
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: 1jDsGIzsrtrWebUXth77kkoOVBrY8dBM5BNS3SF06vI=
Subject key identifier: 42:E5:C8:DD:CA:4D:69:73:09:C5:76:8A:DB:D7:E5:60:9E:45:EC:FF
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01962E987A41A6228072B59852654B00EA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: A6
Signing time: Sun 13 Apr 2025 10:01:06 +0000
Manifest this update: Sun 13 Apr 2025 10:01:06 +0000
Manifest next update: Mon 14 Apr 2025 10:01:06 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: cRso7IfyBakwMHSpPKXZA5tZ47+Q6XBU8o2D+fxuZm8=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:7a:41:a6:22:80:72:b5:98:52:65:4b:00:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Apr 13 10:01:06 2025 GMT
Not After : Apr 14 10:01:06 2025 GMT
Subject: CN=42e5c8ddca4d697309c5768adbd7e5609e45ecff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:39:a0:f8:2e:26:9a:40:a5:0e:8e:2c:7e:f0:
41:9f:fd:e4:ee:fd:7a:7c:dd:ed:63:f8:e8:57:c5:
d7:e9:b7:d8:29:62:cd:19:57:d0:98:32:14:14:fb:
8d:db:65:1f:3f:5e:ec:44:da:d7:3e:79:b0:01:bb:
66:0c:00:e3:74:d7:a4:80:06:7e:ad:7e:73:83:fd:
94:8f:13:47:a8:ac:d9:1f:e1:a2:82:6a:80:22:59:
55:52:08:bf:99:a0:0e:44:c8:9c:7f:00:43:4d:ee:
07:40:e9:50:46:bf:62:c4:d6:39:79:e7:c2:43:40:
00:d2:f0:af:27:e8:ef:69:53:03:b5:bd:24:29:40:
c9:14:79:eb:b4:09:45:ef:99:87:a0:1c:67:07:44:
97:f7:fa:64:ce:29:24:5f:bf:b0:37:f3:0f:a8:d1:
3d:b2:61:ec:df:6b:24:3b:33:bb:a7:e1:45:c5:85:
92:de:07:c8:27:60:9d:9e:b9:34:47:a9:e8:a9:9c:
50:c6:e3:2c:0b:9d:36:fd:7a:6c:89:19:20:d6:f3:
b2:c5:f8:c2:41:80:76:8f:c8:65:e7:d6:26:e7:2a:
13:82:2a:87:b4:23:54:ae:1d:28:b0:ac:9b:f5:6d:
fe:20:c4:d4:48:e6:f7:4b:6c:b5:15:c5:e3:9b:c9:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:C8:DD:CA:4D:69:73:09:C5:76:8A:DB:D7:E5:60:9E:45:EC:FF
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6e:79:5e:df:cc:84:9a:48:1f:49:6e:e5:27:d1:e0:ca:a3:
cd:1f:7a:61:38:6b:4e:a0:14:f7:8c:64:23:78:05:e5:6c:61:
f2:16:1e:d2:6c:50:1d:3b:2e:6d:42:73:6c:a6:90:e2:61:ac:
4b:c0:48:88:05:13:95:0a:db:65:71:49:a0:b2:bf:f9:12:39:
f5:42:4d:a5:7e:19:e9:94:93:bd:90:62:ff:18:4c:6f:98:5d:
e7:6e:ac:fa:5f:05:60:ff:10:18:08:e2:a6:75:e7:77:6e:31:
87:4c:d7:46:88:bd:47:35:c1:f8:35:71:53:b5:16:5d:7e:9f:
64:c5:47:cd:19:cd:5d:98:52:db:86:31:1e:7c:dc:25:57:76:
24:68:6c:65:e6:56:eb:76:d3:21:5a:e3:b7:3e:8c:12:1f:b6:
d9:1b:9c:1d:19:ab:49:74:dc:fd:c7:45:e6:68:bd:96:1b:e0:
a4:ed:eb:c5:12:af:ce:19:a1:82:ea:aa:1c:36:ec:f0:ff:3e:
05:7b:81:c2:8b:ae:e7:04:5b:c6:5e:8e:29:d4:c0:af:5f:53:
7e:4b:d6:5f:f4:2c:80:c0:bf:5a:f5:d4:60:e2:5a:75:51:8e:
9b:02:ac:68:6c:b4:7b:fc:dc:10:40:9a:d6:ba:76:c9:a4:c1:
d0:3e:6e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net