Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: dfaH3F7+S0VV0nwANmlxfIWnY8HgFdTkl7OBBRPoGYU=
Subject key identifier: 85:FA:82:17:02:15:EC:2C:6B:7C:AF:3C:AC:4C:CA:B2:92:CF:0C:95
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 01962ECF96C3267F13D686E57E4C17364164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 0270
Signing time: Sun 13 Apr 2025 11:01:18 +0000
Manifest this update: Sun 13 Apr 2025 11:01:18 +0000
Manifest next update: Mon 14 Apr 2025 11:01:18 +0000
Files and hashes: 1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: mGXh+zquUL+iDTCF+78Y9qnEb4zDgDOediO9zIua+wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:96:c3:26:7f:13:d6:86:e5:7e:4c:17:36:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Apr 13 11:01:18 2025 GMT
Not After : Apr 14 11:01:18 2025 GMT
Subject: CN=85fa82170215ec2c6b7caf3cac4ccab292cf0c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:be:c6:d8:3e:3b:f7:45:84:e1:2a:6a:bb:
e6:a7:34:c9:7d:1c:ef:f3:a2:7a:f7:71:0e:5d:1f:
d1:e4:39:28:c9:a1:2a:9c:b3:d2:71:81:f3:05:f7:
87:eb:01:9a:92:4c:13:e6:d3:d6:98:29:88:f0:21:
74:93:31:1b:f9:e9:97:ad:57:03:63:1a:2b:d8:e6:
e1:cc:f5:05:bc:96:12:25:a5:a4:63:15:b9:b5:96:
bd:59:cf:25:40:c3:72:1d:64:f6:8c:f2:fa:5c:dd:
0c:e0:41:e9:9c:af:d6:a0:72:32:58:5d:42:a2:8e:
93:52:80:38:54:71:ce:5f:0f:de:4c:4d:ce:8b:00:
d8:4d:a5:bc:d4:97:62:ba:e7:c0:15:11:a1:ef:49:
fa:b4:48:6a:38:8a:0d:ae:ec:92:7a:45:ad:97:e3:
f4:a6:2e:ff:49:b2:4e:c6:66:cf:36:5e:d0:f0:0d:
68:f7:0b:e5:e9:e3:c0:68:b4:ab:d2:57:79:ba:87:
e5:df:1b:03:cc:a8:15:9a:92:aa:c4:34:3a:a0:a4:
02:f0:e1:f9:e8:da:3a:d6:fa:d6:96:24:27:d3:7e:
fc:8d:88:1c:b1:1b:4c:80:fb:5a:7f:6d:48:3e:c1:
41:eb:00:3d:a5:c6:4d:ea:cd:38:02:f3:76:54:2e:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:82:17:02:15:EC:2C:6B:7C:AF:3C:AC:4C:CA:B2:92:CF:0C:95
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:b0:2b:ea:cf:ab:d0:58:99:08:1d:a4:f2:33:19:4c:ba:
51:4f:45:a2:a7:8a:43:08:64:7a:3f:45:62:1a:88:b5:69:6e:
bf:79:28:0e:d3:40:7d:79:0b:0c:4f:c4:1c:0d:e7:50:e9:0a:
17:b6:6b:a3:e6:8f:be:6a:9f:6f:98:c5:bf:f5:f8:ad:e9:d1:
32:f3:24:28:b0:b3:1c:0c:92:38:d8:d9:7a:d7:7d:2c:f7:7d:
5b:dc:5e:36:f8:db:ab:f2:80:fa:95:14:95:f1:80:bf:89:42:
fc:72:8a:02:a8:31:29:74:be:5b:c5:01:d7:96:82:37:b0:83:
42:65:40:9a:7d:a6:64:2a:8d:3b:db:82:b3:9f:b8:1c:2d:05:
94:f6:b3:96:28:73:28:1f:cb:45:b6:2b:b9:86:f6:56:f8:8f:
09:5f:7c:56:2c:3f:19:30:45:26:0f:52:a6:16:5b:80:bd:fc:
39:79:d8:a1:51:54:63:b0:b5:55:7a:af:8a:b6:ed:88:f3:ee:
c6:66:ed:ca:6e:cf:6e:8e:2c:b2:58:f1:42:f1:86:a9:ca:01:
9e:88:e6:4e:45:fa:00:37:b8:9d:0f:49:2c:53:1e:a6:af:b7:
bb:37:15:7c:5d:4c:6e:c3:3b:5d:b7:09:20:ff:17:13:65:26:
77:9e:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net