Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
File: apz1pXvHRW10C0Xh_gjjaamhcUo.mft (raw, json)
Hash identifier: JYf2tDC2UKLmRQ+wqP5zF3r9XaOe7Emn99SvOjQY844=
Subject key identifier: 29:7A:D2:AC:B9:3F:AC:9F:FA:56:1B:9A:E7:94:29:9B:B9:4A:AB:A9
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 019548233F56335241A1385E7F3A3B9A14B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
Manifest number: 1473
Signing time: Thu 27 Feb 2025 16:00:24 +0000
Manifest this update: Thu 27 Feb 2025 16:00:24 +0000
Manifest next update: Fri 28 Feb 2025 16:00:24 +0000
Files and hashes: 1: W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa (hash: V/XfEAPaTzOxXEzXQ9Ey7h7BlTmoHc+eL3OCteRrtGo=)
2: apz1pXvHRW10C0Xh_gjjaamhcUo.crl (hash: DamdJoTvT6OQrTa3Lza2bPKuPPK+IGJKAVxbnq/4BAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:23:3f:56:33:52:41:a1:38:5e:7f:3a:3b:9a:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Feb 27 16:00:24 2025 GMT
Not After : Feb 28 16:00:24 2025 GMT
Subject: CN=297ad2acb93fac9ffa561b9ae794299bb94aaba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8c:80:51:55:4d:63:a5:c8:ac:42:4b:31:c0:
80:b1:02:7c:f4:a0:aa:b1:40:f7:57:ca:bb:ae:bf:
05:54:11:1b:39:10:7c:0d:a5:12:f8:7e:8e:fc:3f:
11:d6:3d:06:2e:68:df:41:9f:f2:b4:52:69:58:4c:
cf:30:bc:9b:3e:11:1d:db:6a:60:3e:0d:a6:17:ab:
10:4d:72:a3:e4:b9:d1:0d:c6:f0:cd:f4:65:9e:a4:
3f:89:88:2d:3f:20:d1:f9:88:02:99:8a:ee:81:6a:
45:b3:8f:50:1d:89:6e:7b:ff:e9:77:47:32:86:cd:
c9:b8:42:35:4a:d9:a4:55:4f:f9:ea:93:0a:3f:12:
0c:4c:29:32:10:41:3f:30:6b:8f:0e:a5:2f:68:4c:
8d:88:9b:7d:f5:7e:d0:93:f1:1d:a8:1f:92:43:97:
84:a7:00:77:7c:a3:d5:69:b3:be:6d:b5:2e:82:b7:
d0:55:26:24:03:ad:c2:61:1e:67:d3:de:04:ba:cf:
34:f6:11:7f:bf:e4:c1:5b:60:ec:bd:d2:cc:cd:77:
04:11:4e:01:64:32:bb:40:6c:79:80:be:16:90:99:
80:6c:02:aa:06:6a:d0:4f:14:3f:cd:dc:88:b3:f4:
88:36:d0:a1:9a:6e:05:d3:04:57:d9:c5:2f:28:1e:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:D2:AC:B9:3F:AC:9F:FA:56:1B:9A:E7:94:29:9B:B9:4A:AB:A9
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:95:13:a8:ab:b0:2f:27:14:13:f3:c9:ca:69:47:c8:7f:d7:
7e:93:52:18:69:0d:12:75:bd:67:a4:3b:94:53:22:3e:cb:3c:
72:42:69:4a:0c:2a:87:a7:f6:d5:fa:f7:30:04:66:fc:af:5b:
a3:33:28:6b:0b:e9:d3:97:a1:e9:13:0d:fd:a4:52:3c:ad:e0:
12:2c:eb:42:a8:11:2a:f0:9d:f9:a5:7e:cd:a7:f0:ce:35:c1:
a9:61:cf:19:93:23:1c:af:0d:68:31:f0:15:90:4f:63:05:2f:
95:16:77:0a:7e:71:39:de:cd:bb:97:0f:2f:21:45:c9:9c:85:
31:16:18:8e:cd:c1:7b:44:cc:37:ee:7e:75:9c:38:96:ea:c2:
23:0e:f5:24:cc:31:3a:c3:6f:c4:0d:50:75:7b:c4:d6:e2:50:
33:73:e9:b3:10:1e:2e:bf:0f:3f:79:66:03:18:23:3b:82:67:
53:3d:c3:ee:6a:40:2c:ac:4e:16:71:62:94:c7:50:b5:29:d7:
7e:a4:32:43:ea:38:81:74:2c:e7:73:08:f6:68:b4:bf:b8:be:
fe:c9:da:3a:bc:05:cb:bb:89:a4:33:15:a5:09:07:d1:c4:f3:
2f:d3:7e:05:dc:db:50:be:cc:b7:4e:5a:a6:e8:07:db:3d:f4:
f9:94:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:52 2025 by rpki-client on console.sobornost.net