
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: K0lgaGMFkhojCh6PQQ8ymhZTmFtq9L93/1pYDzhciU8=
Subject key identifier: 5E:2D:28:44:05:6D:9C:66:67:5D:FD:DB:61:24:E9:08:25:47:60:23
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 01962E61DFF82F736BAE930E54D9DA3B6DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 09:01:28 +0000
Manifest this update: Sun 13 Apr 2025 09:01:28 +0000
Manifest next update: Mon 14 Apr 2025 09:01:28 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: oCsCxGae4A2QcghY8oas63MPA9Dto9qTmmKls+lNNoI=)
2: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (hash: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=)
3: K8XuD1NpxrW0TJB7qtrYsXkJRDA.roa (hash: /CdBF5kIZ5ECcmHw5H6/OJaH4oIiEyJ+Vl+1/T4lKZc=)
4: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (hash: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:df:f8:2f:73:6b:ae:93:0e:54:d9:da:3b:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Apr 13 09:01:28 2025 GMT
Not After : Apr 14 09:01:28 2025 GMT
Subject: CN=5e2d2844056d9c66675dfddb6124e90825476023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:99:d9:97:d8:f3:76:f2:8a:00:48:2d:d8:
19:58:61:cd:fd:e9:78:9a:4f:71:7f:11:f0:94:80:
24:f4:af:32:f6:d1:90:92:75:ba:39:69:08:fb:36:
6f:b4:d5:c9:0a:55:7f:8d:64:95:37:eb:78:bb:a8:
ce:c5:3c:4d:78:d6:bf:2a:68:da:99:60:37:1d:cc:
d0:bd:32:88:46:32:c3:f4:36:8f:78:0b:9c:07:6a:
80:1c:9a:43:a1:bf:f1:78:5a:7b:f6:c3:ad:8b:cc:
b9:c2:c5:43:e5:f1:cf:00:f0:f7:cb:5a:51:60:2d:
ee:6d:aa:52:cc:0f:f8:b9:7b:92:24:a9:ed:3e:eb:
d2:22:0a:86:53:c1:dc:a1:96:31:c6:ec:6f:f0:e0:
5c:81:77:93:91:f2:f3:77:b1:cf:b9:4f:40:61:8c:
cf:45:e3:c9:cb:eb:44:70:18:b9:47:cd:b7:02:7c:
78:c8:91:84:48:60:12:9e:f4:50:5f:0b:90:38:73:
10:d4:10:ab:21:2e:83:e1:e0:0f:7d:74:3a:99:03:
8f:4a:67:c6:a2:33:92:3d:4b:3d:e2:04:39:96:8f:
a7:00:74:3d:e1:54:47:67:99:35:04:cf:fc:72:c7:
32:d8:17:2e:39:16:1d:6d:8f:1d:f9:a2:c7:b4:7a:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:28:44:05:6D:9C:66:67:5D:FD:DB:61:24:E9:08:25:47:60:23
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:20:38:d1:a4:79:6e:cc:ba:f5:6b:e6:a0:48:15:9b:11:
80:ee:be:6f:9e:71:93:89:df:b7:84:59:0a:cf:bf:07:88:c8:
5c:02:4f:49:fb:8d:40:b7:bb:ae:4d:e7:f6:82:d2:e1:e4:33:
73:90:dd:f2:bd:ea:36:f5:c3:d0:c6:0b:e4:05:21:df:4f:19:
52:9a:70:18:ae:a1:e8:f8:94:06:5d:f8:78:ce:21:1f:22:19:
b7:f9:5e:d4:c6:59:a7:42:48:97:64:fe:c6:05:94:c6:5a:f3:
0d:e6:be:dc:56:8b:83:84:ca:bc:11:8d:09:e3:2d:cb:0b:24:
f3:13:01:f6:6c:d3:16:3c:c3:e2:4a:0c:1b:4e:79:2f:f2:f7:
6b:6b:e7:7c:b6:2e:6a:62:46:81:ff:d5:99:74:ca:6d:35:e8:
09:3d:33:b1:dd:41:c0:a2:50:ef:a9:bf:48:60:83:c2:d6:66:
2f:e9:cf:9a:88:71:3c:9e:bc:69:6f:c7:07:9d:ea:55:8a:94:
9b:0f:0f:77:7d:f4:a9:e8:b8:20:0a:4b:8e:b2:72:e6:2f:e0:
fa:35:df:09:ac:6b:4a:8e:4b:83:38:62:be:ef:35:60:82:17:
a2:54:d5:d0:f7:e1:3b:98:51:ea:d0:3b:9c:2f:f5:17:0a:46:
08:b1:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net