Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: tvHNsToDrXo1vvQtmARELv2awzAqWPfGKJQr5NHbzXI=
Subject key identifier: D3:6B:FE:9F:89:68:17:C6:3E:CA:F7:25:3A:CA:FE:2E:51:27:A0:87
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 01962E2AD543B9D2080E46C2FB8F450F259B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 147B
Signing time: Sun 13 Apr 2025 08:01:21 +0000
Manifest this update: Sun 13 Apr 2025 08:01:21 +0000
Manifest next update: Mon 14 Apr 2025 08:01:21 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: Ogp3F2h9SOPyZ2YmGu39CR8U0dZD4oVdtXWCwKCKkm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:d5:43:b9:d2:08:0e:46:c2:fb:8f:45:0f:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Apr 13 08:01:21 2025 GMT
Not After : Apr 14 08:01:21 2025 GMT
Subject: CN=d36bfe9f896817c63ecaf7253acafe2e5127a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:64:f6:37:ed:c8:93:e8:50:f6:f5:fc:ab:
7a:3c:cb:05:3f:92:07:ea:63:6d:af:1e:4e:30:57:
35:03:26:b8:0c:c5:be:52:18:58:ea:5b:f9:1d:81:
25:5e:87:d2:f6:df:9d:e2:1d:2c:84:f7:bf:df:95:
bb:d4:c3:3e:df:bc:17:82:64:fd:ec:ca:84:c4:ff:
20:94:73:15:10:1c:03:4a:7a:bd:64:d5:2a:bf:17:
ec:ea:57:95:5f:96:ca:3d:b9:ca:4b:1f:af:5d:26:
3b:10:85:49:25:cb:1d:db:1d:03:a4:c0:c7:c5:84:
8e:8c:a7:f0:a1:ac:35:c4:55:70:cc:85:2d:cc:5a:
ca:8b:bd:bc:8e:15:e4:6e:97:8f:87:eb:9b:28:75:
b6:47:32:5f:83:3c:1e:52:52:f3:5c:85:9c:e4:94:
8c:f8:df:38:29:f7:64:9a:76:dd:d8:2b:20:12:1b:
72:7e:6d:01:f6:9b:9e:f2:0b:bb:02:45:a8:12:e0:
92:cb:9a:cb:3e:37:5b:bb:5a:19:62:ba:6a:59:1e:
f0:29:a6:52:c6:5f:23:d4:bc:1a:02:29:ce:f2:8a:
42:cc:4a:f5:27:d0:2a:58:f5:8d:21:25:21:4c:b3:
0b:0e:93:81:dc:ff:82:f2:9a:49:05:9b:5c:fc:0e:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:FE:9F:89:68:17:C6:3E:CA:F7:25:3A:CA:FE:2E:51:27:A0:87
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9c:33:ec:4a:a2:06:7c:5a:ba:b0:98:ef:ea:32:0b:6c:b3:
54:63:93:af:c6:ac:a5:d2:dd:b3:20:c0:72:41:7d:45:64:1b:
4e:df:1d:42:fa:87:50:31:ad:f9:f3:45:8d:3d:2a:0b:cb:52:
3f:7c:e6:68:9b:22:56:d3:e2:fe:93:77:db:93:e3:b5:b3:58:
89:40:b4:57:05:4f:22:e5:22:d7:ce:8a:cc:25:b7:cb:67:8a:
95:66:75:2e:f0:82:44:cb:9a:b5:a8:a5:ba:c6:5e:c7:f1:cc:
71:cb:98:76:ea:c0:39:f5:9d:00:7d:15:71:a7:71:d7:be:53:
81:96:8d:04:71:4a:9b:b6:d8:b4:7e:ed:33:39:52:b7:34:25:
e2:32:5a:5b:da:9c:c8:d7:ed:5f:52:f0:c6:e1:bf:a7:15:03:
2e:16:64:94:29:8a:2a:28:0a:48:ec:a7:47:69:59:e9:35:c7:
44:5b:c5:35:d3:d5:1a:df:01:b3:76:ec:c6:d9:43:92:c1:97:
3f:28:1c:1a:18:11:a8:6f:07:3b:88:4c:58:ea:6a:2d:f6:cf:
b3:7a:67:e0:e2:38:68:53:76:53:94:63:c8:97:85:64:c6:7c:
1b:ba:11:4f:7d:f9:ac:ed:47:c3:44:e5:b1:aa:8f:1d:da:53:
cc:0c:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:12 2025 by rpki-client on console.sobornost.net