Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: GF/jT6ZqcK5tJJ/vysntRws10LKbcGnCf/CntroGd88=
Subject key identifier: 4F:6E:58:77:3A:C4:FD:81:9F:9D:A9:61:22:79:FF:4F:5D:1A:F2:29
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 01962F7479754EF17AE334EC3B105769E5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 02B1
Signing time: Sun 13 Apr 2025 14:01:24 +0000
Manifest this update: Sun 13 Apr 2025 14:01:24 +0000
Manifest next update: Mon 14 Apr 2025 14:01:24 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: qI3eLVXZsRlf5WqYzCM2rEyYBZMEoDxScA6AJxgqRpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:79:75:4e:f1:7a:e3:34:ec:3b:10:57:69:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Apr 13 14:01:24 2025 GMT
Not After : Apr 14 14:01:24 2025 GMT
Subject: CN=4f6e58773ac4fd819f9da9612279ff4f5d1af229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:4b:a4:89:41:20:b2:3f:00:3b:26:71:04:
01:0c:1a:6f:bb:65:6f:2e:0a:d6:f2:ec:78:9c:35:
2c:57:f6:52:1c:23:97:62:d7:2d:9c:f0:f0:89:a8:
1e:20:32:ff:61:bd:b5:60:aa:0e:0d:ad:d9:35:18:
d5:cc:a7:f6:1d:a1:dc:d9:25:47:c9:80:d2:d6:29:
46:2c:4c:26:76:36:2f:70:1b:3f:f0:9a:22:94:aa:
a4:fe:3f:0f:d2:b4:a8:45:33:20:e5:5c:17:51:0d:
b0:36:e1:a9:ea:1c:1f:95:68:ad:20:29:e5:c6:45:
8b:36:99:fc:1e:2d:7a:8f:46:37:aa:45:f3:5c:ae:
57:a7:56:36:58:7b:8d:71:a4:40:77:1c:1f:ab:6b:
3a:ea:53:04:65:9d:3d:b4:04:e1:cf:ae:bb:a8:95:
5b:4e:8f:e3:11:86:85:a1:7e:ff:33:09:30:5e:82:
63:30:2c:e9:31:fb:7c:a3:f8:8a:15:16:fb:89:6d:
ef:38:f4:54:b7:ef:d0:da:25:d9:eb:9a:8c:c3:bf:
ba:35:e9:49:87:81:c3:20:35:22:eb:6a:86:3a:92:
ae:72:2c:33:51:9d:37:cb:7f:0f:7b:31:28:fe:df:
02:02:02:03:c4:84:30:19:97:b3:39:f4:07:60:f8:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:58:77:3A:C4:FD:81:9F:9D:A9:61:22:79:FF:4F:5D:1A:F2:29
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:c4:c9:77:25:fd:a9:90:67:46:3a:64:b1:07:ab:68:4d:
14:31:ca:b0:8e:2e:db:00:2d:34:fa:67:ee:e1:8f:24:42:f8:
37:fa:b6:03:97:b1:06:fe:c8:0e:c6:d7:1d:92:7a:c6:d7:ac:
37:46:22:9a:4f:22:19:bd:d3:85:33:13:dc:8e:7a:c0:a2:de:
3d:ef:e9:70:b1:31:9b:b3:f1:39:dd:f2:ee:e9:8f:2b:e8:34:
0c:7a:a3:7f:f1:a0:39:f4:04:cd:21:e9:b6:f2:26:3a:a2:dd:
72:90:c7:18:78:a0:98:0c:3b:bb:9f:38:77:99:1c:9b:60:92:
e2:ce:8b:0e:c3:f5:c9:ee:ba:d3:91:36:23:26:82:c1:c8:d3:
10:18:35:83:11:62:bc:f0:d1:60:ed:3b:52:75:1c:4d:c3:9f:
1f:3d:27:3d:ef:96:96:84:c8:4f:63:de:22:9c:b9:59:8e:f0:
65:cc:d2:64:3c:06:25:68:fe:c6:e3:b2:28:13:92:d7:3b:92:
22:53:93:3e:54:fa:b8:18:57:cb:55:35:de:06:2d:87:c4:25:
ee:e0:6b:04:82:7c:43:61:fd:4d:7c:47:25:00:8e:c4:55:26:
fe:c5:52:b0:50:38:ad:11:f1:b6:a8:ec:eb:50:e9:77:07:ea:
a2:c2:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net