Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: JCcQad9TTbVZMnxVlpYC4Rkw1yg2QLU9DGlnRsej2rc=
Subject key identifier: 2A:3E:AC:4E:45:B4:92:56:0E:D6:30:4E:53:E5:90:18:E5:58:DF:2E
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 01962F06C23CB84F437CFB14C5956432AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0AE3
Signing time: Sun 13 Apr 2025 12:01:34 +0000
Manifest this update: Sun 13 Apr 2025 12:01:34 +0000
Manifest next update: Mon 14 Apr 2025 12:01:34 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: iV6d1GlraiuT+uYAm3T136IELt2oFT5EW0+/7E5IIqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:c2:3c:b8:4f:43:7c:fb:14:c5:95:64:32:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Apr 13 12:01:34 2025 GMT
Not After : Apr 14 12:01:34 2025 GMT
Subject: CN=2a3eac4e45b492560ed6304e53e59018e558df2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:3d:7d:69:a7:6f:3b:1e:44:d6:d7:2d:2b:
1e:e5:e7:9e:b5:8e:86:ee:12:94:9e:fd:7d:2a:4f:
43:a8:4a:2b:2b:79:7f:b6:1b:69:b8:a8:f0:05:3d:
2c:fa:23:42:05:e9:f5:af:a8:01:4d:9d:f2:d8:dd:
aa:ba:e1:a0:9f:27:5b:ea:84:f7:43:b6:ce:b8:53:
98:71:0a:84:da:4f:b7:41:8e:98:6e:e3:fc:22:a2:
05:ff:e2:cc:ee:98:43:5f:47:0e:9d:8f:2c:9c:cf:
90:17:6f:48:5b:3f:91:c3:0b:62:61:84:33:de:f1:
5c:5f:6c:1a:af:20:ee:54:0e:9e:30:60:84:21:9b:
67:cf:16:c8:80:a3:56:b1:d1:2b:0f:44:18:8b:d8:
3c:6b:f3:f8:cf:a6:19:f2:ba:d8:6d:5e:c0:cb:0f:
cc:4f:a4:d0:08:e8:64:00:f8:da:6f:6e:52:71:95:
69:fc:f8:f7:a0:60:80:98:fb:8b:91:6f:7f:10:4d:
b2:29:5b:68:2a:02:54:30:0b:2c:92:4f:b6:f2:d8:
48:a9:03:f8:c9:a9:5c:85:e8:23:6f:11:68:6e:95:
79:6d:f6:14:1e:bd:16:6c:fd:7c:cf:10:f6:38:ac:
8d:51:67:cc:9d:21:05:46:e3:75:04:74:e3:5b:1e:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:AC:4E:45:B4:92:56:0E:D6:30:4E:53:E5:90:18:E5:58:DF:2E
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:50:c9:f8:77:5a:0b:52:12:3f:c9:95:ce:88:ac:db:c6:
c1:50:7e:60:14:e1:ed:4e:02:0d:07:9d:e4:2e:ed:f6:0e:6b:
f4:67:f9:25:57:28:6b:7d:8e:20:b3:3c:08:b2:f5:74:af:f3:
42:f8:87:24:dd:11:25:87:a5:63:7e:66:4d:c2:d5:a9:5e:4b:
c5:2b:d3:cb:c7:2a:7f:1d:e5:38:72:1f:e3:ea:7e:32:8a:1b:
1d:61:7d:9e:11:71:f6:95:22:74:7c:49:32:10:ae:3e:a4:d5:
59:f8:55:1f:be:c7:c4:a2:db:3e:c8:dd:9c:61:78:86:ee:80:
17:01:b4:5e:76:74:60:44:3c:a2:73:f3:06:df:78:7d:1b:2a:
49:4e:c3:b7:d0:6d:c9:bd:41:b3:51:d4:95:d2:d3:5d:ff:e0:
1a:19:8e:9d:34:63:f1:92:8e:1d:94:30:52:f8:16:59:a5:57:
aa:d6:b8:e1:d3:c7:7e:d2:d6:56:1c:d6:a8:fd:90:cc:18:50:
04:63:18:db:b2:d8:9e:12:37:a8:83:fe:f7:30:6a:d2:e5:db:
c3:b6:64:f9:c2:73:2a:f0:74:d4:7d:c2:4e:85:49:cf:ac:c6:
73:45:dc:9e:2b:83:9b:d5:77:95:a4:43:a0:95:31:cf:03:b1:
39:8e:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net