Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier: 9LOR9m7eak0D3Kd1UVUBbh5pfH18a8R07fKMQ7fC7Lw=
Subject key identifier: 4A:C8:FF:D7:8E:68:CC:03:1A:EB:2A:D4:14:14:5B:FC:64:B5:A8:44
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 01962F3D9855298559CDC63C04F3DD6C7E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number: 144A
Signing time: Sun 13 Apr 2025 13:01:27 +0000
Manifest this update: Sun 13 Apr 2025 13:01:27 +0000
Manifest next update: Mon 14 Apr 2025 13:01:27 +0000
Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: ljBwrs4bQNO39dbTk/pEQe06N5w0hDcFYS/orSeHzco=)
2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:98:55:29:85:59:cd:c6:3c:04:f3:dd:6c:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Apr 13 13:01:27 2025 GMT
Not After : Apr 14 13:01:27 2025 GMT
Subject: CN=4ac8ffd78e68cc031aeb2ad414145bfc64b5a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:6d:14:95:8c:cb:40:67:f0:aa:d1:72:59:
06:bf:ed:f3:71:37:f0:71:56:29:e4:27:e2:c8:38:
1b:09:86:86:58:4a:bd:10:1d:69:24:5e:c6:75:9e:
9a:5f:d7:72:13:63:72:57:3d:e0:61:58:be:c4:da:
35:9d:86:fc:a0:70:23:1f:5b:77:63:ff:8b:65:00:
a0:47:fb:70:6b:5f:e1:d7:9b:4f:08:a2:cf:26:34:
c3:ec:d2:29:6d:e7:94:05:3a:ef:11:f7:ba:01:e9:
7d:64:2b:0c:ae:c8:ea:49:bc:ff:fe:e6:fd:13:2f:
f1:92:9c:cc:f0:4a:ff:46:f7:89:d0:17:ef:77:04:
ed:f4:45:bc:58:76:51:fc:44:18:4f:c6:56:89:34:
73:60:52:83:e8:9f:b3:ab:09:ec:37:78:35:f6:c9:
39:8c:d2:02:f7:82:53:e1:f6:ac:c7:ef:f6:8d:fc:
49:6b:40:6e:f4:e6:5b:6d:0a:d7:cd:37:dd:68:96:
bc:ac:2d:68:2e:21:58:7a:03:07:c5:28:b7:96:c8:
f0:03:84:fd:b3:2c:60:2c:6d:8f:db:ac:86:1d:14:
c4:8f:33:2c:25:0d:03:29:de:59:95:da:58:87:d8:
57:6d:6d:0f:8d:47:07:72:03:23:09:6c:e8:b9:67:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:FF:D7:8E:68:CC:03:1A:EB:2A:D4:14:14:5B:FC:64:B5:A8:44
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a9:2f:58:a7:32:69:7a:cd:4b:f0:a3:7c:82:03:9a:ee:e9:
79:9e:8e:ec:d1:d0:a7:90:32:2d:e4:c4:05:a9:ca:3e:4a:de:
9a:41:38:57:8a:63:81:0c:dd:00:4e:4f:ec:3d:fb:15:57:b2:
f4:11:bd:30:48:c4:9f:e8:95:11:f8:9e:99:7e:8f:e4:d1:f2:
e6:a6:32:de:da:67:4e:8f:a7:17:ee:0e:57:c0:1f:0c:cd:1a:
4b:9c:8e:c6:8b:f7:e5:e4:3b:1b:88:eb:4c:ba:55:72:42:c1:
ca:55:7b:82:08:b9:02:dc:95:78:25:f6:72:7e:e5:a9:69:d3:
44:f1:4c:06:e4:65:43:df:4a:77:b2:0f:76:61:dd:9e:ca:9c:
f5:56:52:42:d9:65:21:49:09:9d:f5:ec:29:9b:31:1a:9d:fb:
ee:4f:a9:d9:f4:f6:32:93:c8:1e:00:64:8b:ea:7a:81:ec:0c:
6a:ee:59:a4:6f:fc:4d:3a:94:1e:07:ac:43:7c:88:99:03:77:
a7:93:f2:3e:a3:4c:94:bb:3f:09:72:af:79:82:e4:2c:0e:6f:
ac:4e:af:2e:71:83:bd:83:64:c7:85:85:1c:4b:53:8b:de:d0:
15:1d:e8:16:46:9c:60:25:72:f2:38:60:4f:68:3e:c0:8e:be:
32:c9:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net