Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: GvXjGrgu37O7AyuzY6vAX+eG4DMxVXzSZVmBZSD7p74=
Subject key identifier: DE:15:63:43:74:73:C8:57:09:0B:1A:7B:82:D1:75:95:64:75:06:0B
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 01962E2B37BF184C9FD40CDE70C9834EA5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 08:01:46 +0000
Manifest this update: Sun 13 Apr 2025 08:01:46 +0000
Manifest next update: Mon 14 Apr 2025 08:01:46 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: gyO/0kkP0BFjvBZ5fc/Haku3Va2j5dDVu3XP+zxN9cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:37:bf:18:4c:9f:d4:0c:de:70:c9:83:4e:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Apr 13 08:01:46 2025 GMT
Not After : Apr 14 08:01:46 2025 GMT
Subject: CN=de1563437473c857090b1a7b82d175956475060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:c0:6d:f4:b7:2b:3e:91:20:f4:86:6d:72:
fe:08:ad:a6:76:65:67:ca:fe:5d:d2:ad:2d:6d:0a:
1e:1c:f2:cb:1c:ad:b0:c1:84:bc:af:3e:be:88:4a:
44:74:52:41:d5:ec:cf:ba:41:a4:fb:13:e5:3c:5d:
92:b9:da:14:c0:ff:5b:fc:d3:88:54:2b:78:4f:7b:
ae:a4:0b:4e:7f:48:92:99:9a:94:ed:a7:2c:fe:d0:
e3:ad:e0:15:3d:3a:86:93:a2:9f:d7:5e:47:31:66:
70:42:76:da:b7:ae:0b:36:44:ed:02:5d:ab:6c:c4:
9d:8c:ed:2d:27:75:f3:2e:09:ec:80:09:eb:8b:67:
ae:2c:3f:a6:1c:9c:96:e7:71:d7:e6:92:ee:cd:9c:
02:ed:a9:fd:96:5d:a2:64:e8:fc:81:d3:80:76:fa:
49:d8:48:5e:69:57:2c:41:c2:3d:f1:74:86:dd:33:
87:ec:f2:f2:ab:b0:9b:85:08:80:3e:77:7e:db:49:
0e:15:8e:6a:77:eb:f7:d0:6a:6b:8e:bf:19:03:36:
be:4d:0b:48:c7:42:e1:68:90:ee:a0:33:c1:f0:01:
eb:72:45:28:d9:1c:9d:0b:2b:b4:7c:85:e9:95:9d:
0d:b4:29:12:31:5a:83:0c:e8:fc:e9:4c:58:39:c6:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:63:43:74:73:C8:57:09:0B:1A:7B:82:D1:75:95:64:75:06:0B
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:ef:3f:5a:20:ac:cd:98:4f:4c:81:73:96:ed:f2:53:cb:
0d:9e:89:32:29:a2:6f:88:68:21:f7:56:95:ce:b4:65:d1:34:
85:96:54:bc:4c:ce:4f:be:39:c1:35:9e:e6:c5:df:a8:65:e6:
b4:8b:62:78:d7:87:1c:65:96:db:0d:cb:89:83:f8:0d:43:60:
91:b4:18:21:d0:99:e9:16:f3:9e:40:54:eb:7e:f4:d9:ff:be:
2d:95:a0:db:a5:71:d1:28:bb:c4:b9:4c:e5:9f:c4:ab:eb:01:
4f:f5:64:f3:ca:4c:e3:c5:c6:c1:53:b9:17:b0:4e:b8:29:3a:
fd:30:3e:30:8d:e6:4a:f8:07:9c:99:77:57:6a:8c:84:4c:48:
a5:81:a0:63:e6:08:18:35:f1:92:d8:54:6d:e8:0a:5f:be:b4:
9d:ef:f9:0f:6d:8d:c1:c5:a1:f9:1b:6d:82:1f:0a:9b:76:f4:
31:da:29:d0:ee:dd:32:11:12:39:4e:14:e3:43:ec:f0:f7:fa:
57:15:75:82:dc:fa:70:fc:d9:01:2c:91:fa:17:c6:32:12:a7:
c6:4b:96:b6:46:f3:c3:f9:9b:a1:72:67:4e:d4:59:07:a0:d4:
29:5c:ef:24:e8:ab:51:7c:7d:a0:61:6a:72:f2:5b:83:70:61:
25:8e:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net