Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: OOdflJxLClRnD1lWIx/pFXOblGtA/6fY5OxYWtFgaJQ=
Subject key identifier: F4:5B:C4:FB:12:C3:B0:4C:12:CC:CE:32:20:1E:17:00:E5:CE:B7:42
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01962DF3FC85E93A0AA1B485F265FDE54588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0899
Signing time: Sun 13 Apr 2025 07:01:26 +0000
Manifest this update: Sun 13 Apr 2025 07:01:26 +0000
Manifest next update: Mon 14 Apr 2025 07:01:26 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: dYhLCkA7omXb++GHe7ftLEIwooJw7WKEgWQrqh3D3uY=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:fc:85:e9:3a:0a:a1:b4:85:f2:65:fd:e5:45:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Apr 13 07:01:26 2025 GMT
Not After : Apr 14 07:01:26 2025 GMT
Subject: CN=f45bc4fb12c3b04c12ccce32201e1700e5ceb742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:76:3c:a9:1c:f6:01:78:2d:25:0b:23:d0:
8a:42:f4:24:f6:ab:b9:92:29:69:25:96:09:99:7f:
72:b3:f3:04:f5:e0:f2:e4:93:2f:d4:fb:5d:36:52:
b7:8d:43:ad:46:44:2e:e2:f8:02:e7:56:5e:01:91:
11:c8:85:81:c9:7c:7b:9c:c5:3c:d5:56:16:06:67:
b7:0a:14:95:f5:30:f4:f4:6c:06:ea:fd:b1:09:ef:
1c:69:1f:d4:7b:f6:e6:89:61:56:3d:51:5d:5c:6d:
bd:96:5b:4f:3a:d0:88:f8:34:5a:60:6e:12:c7:b6:
8b:e4:db:3b:68:51:12:50:ee:58:86:a7:98:5a:7c:
b7:fa:70:41:c7:87:69:35:59:25:ed:ba:9c:16:3b:
87:f4:2b:5c:72:79:01:73:ff:da:a5:01:3a:65:7a:
42:eb:70:0a:69:c6:ee:c4:a0:0b:d9:5d:1a:70:a6:
a8:f4:63:58:dc:4a:49:c8:e0:0e:6b:eb:e5:bc:43:
e0:fb:24:46:79:d3:16:3b:51:59:08:e6:97:e0:bd:
9b:81:2a:03:69:e7:40:c0:fb:4c:b6:88:34:02:19:
2f:51:b2:c0:91:1a:43:d4:b2:fe:cc:3b:b1:58:9f:
1c:1c:bd:23:46:ba:15:76:54:8c:f2:f8:6d:94:25:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:C4:FB:12:C3:B0:4C:12:CC:CE:32:20:1E:17:00:E5:CE:B7:42
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cf:ea:7e:f4:89:d8:fb:ed:20:a7:63:92:c3:04:08:74:51:
b9:53:f8:7e:8c:db:15:15:3c:63:60:38:31:69:c9:dd:24:64:
ca:8a:78:1f:06:c1:80:34:f7:df:b4:0f:c1:d0:7b:b0:28:1d:
2d:22:99:31:b7:a3:93:4c:b5:ca:92:8f:bf:be:5d:a5:56:b4:
3a:e0:98:ae:bf:67:92:17:16:43:d2:67:90:4e:a0:c4:8b:96:
0c:80:bc:ad:bb:60:6c:6b:5a:f2:17:e1:19:92:5b:49:9e:ab:
05:a1:ba:01:61:80:1d:2a:95:7a:45:09:fd:6f:9c:f9:0f:5c:
c6:1e:db:ac:39:d4:67:4c:71:3f:8a:0b:a0:84:4e:25:fe:60:
0d:f7:3d:f1:74:a1:aa:2a:d3:8a:bd:b5:24:e9:66:c8:c6:2a:
8b:4c:1c:3d:98:44:35:b9:e7:d7:65:91:91:ec:42:3d:d6:ba:
57:e8:75:5e:81:d7:76:39:69:c0:0f:c3:93:38:94:64:d5:d8:
af:37:5b:09:f9:0a:86:1a:66:4f:6f:3b:81:82:be:80:36:6d:
82:b8:53:5c:31:4e:39:9d:9e:99:fe:86:51:f9:00:ce:77:00:
67:ed:c1:db:75:00:47:45:d0:05:23:88:5f:3a:34:24:29:80:
3e:12:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net