Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: Hbw6JSE1t4HgxKA0Qos+U7IkZrovr97PykbE+iZOeQc=
Subject key identifier: F2:29:DB:36:3C:E4:63:41:A3:BC:59:3C:79:19:40:95:88:8E:80:80
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 01962F3D4CD940929C5F5EC4134809B29647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 05AA
Signing time: Sun 13 Apr 2025 13:01:08 +0000
Manifest this update: Sun 13 Apr 2025 13:01:08 +0000
Manifest next update: Mon 14 Apr 2025 13:01:08 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: t9gU2kJb5yn2PYZ6mhQbXWeslFNCd2OmYURwg9oAih4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:4c:d9:40:92:9c:5f:5e:c4:13:48:09:b2:96:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Apr 13 13:01:08 2025 GMT
Not After : Apr 14 13:01:08 2025 GMT
Subject: CN=f229db363ce46341a3bc593c79194095888e8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:bf:59:fd:f7:a5:f0:29:ef:e6:b4:98:18:
cd:2b:06:ea:b7:b1:e9:89:e9:44:4f:63:c7:fb:32:
af:89:fe:18:ed:61:b4:e6:37:bd:5c:dd:80:43:06:
56:cc:8b:17:ae:83:ca:6f:bc:f9:c2:0c:d3:2a:c8:
a2:b0:3d:31:0d:d4:08:ad:27:20:23:9b:c5:ff:06:
ac:9b:d7:7d:09:a7:14:e2:5b:07:88:d4:0b:ab:ae:
c0:93:8f:d7:78:8e:ef:f8:59:a8:51:3b:bd:e1:bb:
d7:d3:43:33:e7:16:e5:f3:8f:55:6e:3f:0c:a6:31:
54:5d:4c:28:1a:21:5d:c4:29:06:bd:b3:0f:5e:8a:
d7:53:bf:1b:79:d0:af:83:ac:a6:1f:c9:ac:67:09:
70:21:f9:d7:b3:64:89:ad:98:cd:7c:4d:10:ca:e8:
a6:3f:43:3c:74:8b:88:6c:78:74:3b:6e:ef:2b:9e:
7d:02:7b:2e:d1:e7:b2:ef:46:d8:12:fb:0d:c8:76:
93:6f:e0:7f:3b:aa:64:61:31:e2:57:ef:57:a5:0b:
f2:d3:7f:78:f2:ab:04:32:67:7f:27:b5:78:e2:9d:
ae:89:9d:bd:99:df:1d:0f:f9:59:f1:75:de:d4:04:
6f:a1:23:a3:d6:ec:c0:fa:6c:18:1b:3b:c8:8c:ca:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:DB:36:3C:E4:63:41:A3:BC:59:3C:79:19:40:95:88:8E:80:80
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7d:77:b7:be:98:45:22:cb:7b:df:91:d9:51:30:f4:12:6c:
96:fe:f4:00:84:31:37:e3:8e:9a:9a:3f:2f:04:4a:b8:f3:0d:
09:97:b3:67:29:6e:82:02:46:57:40:ce:5a:6d:11:a5:82:5b:
ad:5e:46:97:44:66:30:06:43:6e:e3:da:24:1e:26:54:7a:50:
60:ea:81:07:f3:58:f1:8c:2a:02:ed:cd:33:a8:05:13:67:7d:
23:aa:09:ca:e9:bf:62:6f:a9:50:93:74:6d:28:49:af:7f:11:
79:a4:a8:c5:c2:38:7d:2a:6f:a8:ec:5e:64:4e:e3:61:e2:5f:
ed:a5:51:ee:95:0e:5b:ec:fa:b5:67:60:ad:0c:0d:4b:e7:d7:
2d:74:fa:c7:94:6a:dc:83:77:39:c1:0a:23:6a:ec:a9:2a:f7:
db:01:33:98:a5:51:24:ba:f6:19:76:a3:39:88:4b:98:82:07:
e3:79:32:35:8d:03:9e:e9:37:54:dc:3f:6f:ab:3f:87:0d:2d:
bf:17:a5:5f:65:14:98:2f:c4:2d:21:24:49:ca:8f:ea:b2:a7:
fe:73:1e:1a:12:dd:76:c4:33:b6:d9:ab:1d:33:ca:be:3d:37:
d5:dd:ab:09:f3:25:c1:5e:e6:e8:18:8a:4d:c8:24:53:83:04:
e8:0a:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net