Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: TQzW2mSx2IAeU7VzRjF9k7RYXM5UxC38HZTysaN5sMU=
Subject key identifier: 82:6C:1A:EF:32:E0:AD:BD:38:76:47:7C:10:EE:89:6D:BB:D4:BB:45
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 01962E996022832A22B0ECC70942A666F15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 0FE7
Signing time: Sun 13 Apr 2025 10:02:05 +0000
Manifest this update: Sun 13 Apr 2025 10:02:05 +0000
Manifest next update: Mon 14 Apr 2025 10:02:05 +0000
Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: OatQ9MMZAcQQeaogb02EN4tBtYBMpfziM4PxKZ+qxl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:60:22:83:2a:22:b0:ec:c7:09:42:a6:66:f1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: Apr 13 10:02:05 2025 GMT
Not After : Apr 14 10:02:05 2025 GMT
Subject: CN=826c1aef32e0adbd3876477c10ee896dbbd4bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:6c:24:cc:eb:16:d4:77:7e:7e:9a:3b:cd:
48:65:df:2b:65:87:b7:67:3e:87:54:ae:44:7e:0f:
b6:45:a9:cf:f8:0d:1c:2c:c9:91:44:65:db:c5:24:
fe:d9:ba:d4:4a:41:f4:d8:8d:72:61:3b:f3:46:ee:
ff:fb:51:69:fd:6c:d8:ed:39:a3:38:97:9f:73:2f:
b1:8a:a5:fb:40:ed:79:70:e6:04:ff:20:09:c4:9c:
df:5b:38:2b:41:a8:7b:87:0a:6d:df:79:94:04:6a:
1e:11:7d:ec:50:45:6e:5e:91:8a:2f:56:94:28:55:
e3:98:80:e5:67:76:0f:30:e9:cf:30:1c:0a:ae:9b:
64:a6:6a:cb:8e:02:e7:9b:1b:78:1a:86:be:f8:d5:
1b:cb:87:d4:4c:2a:59:69:f5:d9:bf:a0:4a:5d:0a:
e0:7f:9e:cc:dd:17:d3:93:73:cb:ab:53:dc:9d:e5:
08:55:1e:69:4f:f1:96:2d:25:36:90:59:89:ed:58:
7c:45:2c:14:f9:46:32:de:11:ed:81:49:1c:58:3e:
0e:3b:dd:bd:91:dc:39:e8:37:08:40:f8:25:a7:e2:
97:30:d6:55:09:2c:9f:67:a1:9f:d7:7b:8c:d3:9c:
bc:b2:4f:47:de:68:95:56:dd:3d:78:27:9e:99:51:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:1A:EF:32:E0:AD:BD:38:76:47:7C:10:EE:89:6D:BB:D4:BB:45
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b0:8f:69:c7:22:33:f5:88:b6:d1:ad:50:44:ab:68:fc:f9:
79:99:88:42:fe:91:66:04:ea:ee:6e:cc:0d:81:6d:8c:02:22:
d9:7d:7d:31:50:63:7a:2f:bd:68:c4:4a:5f:f3:49:09:02:fb:
68:0e:af:37:34:5a:5b:e3:34:8c:f2:cd:88:9f:b6:69:6d:22:
78:df:a7:64:bd:ed:4a:6e:fb:50:52:ed:b4:ce:12:ab:7d:ed:
f0:0d:f5:f1:ef:01:93:b0:8d:31:2e:7b:3f:67:6f:82:cf:81:
e9:26:2b:ba:dc:6d:0d:fd:1d:09:3d:df:1d:20:d8:91:d5:c5:
34:3d:ff:3c:6c:c4:07:d9:84:9b:7b:93:68:97:f0:1c:e6:51:
4f:ec:5d:cb:5d:26:d1:d4:79:e4:d6:0b:bb:5a:cc:c4:66:7a:
94:84:8e:d7:c5:9e:7a:1d:83:39:03:cb:c5:7c:eb:6f:ed:d8:
d9:44:ec:a5:87:ef:8b:cf:7b:6d:8c:24:31:da:34:16:fa:fe:
cd:45:06:94:4b:f5:3d:25:5e:61:d4:03:1d:27:d5:f6:46:81:
5d:fd:da:42:1d:f8:87:c3:05:94:9b:38:04:94:b4:d3:a0:96:
14:23:f1:62:08:14:8d:8d:e0:fc:dc:26:7b:a7:0d:4b:47:28:
98:ae:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net