Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: 5EbmueccLspSGCnM3DazWNzTUYVGNBrj7iDkvx2VFYI=
Subject key identifier: 98:8A:A7:E4:1C:7B:B8:50:1E:40:9F:87:E2:AC:09:9D:C5:9E:94:13
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 01962F07298492DD0E46712F6081D1C164A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 12:02:00 +0000
Manifest this update: Sun 13 Apr 2025 12:02:00 +0000
Manifest next update: Mon 14 Apr 2025 12:02:00 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: BOWLc9aZAhJkvklsnnG9/lGaxC8bkT8GncnZDh0+rcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:29:84:92:dd:0e:46:71:2f:60:81:d1:c1:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Apr 13 12:02:00 2025 GMT
Not After : Apr 14 12:02:00 2025 GMT
Subject: CN=988aa7e41c7bb8501e409f87e2ac099dc59e9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:e7:23:10:2a:e6:b7:a3:ec:a7:26:5f:57:
83:37:9f:c7:b4:db:71:08:04:8b:1b:33:47:d0:2c:
97:e6:98:ca:c4:16:3e:a9:20:fb:65:1f:48:c5:5e:
b7:68:2d:66:d3:98:af:b1:56:a0:b3:66:6e:b0:b6:
b7:4a:99:62:6a:c0:81:f3:db:a0:0a:eb:a6:9a:8a:
43:af:a5:c1:73:a9:c5:e7:c5:0b:ba:56:c3:2f:69:
05:ed:d2:32:11:3e:09:65:09:01:2c:78:e9:5e:2e:
5e:f0:cb:9d:e7:d4:a4:27:4b:cf:0b:d2:04:b7:1d:
f6:d5:11:ec:cb:d2:c1:a2:da:27:26:87:9c:bd:3b:
42:7a:f6:3e:e9:ef:8f:14:d3:27:63:fe:24:10:ca:
11:c3:84:68:f7:70:42:fb:35:11:8b:8b:46:46:01:
a9:0c:1e:0a:8e:58:3e:7e:b1:90:44:57:dd:f4:f2:
60:50:9c:1c:51:10:b6:04:05:4d:1f:02:24:bc:a1:
86:67:fa:70:86:fe:3e:78:36:bc:65:50:49:e4:ef:
59:27:10:2c:4d:10:4d:9c:c4:b4:56:c9:28:7d:03:
71:6a:77:5a:a3:de:86:1c:87:73:0b:c5:b1:36:1f:
99:c2:ce:f6:7c:d0:52:5f:b2:69:92:bf:fd:66:88:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:A7:E4:1C:7B:B8:50:1E:40:9F:87:E2:AC:09:9D:C5:9E:94:13
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:71:ab:de:1e:44:58:00:73:0a:35:a0:58:e3:14:dd:a3:71:
5d:1a:1d:6b:ed:33:f8:8e:47:3e:42:dd:57:ae:a3:0d:fc:e5:
89:61:a2:4c:6b:15:37:6f:45:0a:27:2d:64:cb:a3:ce:14:44:
3c:72:51:cd:ef:75:31:e3:2b:3b:55:91:ef:7f:39:21:87:1e:
73:44:af:7a:58:5e:45:5a:34:23:07:71:34:0e:eb:5c:31:89:
60:34:80:9f:6d:73:27:fe:c5:e6:a2:20:76:20:d3:91:94:1e:
c8:2d:4d:8d:7e:8d:11:56:42:eb:55:49:9f:cc:41:1a:a8:5f:
7b:a4:7a:01:29:ff:fe:d4:24:ab:a9:29:e4:6d:5a:00:64:dc:
1f:62:96:47:da:96:12:99:fe:d6:be:a4:2b:2e:2e:80:6d:06:
07:df:2c:c1:ea:19:99:60:27:22:ef:88:1b:31:b2:fa:dd:0f:
8a:ff:10:cf:3a:81:d6:4f:13:ad:f2:ec:f3:8b:39:ec:5a:95:
8b:ab:dc:aa:76:5a:00:e6:3b:b6:08:02:f8:59:b0:f4:5e:a6:
b7:50:3f:28:97:9a:54:79:54:71:93:e9:7b:0c:9d:cf:d4:63:
06:f5:e0:8a:15:86:08:7d:59:a3:a8:d5:9c:cb:94:ec:cb:f3:
06:d6:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net