Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: bc13HEDLXKpB0bhoZ6jDRMdiATUNof1vDvogQzsoymo=
Subject key identifier: 09:F9:46:DC:01:69:78:5E:34:68:EF:83:E5:89:10:EB:42:48:EA:47
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 01962F06D63338BCBAA865E1ACDFE7BAF8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 12:01:39 +0000
Manifest this update: Sun 13 Apr 2025 12:01:39 +0000
Manifest next update: Mon 14 Apr 2025 12:01:39 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 6T1DdxPgIVPhg43k8RXRiDIE/Q3ynkIPkrLqLGY6KQU=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:d6:33:38:bc:ba:a8:65:e1:ac:df:e7:ba:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Apr 13 12:01:39 2025 GMT
Not After : Apr 14 12:01:39 2025 GMT
Subject: CN=09f946dc0169785e3468ef83e58910eb4248ea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:8a:5a:1a:08:55:83:01:98:fa:50:e7:18:
51:b7:94:1a:11:3a:00:f0:53:47:d9:8b:fb:5f:4c:
a4:d4:f7:ae:93:02:a2:b1:49:dc:6e:eb:15:3e:c2:
9f:48:ac:5b:81:71:e9:26:d1:07:8f:62:eb:e0:36:
87:0e:3e:39:cf:ea:8a:eb:ee:f9:01:9c:03:96:51:
51:35:e4:dc:40:80:80:7d:f3:97:ad:1a:e8:84:ff:
aa:d0:51:d8:ff:c5:78:cf:d8:8f:75:c1:2f:46:5e:
aa:d4:ef:e7:34:a0:ed:59:ab:5e:25:27:b3:46:cd:
1a:45:a8:a0:04:21:0e:95:3a:26:8c:03:cb:ee:43:
98:8d:50:34:f8:c0:3e:3a:27:a3:36:91:a9:6e:da:
ae:bf:e8:ac:e7:f3:9d:48:bc:14:ec:d7:76:26:9b:
28:10:7f:93:71:14:d4:1e:7c:28:1d:1d:81:e6:bb:
12:de:87:3e:0b:ad:12:7c:84:79:b7:a1:9c:ff:3c:
f1:e2:55:80:4a:4c:62:b1:af:e8:35:16:33:29:95:
05:12:1b:76:f4:a2:3e:52:09:a6:e9:5b:85:f3:c8:
c4:01:9a:bd:8b:96:5b:f5:7c:e3:3b:75:45:78:85:
e3:bc:02:e0:f8:39:a6:61:a2:95:72:a4:de:cc:89:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:46:DC:01:69:78:5E:34:68:EF:83:E5:89:10:EB:42:48:EA:47
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5f:06:da:5a:b4:aa:47:ed:12:5d:34:b1:8b:ab:29:14:08:
49:30:24:17:55:e6:54:21:97:15:77:59:73:1e:59:c2:48:30:
d2:98:f6:68:34:82:16:0b:b9:0a:31:64:1e:df:94:f4:29:c5:
1f:3a:12:ba:08:e5:2b:84:d8:dc:14:f5:84:f7:bc:ad:14:1e:
25:d0:b6:3f:9f:6a:88:a4:36:52:71:d2:1a:20:fc:4b:84:bf:
7b:80:89:78:6f:4f:eb:f4:67:8b:3f:21:b8:a9:d6:1d:b5:72:
ed:b7:e8:35:39:2e:0f:29:fa:06:39:36:49:16:22:bc:eb:ff:
f8:3e:0e:0b:3f:89:55:a1:4b:52:a0:c7:ec:4a:d3:43:ec:21:
1d:18:83:70:d7:46:ad:d7:6a:b6:90:f0:8a:51:6e:87:c5:b5:
2d:a3:4d:38:83:5c:08:51:67:98:77:00:ef:29:d4:4a:9d:c5:
8c:2f:76:48:57:d3:36:ec:d6:44:7a:c9:19:a8:6c:00:40:29:
2e:ef:d5:91:01:e6:50:b7:d1:c7:e0:13:ef:59:2d:1e:0d:30:
b1:a6:9d:9e:07:6a:fc:4a:20:81:58:38:d5:75:5d:41:0f:8b:
c6:14:1c:cb:07:83:5d:01:a6:54:0b:96:9d:72:b1:1d:23:22:
1e:06:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net