Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: uJbTGT1TcvLMWrBkNH4hhIik31qTcH5RCgl3OhFymfQ=
Subject key identifier: 6D:7F:56:8A:52:E5:24:47:29:FD:29:5F:85:DB:E7:B0:54:DF:BC:67
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 01962E996AFF7333DBCB4F5E5522870DBD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0934
Signing time: Sun 13 Apr 2025 10:02:08 +0000
Manifest this update: Sun 13 Apr 2025 10:02:08 +0000
Manifest next update: Mon 14 Apr 2025 10:02:08 +0000
Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: Et8zYNya+zh+E4hm54e3YegRynBO3aaPKsBNyJSvLdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:6a:ff:73:33:db:cb:4f:5e:55:22:87:0d:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Apr 13 10:02:08 2025 GMT
Not After : Apr 14 10:02:08 2025 GMT
Subject: CN=6d7f568a52e5244729fd295f85dbe7b054dfbc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:e5:8f:1a:ef:bd:cb:e4:c7:f5:99:aa:b7:
92:d0:e8:d7:a6:f8:dc:2b:dc:aa:0e:63:b6:8f:55:
aa:da:00:e5:5d:91:95:5d:e5:83:d1:a3:63:30:16:
33:73:52:47:8b:69:82:c5:39:82:67:c3:88:4c:6c:
08:24:82:30:3b:9c:26:71:cc:6b:66:38:c5:e2:b2:
27:9b:c8:bf:93:16:4b:a1:ad:8a:ab:68:4a:02:9f:
a4:23:cb:9b:2e:a4:5d:b6:2a:b6:84:89:fb:27:9f:
f4:c4:bc:84:74:f3:e1:a5:0b:2c:27:57:4f:91:a6:
9a:82:7f:4c:01:4c:90:34:ef:1a:f2:ba:5c:82:5e:
14:fa:c6:65:81:c5:56:df:d3:8d:92:ec:60:7e:91:
05:35:f0:8b:20:5e:9b:11:f3:5e:fb:6c:cc:c3:1c:
41:d2:59:c8:96:ed:ea:bc:fd:ca:c4:a3:83:ba:90:
53:1f:ae:72:05:98:81:c3:f0:9b:85:d2:61:49:be:
0a:d5:af:83:d9:27:3e:25:05:06:4b:cb:70:71:bf:
a5:ad:1c:52:85:cf:2c:08:78:85:6a:aa:82:00:68:
d1:11:e3:6e:60:a4:d2:5d:95:46:ed:b3:c5:2b:8f:
79:7e:15:cd:0c:11:e9:88:b6:96:34:00:3a:98:0a:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:56:8A:52:E5:24:47:29:FD:29:5F:85:DB:E7:B0:54:DF:BC:67
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:89:4e:0c:73:58:67:b6:81:b6:64:3f:56:29:6b:9f:b5:
49:81:bd:0e:7c:2e:53:6e:b8:ff:a7:82:a3:23:1c:99:14:5a:
9a:d1:14:b6:cb:27:29:8e:a1:a8:5c:63:1e:5b:5f:07:6c:8b:
cf:57:73:dd:aa:24:87:df:f0:dd:93:8a:a8:38:b5:dd:6b:6c:
db:4c:11:0d:22:1e:c7:6e:84:84:24:5d:6c:44:67:0e:14:b2:
cd:ab:37:34:d5:05:25:ec:5e:79:a4:85:98:d8:ac:2f:82:35:
8f:13:c4:91:cd:5f:de:24:05:66:85:f9:45:9c:85:44:f2:65:
dc:56:64:79:30:f9:62:77:22:89:33:13:c4:10:b5:63:02:a8:
ea:00:b0:6d:b7:b3:7d:db:5c:b7:07:2a:a2:7d:92:75:03:e5:
ab:9b:a8:9a:dd:9a:6d:60:5e:df:d3:76:e3:6c:92:e6:25:bb:
1a:1f:4f:01:4b:f5:e5:43:bc:37:c5:24:cf:df:b0:63:fa:7b:
5f:13:96:57:73:5f:45:b1:5c:86:46:ca:fc:d2:99:fd:b6:9c:
ad:46:89:0c:c8:0d:a6:53:1c:0d:5a:2a:87:ba:10:da:dc:a9:
c7:17:c3:61:40:4c:5f:68:43:70:2d:29:fe:55:fe:21:b5:f6:
86:5e:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net