Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: RLO2ZUYydDaZIWMFj6pMAHq3fSW+tdaW1Hm08Y2reco=
Subject key identifier: 31:6E:A8:BE:04:7C:C1:ED:A0:13:1E:C0:A0:D1:86:DB:7A:1E:58:91
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 01962E99B3083C3BADFD34F0FE0FDF9E3B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 14E7
Signing time: Sun 13 Apr 2025 10:02:26 +0000
Manifest this update: Sun 13 Apr 2025 10:02:26 +0000
Manifest next update: Mon 14 Apr 2025 10:02:26 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: 7bTo7dhNtoJ08fH/aY1tb1UeAjEFPLhcffVI6c/BiS0=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:b3:08:3c:3b:ad:fd:34:f0:fe:0f:df:9e:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Apr 13 10:02:26 2025 GMT
Not After : Apr 14 10:02:26 2025 GMT
Subject: CN=316ea8be047cc1eda0131ec0a0d186db7a1e5891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:c3:82:77:b6:6f:d2:ff:a2:de:e7:0a:e0:
c3:1a:f8:ed:79:7c:43:43:bb:16:c3:af:15:5d:ee:
ef:b0:00:71:7e:cf:f9:1d:14:41:dd:23:c9:47:eb:
ba:82:e8:d9:fc:56:e9:75:86:9f:85:09:37:55:12:
5c:69:a3:c2:e6:68:91:e0:9f:07:d8:a0:31:89:59:
9d:3d:b6:d3:ec:e3:2f:89:5f:49:6a:88:8f:6f:46:
dc:27:f9:0d:f0:5a:4d:99:6e:b6:80:31:f3:c1:0d:
3d:cb:96:ac:08:69:3d:ca:01:27:70:f1:8c:4a:dc:
69:85:9f:91:9c:0b:e9:40:a0:e9:59:1f:76:26:63:
bd:ed:35:46:f2:84:52:49:93:65:cd:3a:f9:ab:31:
71:ad:3d:b5:e0:6e:15:e9:e8:fe:c5:71:dc:92:39:
60:2a:70:a6:11:cc:e8:f6:74:69:2b:4b:b6:eb:52:
65:5b:45:71:7f:b7:2f:59:c2:65:47:30:fb:d4:78:
e0:72:06:4a:75:d7:0a:3c:95:06:52:65:4a:3f:83:
78:e4:0b:2e:a7:fa:ac:a2:54:d4:74:e5:43:ae:9c:
29:0c:ce:eb:5f:d1:23:d3:10:96:c4:da:64:0a:26:
41:46:e9:60:b3:26:8e:fb:08:99:fa:74:35:fd:77:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:A8:BE:04:7C:C1:ED:A0:13:1E:C0:A0:D1:86:DB:7A:1E:58:91
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d9:5c:3c:f3:e6:6b:a0:39:ec:2b:c9:66:a0:2d:38:83:fe:
11:cd:58:71:af:6d:fb:d4:6b:31:3d:f6:26:ef:ed:f4:3c:36:
c5:6b:51:97:25:ed:b4:af:ec:40:9d:21:9b:fa:61:6d:8d:7d:
ae:6c:ff:37:cb:ea:24:13:2b:be:05:ab:f5:72:1f:df:ab:b9:
a1:b7:9c:39:86:bb:46:70:a2:8a:e5:57:aa:c3:44:cb:73:e4:
20:6b:6c:ed:9f:f3:1f:f0:1e:93:cf:0d:e0:3c:83:dc:67:f7:
b9:5a:9d:1f:13:41:57:2d:be:5f:0e:34:70:65:70:c4:cf:eb:
97:db:6e:b8:53:31:f8:19:81:d7:fd:d9:d2:5d:34:45:72:25:
6c:dc:77:80:5f:6d:15:2d:b5:81:42:a5:d0:59:ab:21:f1:99:
18:b6:bd:82:ec:df:72:5f:a9:1d:ed:d1:d3:d2:f0:d5:f9:8b:
39:e8:d3:e1:26:a5:31:55:4f:90:c6:0f:a5:14:6b:81:68:93:
d0:21:da:8a:58:80:12:09:29:fb:90:1f:d1:78:b8:e5:a5:f5:
ec:6f:d2:3e:b7:dd:bc:a8:9c:c0:a8:ea:1f:ef:8c:6a:b3:a5:
18:b4:a6:f4:c4:08:c6:f1:ca:63:0c:e7:75:36:d4:62:92:54:
91:fb:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net