Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: Tk7+3X7Er1FW3PSi5eka5f7zpiF+X9hQ9ORme1Pd/Fc=
Subject key identifier: 9E:BF:E5:9B:02:9D:D7:2C:92:BD:CF:34:D6:79:4F:E0:6C:EB:D3:4A
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 01962F3D6F3834B013A5F5DD0C525B346CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 13:01:17 +0000
Manifest this update: Sun 13 Apr 2025 13:01:17 +0000
Manifest next update: Mon 14 Apr 2025 13:01:17 +0000
Files and hashes: 1: ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa (hash: YbnnkO0HBRUHzkxo3r5IQRGQe30uxmuUwdAmB24B6sc=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: x/tZwcPzifVLqfrFTVVEY2AQBecQ4Eg/DYTDNW0qicw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:6f:38:34:b0:13:a5:f5:dd:0c:52:5b:34:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Apr 13 13:01:17 2025 GMT
Not After : Apr 14 13:01:17 2025 GMT
Subject: CN=9ebfe59b029dd72c92bdcf34d6794fe06cebd34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:a3:08:92:ab:8a:8a:85:94:a1:a3:09:37:
3c:1a:da:29:4d:94:af:80:04:73:d5:49:70:40:27:
8a:cd:7b:5a:a9:91:ba:12:d2:83:26:d2:6c:31:cd:
76:b6:e2:d1:38:17:72:ec:a1:b6:df:6a:55:e4:3f:
dc:f6:ac:90:49:49:b9:e5:e9:b1:71:fe:eb:af:ba:
36:58:02:51:26:d9:7d:b6:d2:d8:56:fd:b2:30:bd:
a4:d4:c0:34:5b:8f:ad:7f:14:53:3d:00:a2:af:ac:
9e:a5:6d:3a:c3:94:ad:2d:24:e0:d0:66:ec:a5:2f:
ed:ca:f8:50:4f:c2:16:b4:7c:b7:11:a0:2b:54:91:
f4:18:a3:f1:43:10:51:2d:ec:f4:59:41:3b:9a:f8:
f6:6b:74:ba:41:5c:19:e7:4e:9c:dd:58:3d:d1:cb:
8f:aa:56:ac:c3:8d:37:24:18:29:d6:db:f9:1d:c6:
0c:58:61:b5:42:b3:d7:8e:61:34:3d:87:12:f0:0b:
9e:5f:a4:49:72:e3:31:85:10:8d:f8:2e:14:57:98:
81:a8:01:01:56:2a:23:bd:e7:4a:6b:67:6f:21:a0:
c5:a9:ef:da:53:83:56:d6:63:ce:61:ec:02:e3:2c:
da:5e:27:a7:2f:4d:27:47:f0:5c:83:0c:a7:4a:a9:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BF:E5:9B:02:9D:D7:2C:92:BD:CF:34:D6:79:4F:E0:6C:EB:D3:4A
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5d:3f:42:16:82:88:4d:74:8f:a8:f8:16:c4:ca:f3:c8:99:
a5:02:a1:41:25:b8:5c:e0:e4:30:98:45:dd:58:ab:c4:20:c9:
e1:b9:6f:5f:b9:87:8e:e5:db:8a:5b:59:00:4e:65:e1:31:da:
63:fd:be:e5:1a:03:a5:70:af:9f:d2:4f:1a:ac:7c:82:cc:5a:
8c:da:61:e0:52:71:bd:c0:ad:42:f4:bc:50:a1:0d:24:ac:d5:
02:32:ab:d4:bf:a4:59:03:06:bd:23:6e:a4:ca:10:28:92:03:
06:8a:64:4c:4f:8d:5a:ab:a3:61:29:14:4e:71:bf:5e:6f:64:
7f:9d:e3:b4:43:34:02:dd:62:a1:d7:6e:68:a4:fb:ef:0d:af:
53:cc:d9:f3:cb:64:51:3a:6d:2e:e9:7c:8a:5a:e3:f5:3a:79:
f0:8c:b3:5a:83:28:12:3b:48:d5:56:7b:87:4a:ab:1e:c4:55:
81:70:ac:87:10:15:f6:b4:d1:cf:3d:cd:7e:7b:63:a0:f9:33:
0d:67:d7:ca:3c:da:7d:41:2b:54:3c:9a:dc:63:26:1c:e7:af:
4b:df:72:c6:ee:d9:e8:91:ae:ea:a0:52:09:16:7e:3b:22:70:
35:2d:ca:b9:6f:e8:8b:fe:81:bc:54:d8:d9:17:f7:14:df:d1:
c5:a7:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net