:bb:3c:b7:d1:59:81:92:b1:78:a1:d2:d1:
c3:fc:a3:b4:7e:52:c6:21:de:51:b2:ae:5c:e1:04:c6:b3:d5:
7a:f9:bb:ef:3d:fc:7f:00:be:01:bd:a3:72:bc:35:03:f0:eb:
34:80:13:33:b1:50:cf:53:cd:90:91:09:e8:b9:91:ae:7c:34:
f1:fd:df:68:92:ee:3c:db:5b:7a:c1:75:0f:d9:7d:b4:fd:14:
0c:50:ec:59:0b:b4:ae:28:4f:67:0b:c3:fc:fe:53:1b:1b:90:
d9:54:df:67:70:8b:67:fb:06:34:43:13:8f:6d:bf:fb:b4:c8:
57:d7:10:49:e0:60:7a:34:8a:19:e4:31:d0:26:d7:34:ab:42:
bf:29:62:58:0f:d0:f6:bf:9a:47:68:63:db:29:12:c2:72:68:
b3:29:50:ba:16:67:53:d3:4f:b4:72:60:75:0e:78:1e:87:c3:
3c:6f:26:88:5f:b9:ab:3b:9d:58:d5:3f:9b:84:fb:ea:3e:6b:
50:29:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net