Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: L/bzZnnVLz74cwKWR9HNJES2C6xtpiBPkU13cZymWRg=
Subject key identifier: 8A:77:70:EA:A5:EC:AB:6E:A6:93:DB:39:73:F5:0A:EB:94:12:F1:5A
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 01962FAB8D08A3EE6FE759925C84BECB8832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 13C4
Signing time: Sun 13 Apr 2025 15:01:33 +0000
Manifest this update: Sun 13 Apr 2025 15:01:33 +0000
Manifest next update: Mon 14 Apr 2025 15:01:33 +0000
Files and hashes: 1: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: Mga/et1qnyPbQLACjL8tZWHRCXxzIPEZZNB3vVRs7j8=)
2: zXCsm9SAAByjdh9cxrFixEv4QxU.roa (hash: LUvS7mAwFZ6C/F9nm3WkyPABrI+5LNzyM7MV+k5m7w4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:8d:08:a3:ee:6f:e7:59:92:5c:84:be:cb:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 13 15:01:33 2025 GMT
Not After : Apr 14 15:01:33 2025 GMT
Subject: CN=8a7770eaa5ecab6ea693db3973f50aeb9412f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:90:9d:e3:3f:9c:60:39:cd:aa:63:6b:c1:
c7:98:28:89:57:ac:12:19:6c:50:5a:dc:f7:7d:41:
58:01:4d:0e:69:52:89:4a:b0:a6:a1:7c:99:66:7e:
e2:fa:eb:5c:d1:2a:9e:6a:72:28:c9:79:62:6e:f4:
e5:27:74:c8:e8:5a:fc:80:a0:d9:64:68:dd:c4:14:
20:87:9b:c9:9a:9d:bb:8c:12:23:b8:85:52:93:23:
a7:32:5f:30:d6:25:d6:96:77:5d:f2:28:c5:66:7d:
58:08:9c:8d:6e:60:91:da:0b:86:ca:25:cc:ac:a6:
5e:a2:cd:58:34:75:3a:9c:8f:bd:23:db:bf:bc:7d:
d6:d6:86:24:b2:36:f8:c6:8c:3a:59:b7:54:73:b4:
5e:e8:8c:64:f3:ff:7d:4d:a3:04:69:09:65:69:b4:
de:74:74:69:e4:08:aa:14:83:4f:6b:ca:38:d2:dc:
2c:39:26:05:f8:51:e1:a3:f4:f5:59:43:7e:f7:45:
7a:0c:c4:7d:86:ab:72:24:f5:10:77:4f:15:bb:9f:
d4:f0:bb:8b:46:50:97:7c:ce:76:e5:18:4d:62:dc:
41:bd:8c:26:82:c1:fc:8f:cc:3f:72:bc:35:af:07:
55:3f:dd:9e:23:db:3d:2a:8c:84:1b:34:77:59:e2:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:70:EA:A5:EC:AB:6E:A6:93:DB:39:73:F5:0A:EB:94:12:F1:5A
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3d:99:6f:b6:7b:9b:fd:76:2f:44:e9:f6:55:cf:e3:27:cc:
54:99:c7:90:0b:3f:e6:f3:f9:9d:79:f2:eb:b8:ae:19:d8:d2:
a8:c6:a4:c4:24:76:53:26:0c:7f:96:cb:aa:76:4c:27:b6:b1:
a5:ce:61:b2:50:e9:b9:f0:61:6e:f7:f5:2d:cb:3d:f2:80:0f:
b7:5a:4d:4a:44:b8:dd:62:17:c5:31:1f:1c:5f:50:89:26:cf:
16:7f:9b:2b:8e:a0:f7:82:5b:ee:75:40:f0:1f:49:a5:86:17:
b6:ab:00:fd:a9:c4:60:d5:c5:8b:0e:cf:f9:9d:ff:fd:57:36:
bc:6f:93:b2:c8:40:0e:e6:27:bc:c8:56:f8:2e:1e:98:5f:7d:
03:1a:14:38:e8:cd:07:cb:fe:b6:1d:86:b0:32:b1:dd:cd:26:
53:54:f0:1f:eb:9b:be:11:0b:4f:31:27:24:bd:5b:96:94:d8:
b6:85:38:87:8c:77:77:5f:c0:16:02:eb:a6:ad:b1:c2:86:0d:
88:1c:a4:bd:21:ff:62:a0:23:4a:d1:54:fe:3f:85:3b:d7:90:
52:73:6e:e3:9a:90:f8:e5:cc:22:94:8d:f0:47:f5:bf:4b:b0:
49:57:fc:b7:2a:9c:6c:4d:dd:a3:db:48:22:c5:fb:7a:8c:d4:
95:29:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net