Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: AQQKXqgQEmsw6BbNukl4Cibq8VDEDC7ZetCF8qotEt0=
Subject key identifier: D7:8A:9E:CA:6C:76:90:B7:93:AC:F7:6E:A0:4D:43:0F:74:41:0B:98
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01962E61B63D73D39B1EA09D22921F92C43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0494
Signing time: Sun 13 Apr 2025 09:01:17 +0000
Manifest this update: Sun 13 Apr 2025 09:01:17 +0000
Manifest next update: Mon 14 Apr 2025 09:01:17 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: l+U4kbSY3f4uZgPw0LknAOeiyUROaShSn3AI0AQfxCU=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:b6:3d:73:d3:9b:1e:a0:9d:22:92:1f:92:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Apr 13 09:01:17 2025 GMT
Not After : Apr 14 09:01:17 2025 GMT
Subject: CN=d78a9eca6c7690b793acf76ea04d430f74410b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:a2:60:8b:75:68:37:1d:93:4d:77:fa:03:
62:17:bc:2d:d4:31:7b:bf:31:08:bd:cd:38:5f:d2:
8f:a6:f7:6d:d3:a4:ce:4c:e8:32:94:82:10:be:b2:
80:36:11:40:da:af:bd:ea:b6:80:60:e0:a9:aa:01:
0a:c7:0c:f1:4e:a2:20:34:f5:71:a9:fd:86:49:93:
90:5e:63:c6:e5:f5:94:2b:3a:b9:e7:b5:6d:2c:90:
30:a3:1d:b8:1e:00:6e:35:de:82:29:b4:82:76:b0:
16:82:7a:0e:05:21:a2:35:d8:af:6d:72:9a:21:0c:
5b:ff:84:84:33:8c:56:47:e4:1c:e3:2b:17:18:86:
f6:ef:df:ee:6a:d0:d8:23:e1:17:ca:0d:ed:64:b3:
da:53:80:39:f4:c3:53:e6:7c:15:bb:ef:52:a7:86:
a2:d3:c2:01:c9:da:2e:53:11:dd:44:89:8b:a4:09:
cb:03:38:b4:8f:e8:92:91:91:af:8b:84:94:c7:f3:
e4:08:44:c8:65:c3:69:eb:29:61:43:7c:85:02:05:
47:f8:8e:33:4f:9b:f1:d9:4a:c0:ee:ac:f6:2f:5e:
0a:dc:4c:12:01:b1:a1:52:11:9c:bd:b7:8c:02:78:
40:c1:61:ab:b2:1a:04:67:78:d3:63:ca:ff:ac:42:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:9E:CA:6C:76:90:B7:93:AC:F7:6E:A0:4D:43:0F:74:41:0B:98
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4c:7c:e0:64:c9:61:76:2c:49:21:5e:43:33:45:48:48:cc:
60:03:a2:27:50:03:a4:c6:53:83:5a:5f:3a:68:61:b7:d9:0a:
e2:2e:9c:f2:31:24:7a:f1:7a:42:ef:eb:ce:6b:92:ca:1a:ed:
aa:2a:b3:ea:63:83:94:d9:54:84:a6:cf:5d:7e:02:6c:58:b6:
d7:5a:fa:78:2e:a8:50:bd:c0:c1:35:b4:e6:35:21:9a:66:0c:
73:fd:4f:c1:0a:1e:04:3c:85:c2:7c:33:06:03:c2:f1:a3:78:
f3:9b:0c:48:04:2b:dc:4d:60:80:ad:b4:cd:9a:1b:69:54:38:
b2:d1:df:0f:3a:01:13:42:c0:7c:b3:21:9a:4c:e2:39:2b:d4:
25:06:d8:cf:0d:03:71:46:cd:c9:22:7d:cd:b8:1d:4a:d1:1e:
a4:77:37:33:3b:33:29:99:d2:35:83:09:3a:7f:05:4c:43:87:
95:08:ab:70:18:e2:fb:8f:da:53:2d:a3:ac:91:bf:b1:7f:d7:
7b:b5:0f:73:90:39:48:cf:a8:8d:ba:88:a3:b5:3e:83:d2:d3:
b9:f4:ad:97:00:4f:72:6e:77:41:2f:e6:4f:d5:da:88:f7:f9:
4d:47:5f:cc:ba:0b:3f:d2:d1:c4:53:f6:ea:32:c7:00:7e:5f:
30:1e:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net