Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: 14a0zc3bj7y5HxKWDLOx0P5ZZJliyF/TeMueo7eVtws=
Subject key identifier: 56:8F:B4:F2:91:06:CD:B4:41:85:CA:D1:AA:DF:C2:D3:96:84:4B:96
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 01962E2AD6DAEC59F492F37463B531CD9E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 08:01:21 +0000
Manifest this update: Sun 13 Apr 2025 08:01:21 +0000
Manifest next update: Mon 14 Apr 2025 08:01:21 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: HdCL5Li7T1fdWgWItJnPURGjkRK0D0hBK2mdnAUbz7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:d6:da:ec:59:f4:92:f3:74:63:b5:31:cd:9e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Apr 13 08:01:21 2025 GMT
Not After : Apr 14 08:01:21 2025 GMT
Subject: CN=568fb4f29106cdb44185cad1aadfc2d396844b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:bb:fa:f5:21:cf:45:50:9f:1e:45:7f:19:
81:0c:aa:9d:cc:39:88:68:c3:81:ad:c9:dc:1b:fc:
62:02:43:c0:76:02:dd:c9:ec:9f:de:36:c4:a5:a2:
1f:ec:63:c4:00:67:0c:50:b0:ad:5d:e4:be:84:a1:
35:08:d9:e5:dc:10:7b:2d:fc:e7:64:c1:e6:28:2e:
13:8d:5f:df:37:48:42:4b:0d:a5:3f:b0:de:94:48:
c1:fd:4b:45:69:39:df:fe:0b:db:b7:90:07:75:0a:
e7:48:d7:40:9c:f2:01:0d:e2:a2:45:e6:31:99:d3:
d6:c8:71:fd:e1:7e:3d:3b:f8:1c:5a:e5:ed:80:b4:
91:b8:7f:82:93:69:10:7e:09:5a:e0:82:34:86:41:
fc:12:4e:3e:42:8d:1f:ab:b4:0e:b6:ce:94:2e:63:
d5:35:60:a2:30:17:c7:53:63:3f:32:c1:c4:11:3f:
33:0a:31:36:26:65:c9:61:5c:86:eb:37:31:ab:6a:
d4:62:c3:c5:d3:04:c8:ef:1a:9b:50:ea:aa:6c:8e:
fd:63:57:da:73:55:8f:cd:2b:5e:26:ba:22:8e:ef:
69:22:09:33:a3:03:d8:e0:b6:29:99:a9:fa:75:52:
72:85:6f:08:0c:dd:e2:3e:53:97:86:2a:ab:cb:97:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:B4:F2:91:06:CD:B4:41:85:CA:D1:AA:DF:C2:D3:96:84:4B:96
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6a:a0:24:11:3e:77:95:4e:12:7e:9a:29:18:8d:7d:12:96:
aa:76:46:8b:80:fa:13:cf:35:cb:b4:89:f6:a1:c9:85:f3:7e:
ee:58:a3:74:19:8a:48:37:a9:a5:af:86:63:a6:5a:5e:0e:19:
eb:c0:98:c3:22:93:1d:21:58:00:01:8a:9f:97:da:4e:8e:78:
0e:7f:20:1d:9e:17:b6:ef:61:02:c4:2c:48:ba:54:57:2a:b6:
80:d5:9b:59:b8:a0:c1:bf:f0:04:93:1a:8e:e7:27:92:eb:f8:
9f:d5:2a:01:4b:54:a3:c5:5b:bc:11:08:4a:88:b5:f9:3d:a9:
f4:a5:63:19:5f:69:2f:cc:a7:51:31:b8:96:5f:cc:46:1f:e6:
04:f7:6d:81:f2:5b:9f:8d:53:8a:1a:6e:0e:62:49:97:af:61:
f2:87:d4:e1:68:f4:5a:1f:9e:e7:69:f7:28:37:92:c4:cd:d7:
dc:d2:73:de:6e:96:07:b4:d1:1a:62:da:49:e3:cf:00:a6:41:
82:f1:a2:ee:96:54:17:30:ad:85:a5:fa:fb:7d:27:97:d1:0c:
7f:56:7f:48:b1:43:9c:a0:e1:b8:b9:b4:d2:f1:8a:ed:0e:83:
2b:ce:22:30:1a:c2:3b:70:45:b5:20:6e:3c:6e:42:74:3d:93:
57:7f:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net