Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: LVKiMyWEzao0SAUIxzYxAskU6f3rNCzqw+y/R7dZQRg=
Subject key identifier: 42:2D:46:87:80:A6:11:35:04:C0:1D:D7:7F:31:31:B0:FC:D3:B3:C2
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 01962FAB6793F29874AA5CB07A41B64648F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0A83
Signing time: Sun 13 Apr 2025 15:01:24 +0000
Manifest this update: Sun 13 Apr 2025 15:01:24 +0000
Manifest next update: Mon 14 Apr 2025 15:01:24 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: doAVZcEYDFCaVJEvrVAOWAaJ/J9hn8wQfDAcORQ5NBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:67:93:f2:98:74:aa:5c:b0:7a:41:b6:46:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Apr 13 15:01:24 2025 GMT
Not After : Apr 14 15:01:24 2025 GMT
Subject: CN=422d468780a6113504c01dd77f3131b0fcd3b3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:db:67:c3:51:26:0f:0d:08:66:aa:84:39:
50:69:86:20:20:86:70:df:78:a9:18:11:d9:46:ab:
55:47:00:8f:ab:ad:3a:36:89:c8:89:be:91:d2:d9:
bd:26:b5:d3:72:48:d4:bc:4c:51:4e:4f:cc:bd:bf:
33:36:26:54:e5:a0:8c:bb:f8:c5:fe:88:e9:c7:4a:
4a:98:cf:fe:a1:ad:83:d5:fa:a2:81:d1:a7:d2:05:
ab:a2:a0:b4:0c:ea:2f:45:3d:5b:d2:b9:45:ba:8d:
4a:50:f3:f4:5c:3d:ac:6c:0e:9e:52:a6:78:33:ee:
f4:f7:f9:7b:85:10:85:f0:6a:1c:f4:cd:92:ba:bc:
5b:b9:70:98:46:23:8c:88:61:12:f7:c1:a3:92:44:
bf:02:48:69:98:55:6d:34:fb:f7:87:cf:17:2d:3c:
5b:91:c8:13:62:aa:23:af:ec:c6:f0:50:56:06:16:
3f:4a:52:b6:0f:6f:c0:1b:d6:6e:0b:0e:a0:6f:23:
a9:fe:38:7d:b0:5d:0b:45:0d:58:7c:e0:ab:4c:fb:
d8:ec:3b:dd:b2:18:c5:d0:f2:c7:d7:63:5c:da:29:
45:dd:3d:e8:11:34:73:98:61:6d:03:61:4c:68:b1:
c7:e3:43:4a:ea:64:8e:2a:e2:6b:f3:ac:9e:7b:dd:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:46:87:80:A6:11:35:04:C0:1D:D7:7F:31:31:B0:FC:D3:B3:C2
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:08:16:1f:7d:99:bd:11:7f:c4:a7:ef:3b:14:aa:a2:4f:5d:
fc:b5:a5:82:78:e1:11:1a:e2:27:d8:c9:e3:46:4c:75:e2:ae:
7c:b8:d1:de:6e:de:0e:74:d8:e0:74:b6:b8:08:83:13:36:db:
02:d5:76:58:8d:58:4d:e6:64:fa:46:d8:56:db:ad:23:d9:e6:
4e:e5:aa:a9:a8:de:ca:63:7e:d9:4c:03:f7:ec:1a:57:19:7d:
43:8f:56:43:58:e4:56:42:41:5c:4f:c0:18:09:0e:7c:c5:01:
c9:f0:8a:87:bc:76:b5:1d:a8:7d:01:f6:0c:ad:a3:dc:97:1d:
20:32:b3:0f:72:4b:d3:34:21:62:2c:66:24:71:d2:88:80:28:
6f:3e:2c:37:9a:9a:29:5b:16:7a:18:48:5e:5c:33:5d:dc:d8:
78:1c:1b:1f:2a:41:8e:da:88:28:eb:ad:c5:73:20:8a:c7:08:
60:b8:34:e4:20:9a:aa:ab:6f:b2:a9:68:e0:8a:b5:5f:df:7c:
a2:e3:e5:23:1b:04:44:7a:5b:06:77:f2:60:88:ff:17:0e:1d:
3f:fe:10:00:cc:05:28:a5:a6:c5:10:89:17:48:a5:84:31:67:
ca:26:95:07:16:a5:9c:d5:be:c6:a0:82:b3:f8:94:e8:a6:f6:
dd:cf:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net