Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: G+t6ZAkKno2i8ANpNyNxL3x5rbO8kV55GMdkjmUsmLE=
Subject key identifier: 7F:05:50:16:2A:76:10:37:4F:8F:C2:75:1D:19:36:52:48:1A:DC:D7
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 01962ECF8BB0F7116252D9F75FAF99CB8C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0DAE
Signing time: Sun 13 Apr 2025 11:01:15 +0000
Manifest this update: Sun 13 Apr 2025 11:01:15 +0000
Manifest next update: Mon 14 Apr 2025 11:01:15 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: xrcckzFZWAX2373J/UL6w7Wd5tAtCphv3yjVZYtPynw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:8b:b0:f7:11:62:52:d9:f7:5f:af:99:cb:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Apr 13 11:01:15 2025 GMT
Not After : Apr 14 11:01:15 2025 GMT
Subject: CN=7f0550162a7610374f8fc2751d193652481adcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:82:a4:35:96:8b:fe:ad:c2:ac:fd:bd:b3:
47:be:99:71:e0:ac:35:5d:37:6a:cd:d3:24:cd:fd:
52:d8:01:1e:db:e7:62:2b:04:3a:b0:ee:cd:fe:48:
f6:de:cc:47:8e:49:a6:a2:f3:b7:8c:a2:ad:49:1f:
f0:7a:d8:5c:97:c4:5d:52:e5:1e:c2:17:be:a4:a2:
e1:64:0d:53:10:b7:21:78:7f:6b:01:79:ab:fb:14:
bf:47:bd:ee:31:43:11:83:b0:ca:25:3d:8f:6f:8a:
74:0d:bc:d0:88:3b:d9:dd:47:c3:9e:c1:d9:82:10:
35:a4:08:26:c0:3d:89:90:6d:84:94:d4:8a:46:4f:
86:93:48:b7:fc:f2:b1:ec:a1:f5:f9:f0:9b:0b:ac:
f7:11:5f:88:e7:28:c8:d7:c3:2c:47:33:cd:a7:e3:
b3:68:97:72:10:75:82:74:f0:26:93:fe:4c:70:08:
f4:84:08:5f:83:e9:4c:e0:e8:f2:92:de:f4:15:63:
f8:8c:86:a9:b2:fe:46:5c:d7:90:ad:f7:9e:a1:49:
78:29:3e:dc:87:57:6c:fd:27:ee:09:42:81:7a:44:
5d:10:50:26:6c:0c:39:07:df:cc:69:5e:ff:94:dc:
1a:8b:df:7f:e8:fc:23:c3:38:2c:aa:47:f6:a5:e5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:50:16:2A:76:10:37:4F:8F:C2:75:1D:19:36:52:48:1A:DC:D7
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:df:a8:11:f3:e7:c8:62:5c:43:2c:d9:52:19:ce:db:21:
67:78:de:91:0b:aa:0c:bc:3a:67:b6:34:82:94:c2:27:bc:46:
0e:c0:fa:19:f6:d0:b8:4d:a8:e7:ce:80:3d:cd:fc:34:5a:a3:
82:4a:4c:ec:74:8f:30:c8:33:64:1e:a6:2c:37:04:02:a1:b3:
07:88:84:8a:02:02:3c:77:89:ba:79:a7:22:35:bd:13:72:f4:
d5:d0:cf:c1:37:fa:df:cd:33:b1:85:44:0c:c4:75:dc:28:7c:
f4:2c:bd:e2:94:29:25:b6:9b:81:12:a1:d5:36:37:34:4c:4e:
e3:d9:07:ba:9e:d5:05:2e:5d:18:48:2e:1f:31:70:fe:c1:e1:
e3:f6:d7:1c:1c:91:f1:93:53:1f:fa:c4:d3:c9:f3:40:b2:9f:
2d:51:b4:7c:c3:00:9e:f0:28:95:2b:12:36:9a:cb:06:ed:64:
6a:b8:b4:94:22:bf:93:7d:b0:6a:52:c8:10:09:18:4d:fa:32:
b0:69:49:1b:91:30:77:a7:b9:db:e1:7e:06:be:75:bb:0a:99:
7c:f2:a7:f9:86:1b:4f:57:03:75:7b:03:2a:8b:db:9a:21:c8:
a4:8c:ca:cb:2e:3d:e9:5c:59:00:5f:d1:28:a5:60:d5:d5:de:
d4:7c:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net