Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: Rz854T+GdnvPU5HY+RDLd5H7+dsIqE6gsQ+FAR4xtSA=
Subject key identifier: 65:6F:F4:62:C3:A1:EF:0C:0F:7B:86:44:1E:39:5E:22:14:37:A8:7A
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 01962E98E73ED9057C6410D1B42E8BD1AFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 04A3
Signing time: Sun 13 Apr 2025 10:01:34 +0000
Manifest this update: Sun 13 Apr 2025 10:01:34 +0000
Manifest next update: Mon 14 Apr 2025 10:01:34 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: cGETFZVizsm1irSnszvzu5wQQI2smJDpmH9e5NPpUTk=)
2: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (hash: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:e7:3e:d9:05:7c:64:10:d1:b4:2e:8b:d1:af:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Apr 13 10:01:34 2025 GMT
Not After : Apr 14 10:01:34 2025 GMT
Subject: CN=656ff462c3a1ef0c0f7b86441e395e221437a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:07:fc:1e:9d:61:be:56:2b:6d:7f:7a:64:
57:40:7b:1f:db:00:ca:21:c9:be:ba:70:6c:f9:f1:
a6:84:ef:8c:f0:09:04:d9:00:7c:2e:9a:67:64:63:
de:f0:aa:88:d1:60:89:e8:2d:c8:ee:64:64:fe:3b:
6d:f5:55:ca:c3:86:15:1e:99:b2:da:57:69:f0:6b:
c5:c9:8a:26:bc:2d:e0:88:4b:60:b5:ae:7e:da:c3:
19:04:6b:4b:fd:70:21:65:79:0e:bd:c2:5c:04:67:
90:e4:37:4c:46:ff:33:95:f3:0e:90:87:9f:33:32:
25:05:64:e4:cc:cd:a7:d8:ab:96:e2:44:d2:19:3d:
33:ca:63:58:e7:35:d0:8d:ed:05:0c:ba:67:69:ad:
09:a4:bb:8f:ab:96:14:5c:f7:12:86:d3:aa:8b:a5:
40:06:ef:8f:f4:2c:5a:c5:80:7d:83:0f:20:7a:2c:
ca:54:5b:9a:15:a1:87:05:c6:db:e7:9a:20:ec:f7:
54:a3:63:c2:79:c5:39:7b:26:4c:72:79:7f:0b:3b:
1f:c1:1d:80:5b:c4:03:92:ff:64:5d:d1:41:4a:7c:
8b:98:ac:6c:38:3a:ee:3b:15:65:2f:f0:8a:68:41:
ca:c8:a6:ab:56:3d:27:f4:ee:25:61:d4:9b:ba:7f:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:F4:62:C3:A1:EF:0C:0F:7B:86:44:1E:39:5E:22:14:37:A8:7A
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e4:52:2c:74:4e:cc:0a:21:3d:6c:d6:41:26:99:b3:61:95:
6c:81:bd:8c:86:2f:1a:ee:f9:2a:10:1e:c1:46:4c:38:63:49:
4e:c6:4b:be:fe:14:7d:12:d6:4b:05:51:1b:aa:67:2c:61:2b:
ec:51:16:15:4a:cf:ed:de:e2:92:64:bb:36:95:74:64:88:b4:
19:30:e1:93:26:92:68:a9:d8:d7:0e:c6:27:9e:c7:fe:de:d0:
e3:c8:29:6f:1f:dc:d7:64:96:56:5c:90:1f:5e:55:8b:7c:ae:
f4:ab:d0:c4:5e:cc:39:7d:e8:ed:9d:d3:5a:bd:ae:7d:8d:24:
e3:34:70:f2:4e:2c:b9:ec:6b:09:48:26:8b:cc:56:a6:dc:e4:
6b:13:a5:6a:98:b7:83:7c:d5:81:1e:0f:e1:a1:1a:64:df:de:
33:e5:ea:8b:72:fd:a0:0a:13:93:ab:ea:73:19:1f:68:b1:97:
93:28:b1:be:73:34:64:36:3a:58:48:4e:59:29:7e:d3:b2:c7:
26:e1:a4:b7:cc:18:81:e9:82:e8:b3:67:1e:80:fa:b9:0a:8a:
9d:1e:ad:8f:6a:93:05:11:97:54:ce:80:72:10:5b:e5:e0:73:
81:e7:5f:c5:f8:6a:81:e5:cd:cd:08:40:18:1f:c3:31:f2:ac:
b7:02:4a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOc+2QV8ZBDRtC6L0a/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi
ZGVjOTMwHhcNMjUwNDEzMTAwMTM0WhcNMjUwNDE0MTAwMTM0WjAzMTEwLwYDVQQD
Eyg2NTZmZjQ2MmMzYTFlZjBjMGY3Yjg2NDQxZTM5NWUyMjE0MzdhODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS8H/B6dYb5WK21/emRXQHsf2wDK
Icm+unBs+fGmhO+M8AkE2QB8LppnZGPe8KqI0WCJ6C3I7mRk/jtt9VXKw4YVHpmy
2ldp8GvFyYomvC3giEtgta5+2sMZBGtL/XAhZXkOvcJcBGeQ5DdMRv8zlfMOkIef
MzIlBWTkzM2n2KuW4kTSGT0zymNY5zXQje0FDLpnaa0JpLuPq5YUXPcShtOqi6VA
Bu+P9CxaxYB9gw8geizKVFuaFaGHBcbb55og7PdUo2PCecU5eyZMcnl/CzsfwR2A
W8QDkv9kXdFBSnyLmKxsODruOxVlL/CKaEHKyKarVj0n9O4lYdSbun80yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVv9GLDoe8MD3uGRB45XiIUN6h6MB8GA1UdIwQY
MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt
ZWIzZTc4NWQ5MDk3LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3
LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABORSLHRO
zAohPWzWQSaZs2GVbIG9jIYvGu75KhAewUZMOGNJTsZLvv4UfRLWSwVRG6pnLGEr
7FEWFUrP7d7ikmS7NpV0ZIi0GTDhkyaSaKnY1w7GJ57H/t7Q48gpbx/c12SWVlyQ
H15Vi3yu9KvQxF7MOX3o7Z3TWr2ufY0k4zRw8k4suexrCUgmi8xWptzkaxOlapi3
g3zVgR4P4aEaZN/eM+Xqi3L9oAoTk6vqcxkfaLGXkyixvnM0ZDY6WEhOWSl+07LH
JuGkt8wYgemC6LNnHoD6uQqKnR6tj2qTBRGXVM6AchBb5eBzgedfxfhqgeXNzQhA
GB/DMfKstwJK6g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net