Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: TgoS4Jydima7rF0pshLMtdCrmU90qNultn791jONz18=
Subject key identifier: B4:99:EA:53:36:24:F8:06:19:17:C5:DE:6B:3A:9A:01:9F:48:E4:29
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 01962DF40FE5509857BCAB4B5359AB42DDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 0713
Signing time: Sun 13 Apr 2025 07:01:31 +0000
Manifest this update: Sun 13 Apr 2025 07:01:31 +0000
Manifest next update: Mon 14 Apr 2025 07:01:31 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: 9JH7t4cEHEyncvNVDT2A+xb2YhP2K2YNQ9PolQKOZd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:0f:e5:50:98:57:bc:ab:4b:53:59:ab:42:dd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Apr 13 07:01:31 2025 GMT
Not After : Apr 14 07:01:31 2025 GMT
Subject: CN=b499ea533624f8061917c5de6b3a9a019f48e429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:e5:5b:cc:51:ac:47:4c:70:2f:cb:6f:b0:
6d:49:da:0a:06:e6:5f:87:a9:27:62:de:10:2a:0a:
9f:7d:12:db:8d:5f:cb:a2:d1:47:8f:c9:15:36:10:
b6:39:a6:40:73:9e:79:5a:a2:cc:0b:f9:af:cb:71:
60:23:5d:a0:ee:ad:72:2c:54:a0:fb:4a:ae:5b:45:
53:2f:f8:66:fc:6e:ee:db:05:58:b0:cc:89:7f:8a:
73:4e:2b:95:0a:93:a4:9a:f9:bb:0e:ce:b2:fc:82:
7b:ad:bf:98:83:4e:35:35:5c:ef:2f:1f:b0:e2:9f:
d0:f4:58:b7:e8:97:ec:b3:2e:00:6f:81:13:7c:41:
b2:fb:7c:01:12:ea:d0:52:c4:8e:47:8e:e2:68:33:
5a:34:75:12:5a:84:3e:54:40:32:bf:a9:53:e0:99:
40:d8:35:48:cd:2a:94:27:19:dc:4a:0b:2c:bf:e4:
42:c6:9c:31:27:c3:29:38:2e:d5:0a:b0:c3:9a:01:
4f:45:64:13:9b:83:44:ea:ad:f7:08:26:fe:72:fb:
f1:3b:37:1e:27:59:8a:27:38:3f:e2:e2:9c:6d:d7:
c7:3a:93:1c:bd:03:90:81:3c:41:a7:f4:16:b8:48:
05:db:51:f1:3b:f9:df:29:05:66:38:72:3c:a4:40:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:EA:53:36:24:F8:06:19:17:C5:DE:6B:3A:9A:01:9F:48:E4:29
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:93:a4:bd:fe:e4:47:a5:15:37:e5:fa:5d:77:23:4d:e1:06:
03:fc:aa:64:d0:2f:68:ce:4f:ad:fd:3d:56:8e:cd:4a:26:35:
99:d8:f3:b8:2c:36:f1:de:2a:33:98:4c:c6:3c:46:65:22:c3:
21:57:7a:24:bf:2b:63:5e:4f:f1:de:b4:e3:2b:ff:de:48:e1:
04:f1:63:f8:24:8e:96:13:2c:c0:03:5b:76:f0:ed:71:42:24:
1a:ac:b0:6b:3d:10:a7:ee:9b:2c:71:a7:fd:5b:e1:9e:1f:07:
53:07:6b:b1:97:e3:88:95:be:ae:ec:d3:3e:d8:c0:9c:b6:32:
a7:e1:bc:f7:49:9d:13:ec:2b:ce:b4:62:b0:b8:ec:dc:c7:da:
d2:09:a6:f9:e8:89:6d:c8:8c:c8:b0:34:f1:1e:4c:6b:47:ff:
b2:7d:2a:29:e1:96:4e:d0:ed:44:2c:13:36:a5:02:37:fb:56:
dd:4b:98:2f:81:ed:30:f7:e3:0d:c3:7b:ad:17:70:7b:fd:0f:
81:9f:a7:7d:64:93:03:2c:98:d0:fa:f4:53:54:30:e7:3f:cb:
42:00:25:3d:9c:6e:48:11:e8:4d:1a:ec:b7:69:7b:0c:8f:30:
db:36:65:04:58:33:66:73:fe:65:05:ef:14:29:8d:86:ef:5e:
8b:8c:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net