Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: TfJHZK8Qh/R2izbs5swC6ZLCb6t+I/VH1Upnb0h84t0=
Subject key identifier: 36:BD:D3:6D:96:24:B6:10:86:55:54:67:27:7B:CB:49:3D:62:DB:CD
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 01962FAB37E47614E641851A17992C80664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 14EF
Signing time: Sun 13 Apr 2025 15:01:12 +0000
Manifest this update: Sun 13 Apr 2025 15:01:12 +0000
Manifest next update: Mon 14 Apr 2025 15:01:12 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: ZHuySH6mYpbbegnPBc0/NsxJyFWvROk6kaTS2lp5hJs=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:37:e4:76:14:e6:41:85:1a:17:99:2c:80:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Apr 13 15:01:12 2025 GMT
Not After : Apr 14 15:01:12 2025 GMT
Subject: CN=36bdd36d9624b61086555467277bcb493d62dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:5e:d4:fe:ed:a5:4d:11:f7:7b:b5:32:4a:
35:65:a8:88:a0:47:5b:ee:5d:d9:1d:58:a1:d3:1e:
c1:ea:24:49:4f:95:63:d3:bd:eb:2c:80:d2:af:61:
ef:c1:52:15:12:b4:51:9c:64:36:b0:cb:05:90:67:
6c:e5:37:b2:50:40:8b:2f:05:49:9c:66:4c:32:6e:
7e:42:c7:be:93:7a:50:2d:38:92:38:ff:09:47:20:
2a:bb:c5:af:57:a4:db:85:e6:6d:43:43:32:d0:90:
24:01:be:a4:88:6d:8e:16:df:85:b0:dd:fd:86:ed:
2b:a7:65:d0:25:f1:58:4c:64:37:0c:e3:00:aa:26:
6f:80:f3:da:04:5b:f0:b3:c4:76:25:5a:57:c1:85:
cd:a7:80:99:08:37:ba:1f:a6:69:fa:73:8e:75:02:
6d:f9:7c:2d:7f:76:27:29:38:0e:14:73:a1:ba:9c:
15:b9:56:e9:31:a1:cc:02:f5:34:76:e5:82:59:01:
ff:79:53:4b:11:d5:11:31:93:45:b3:9f:8e:3a:e2:
72:93:fa:cf:f3:fe:a5:35:2b:71:01:49:37:a4:7d:
cf:49:0a:99:76:37:e9:a1:d4:ad:99:43:da:1b:0c:
11:cb:f6:1b:0e:e1:dc:39:30:a6:6b:bd:bc:81:26:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:D3:6D:96:24:B6:10:86:55:54:67:27:7B:CB:49:3D:62:DB:CD
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:53:a5:02:3d:5f:ec:50:7a:bb:fc:73:9b:3e:cc:58:56:ef:
fd:57:36:c6:e5:3f:f1:d4:8d:d9:9a:d2:8e:11:12:c8:c1:65:
52:0a:ff:12:30:1c:77:ab:e2:35:ae:da:08:50:e3:2a:16:c6:
e5:82:9e:f3:ae:f9:5b:46:78:0d:a2:a6:8d:03:dc:49:48:61:
96:61:b2:5d:69:4f:0b:bf:fe:0f:f1:0d:74:9a:52:80:fb:de:
78:da:5f:0a:06:71:04:4e:93:a9:dc:6c:bf:f7:be:ef:83:28:
42:90:d7:72:95:56:ef:43:7d:bc:a5:eb:2d:9f:d5:29:b7:16:
66:93:45:af:de:c9:c0:d4:03:61:54:fb:0f:5e:f0:79:c7:05:
6c:e1:a3:d1:2a:92:8e:fb:79:e3:1e:9a:c2:b8:4e:5a:79:7e:
8d:95:8e:fb:10:ba:26:5c:1e:ce:16:4e:a9:00:3e:32:70:52:
fc:62:4d:61:e1:dd:60:3a:a2:7b:16:fe:fc:05:39:b9:31:7d:
75:1e:30:57:b6:4b:7e:4f:69:0f:74:db:52:26:66:c5:56:fb:
3d:3a:0e:e7:e4:51:64:97:cc:ed:9f:95:2e:5a:d7:54:b3:7e:
ed:b3:a9:de:85:e4:4a:9f:ca:1e:ed:ba:fc:7b:cb:8d:ed:7d:
3d:6d:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net