Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
File: h9OLoS9GKcITH8YOiVDWwwO-fSI.mft (raw, json)
Hash identifier: yzVqVY3IbvkIXc+gn0k3Mi7RS7t73i20YtYmYBTtQr4=
Subject key identifier: 26:6B:4F:56:E6:9C:0B:80:D5:FE:14:D0:97:90:37:AF:D6:44:3B:35
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 01962ECFA2CAA170D8546D7A667A2462B7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
Manifest number: 064C
Signing time: Sun 13 Apr 2025 11:01:21 +0000
Manifest this update: Sun 13 Apr 2025 11:01:21 +0000
Manifest next update: Mon 14 Apr 2025 11:01:21 +0000
Files and hashes: 1: NPXq7VLWTvwMe_H1BOcCF7vP8QQ.roa (hash: UBan9KbEcKtiRn9epXoesYMRtYi5lW0QY6/c4yNUKv8=)
2: h9OLoS9GKcITH8YOiVDWwwO-fSI.crl (hash: 2uioK0cyjWqnr83v8EMv525WLkd0rizmEfnkCjHTmrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:a2:ca:a1:70:d8:54:6d:7a:66:7a:24:62:b7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Apr 13 11:01:21 2025 GMT
Not After : Apr 14 11:01:21 2025 GMT
Subject: CN=266b4f56e69c0b80d5fe14d0979037afd6443b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:45:d3:01:b8:41:58:8c:dd:5b:4b:66:af:
ea:a1:ab:e9:c4:95:b7:fe:8c:bd:6b:42:16:a1:5b:
f6:2f:a1:0d:a5:ea:6a:41:d3:44:d0:fe:eb:c4:d7:
6b:17:b5:af:fb:a2:f1:7a:ef:ab:9c:cb:52:51:f2:
51:a4:7a:b3:77:79:a0:d6:6e:86:02:62:69:e6:27:
2d:81:f8:61:4c:a9:c2:22:4c:58:55:d4:3b:be:48:
12:b7:f3:85:83:1f:50:66:3e:1a:8f:2a:87:c3:1d:
1e:5e:e8:e2:8f:16:fd:c5:b8:90:f4:5b:e2:1b:50:
54:22:a3:91:4a:fe:4c:e8:68:05:cc:e7:d0:ea:a8:
3b:e6:7a:2c:b8:47:d0:53:31:2b:f0:0a:81:18:ba:
95:93:4b:64:3f:d5:69:ef:52:9b:9c:bb:3a:ef:a0:
d8:84:3c:e6:03:ca:a6:e2:18:2b:40:2c:ab:62:6b:
e9:e7:16:42:88:9c:48:5a:68:a0:c5:e3:8c:ee:95:
73:60:65:71:1b:0f:37:39:43:d9:91:55:a6:4b:f2:
c5:31:93:a3:c4:5a:07:8d:0a:bd:38:2e:07:41:36:
73:80:17:f4:99:ff:1f:f1:04:eb:0e:ca:21:ec:e7:
bf:49:43:3f:ad:6b:80:e6:f9:68:d2:4d:38:e5:79:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:4F:56:E6:9C:0B:80:D5:FE:14:D0:97:90:37:AF:D6:44:3B:35
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:32:a9:25:5e:3d:44:a0:18:95:f8:e2:70:b7:c6:3f:8f:87:
c0:4a:ab:4c:12:93:c7:1b:bb:c6:02:5a:cf:f7:1e:2e:22:6d:
cd:88:5c:91:40:a6:f0:4e:9e:5f:44:1b:a0:b0:31:ce:08:03:
3d:d1:fc:c2:3f:49:7d:3f:9c:aa:c5:5f:5e:d7:ae:8c:fe:2e:
cf:a1:5e:d9:b6:1f:f9:ff:2d:5c:15:dd:10:4c:e7:29:db:db:
bb:6c:c9:f3:c2:2e:db:eb:0b:a3:21:1d:07:74:cd:0f:8c:b5:
ad:60:32:59:d8:08:0f:a7:7b:03:0e:d8:f0:8f:33:a8:c5:fc:
38:a7:15:e8:55:71:ce:79:80:3f:1b:6e:5d:a4:ff:ce:50:d8:
21:55:8d:72:ca:22:05:00:be:27:26:29:08:01:55:9c:ae:c3:
9a:13:c9:33:3b:fa:a8:d3:17:af:6c:3a:26:16:20:98:0d:66:
58:05:6e:8c:44:8c:f1:03:09:38:db:61:d9:dd:01:54:a5:93:
56:ad:e6:3d:26:89:61:ad:19:63:5b:0b:c0:c3:3f:dd:9a:4c:
34:56:00:d0:87:9d:1d:de:95:fd:37:e0:6f:55:a9:fd:5a:a6:
aa:f4:b9:50:a0:7f:5f:b5:d0:32:28:e4:cf:e0:99:fe:bc:46:
f1:3a:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net