Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: D3MXCUWs8iQYy5kJtrrVN/qxJVtgcxSsmPrOEZIiHmc=
Subject key identifier: 87:7D:59:FC:74:AB:DF:3F:F6:29:9B:53:A9:5B:41:18:B3:AB:7A:76
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 01962DF42D65E2DC44F836BE217CAA31A340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 1044
Signing time: Sun 13 Apr 2025 07:01:39 +0000
Manifest this update: Sun 13 Apr 2025 07:01:39 +0000
Manifest next update: Mon 14 Apr 2025 07:01:39 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: TTReaUjvAyfCDMtM9c6q+L7JRyLNG6UDJwQxr61wdJM=)
2: Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa (hash: peUxHeNiz+fH8nbCOCYsRkuwwMY+SxJRD7icSc0BEwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:2d:65:e2:dc:44:f8:36:be:21:7c:aa:31:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Apr 13 07:01:39 2025 GMT
Not After : Apr 14 07:01:39 2025 GMT
Subject: CN=877d59fc74abdf3ff6299b53a95b4118b3ab7a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:5b:ad:0f:55:b6:dc:6e:18:6f:bf:21:0a:
5e:94:13:ba:fe:55:1c:e4:a7:91:d1:6c:40:86:4e:
86:4e:17:ae:df:47:e8:06:44:fc:54:ba:a4:4b:5f:
39:55:65:47:77:8f:89:33:04:45:0b:d5:a9:94:e7:
13:f3:55:c8:9b:42:50:97:79:cf:57:b5:a0:a1:8a:
66:5b:ec:49:66:eb:15:88:56:60:63:d7:ee:a8:20:
2d:b5:2a:09:32:d4:1d:2b:e8:d4:09:de:b4:22:68:
d5:4b:31:d2:90:31:d1:52:94:15:64:d6:4b:40:67:
03:08:8f:b6:d7:f8:a2:60:13:c9:3d:d5:df:9a:c0:
fe:69:79:cb:95:db:1f:9a:c4:7d:6a:b6:16:b8:99:
f9:7b:4a:c4:3d:8f:ec:e9:07:60:99:7c:1d:59:c0:
12:b8:af:93:55:72:27:1c:4f:19:ac:27:0f:c6:71:
16:76:8d:e5:ca:e1:8c:a1:1a:6e:cc:0c:c1:d6:97:
4c:75:71:62:3a:e2:5d:37:71:59:56:cd:7f:f5:16:
8a:be:2c:80:58:ce:fe:30:a4:f9:08:7b:2b:7f:b5:
7b:e8:dc:bf:77:01:3a:e5:1e:8b:15:8e:0f:dc:3f:
1c:1a:4d:0c:e1:e5:30:d7:60:d9:ff:8a:c9:71:f5:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:59:FC:74:AB:DF:3F:F6:29:9B:53:A9:5B:41:18:B3:AB:7A:76
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:a9:98:d8:58:4f:80:77:96:4b:f7:fb:fd:50:1a:1f:38:
8d:9c:85:e9:75:6e:8c:3b:d8:74:15:fe:7f:fd:d3:91:5a:ba:
5e:cf:4a:69:68:a9:7e:f1:55:ab:c8:db:cf:76:3a:5c:f5:02:
f2:f6:f1:54:07:b7:c5:85:d2:5c:38:b1:90:ea:06:7a:08:63:
1e:78:72:24:87:2e:b9:ed:eb:04:89:a7:34:7b:63:96:6d:31:
f2:82:ad:24:4c:0a:7a:ed:0f:fe:f0:58:98:6c:39:4c:79:71:
d4:30:ce:99:0c:88:c3:65:5b:67:a5:5b:22:d9:86:c6:6c:76:
be:3c:d2:7d:0b:c4:63:68:41:dc:37:c7:5e:9f:05:4f:17:0c:
59:bc:a6:d0:d5:22:b4:5d:f0:62:d1:4f:b4:0f:9f:09:80:44:
13:8d:7e:32:c1:6c:b2:e4:c0:59:64:6c:ec:2e:9b:db:ff:47:
d4:6f:ca:6b:bb:31:2b:92:68:16:a5:b6:b4:7e:1f:f8:1c:12:
e5:17:de:63:e7:41:1d:34:c9:6f:4e:64:ff:b2:c8:2c:69:a1:
be:c4:e2:57:a1:c2:6b:f1:28:23:ae:67:2b:b1:68:ca:16:dd:
a6:93:8e:5e:36:b8:cd:45:db:b3:e0:cf:2a:59:79:ce:5f:8f:
87:fb:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net