Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: wPQxZV4xkAUshppBuDj932rt33hXkF80WW4bFL5Yuf4=
Subject key identifier: C4:1F:B9:DE:68:31:3D:44:2D:99:EF:F3:69:F9:93:3A:33:67:29:DF
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 01962E61B1501871E74E054592BDA8EA3BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 09:01:16 +0000
Manifest this update: Sun 13 Apr 2025 09:01:16 +0000
Manifest next update: Mon 14 Apr 2025 09:01:16 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: /3cYtrvtZ5tDWUemlNzcwjPAzosqSE3S0UMlPl1XpxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:b1:50:18:71:e7:4e:05:45:92:bd:a8:ea:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Apr 13 09:01:16 2025 GMT
Not After : Apr 14 09:01:16 2025 GMT
Subject: CN=c41fb9de68313d442d99eff369f9933a336729df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:b3:08:5d:06:c9:d8:1f:f2:ff:bc:b5:3f:
54:bc:3d:b3:91:3a:12:a5:48:03:f3:1f:b5:b4:49:
2c:3a:6d:22:67:64:f4:0c:16:65:63:ba:ce:fc:09:
b4:02:d7:ff:a7:8b:10:c4:ef:97:81:c1:c1:43:64:
7d:94:ec:80:06:1b:0e:b4:b5:ca:2d:e5:12:50:36:
bc:05:1b:97:f0:c3:28:df:b0:52:c6:c3:55:1e:41:
0c:a1:c8:6a:95:f5:52:1b:13:59:ab:d3:bd:46:77:
7e:19:e7:98:35:c0:4d:37:43:ea:b8:4b:d9:f7:7b:
49:d6:3e:03:20:6f:b9:ad:fb:53:8b:b6:e4:3f:e7:
1c:75:5b:7d:2f:d0:d3:12:d4:20:a1:46:71:8e:6b:
e5:17:47:86:2c:eb:b2:7c:68:90:48:b3:cf:7f:7f:
62:9a:ac:fa:61:45:17:43:f2:bc:4c:8d:d4:a6:d8:
e0:65:74:37:47:89:79:c3:6f:2d:a6:cb:40:b3:be:
2d:06:ef:ec:27:06:aa:a1:4c:01:1f:e1:84:72:60:
26:36:57:90:fd:e3:bb:ba:3b:b1:2f:d6:4f:f0:c8:
e0:59:e8:a5:53:69:5b:68:f9:90:59:d0:39:76:ff:
0b:dd:dc:b9:13:29:64:80:ff:d5:8b:ba:58:52:b0:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:B9:DE:68:31:3D:44:2D:99:EF:F3:69:F9:93:3A:33:67:29:DF
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:95:72:35:8d:82:95:d6:00:d5:f9:70:47:5b:9a:59:1b:9f:
49:35:dd:4c:1d:26:e7:8a:45:42:d5:a2:49:f4:0d:33:4c:d1:
7c:ef:02:cf:2c:14:ea:36:a0:45:0e:ce:88:67:3e:bd:a2:64:
9f:f2:73:e7:af:b0:92:22:50:52:49:6c:ed:4c:2b:59:3d:c2:
23:fa:17:03:a3:7e:73:88:2d:92:ae:d5:c4:ec:62:91:98:d7:
89:a8:95:dc:4d:63:2f:53:dd:fe:d2:d8:ce:6b:bb:9d:c2:05:
e2:4d:42:a8:1f:43:25:2d:1b:8e:8c:e4:cc:a6:4c:eb:52:58:
b0:dd:9c:70:98:be:ce:e3:64:14:e3:3d:e4:07:ae:25:c7:25:
af:b9:13:aa:2a:1d:b8:33:00:25:c5:61:bf:27:59:de:d7:59:
1c:64:6e:33:1a:27:ba:5d:ee:20:8e:c2:f1:d9:fc:b4:40:60:
60:46:f0:1b:f9:db:bc:09:1a:c0:4e:1f:9b:32:4b:d3:31:0a:
38:d9:d1:20:39:f3:6a:7e:03:ef:ca:e1:08:03:e5:63:7e:15:
dd:03:c6:36:a3:31:d5:b1:52:8c:a8:25:10:00:28:e8:26:e2:
09:9e:3f:4c:4d:81:ca:7d:da:f7:30:1c:fd:71:ca:53:e8:fe:
b5:c4:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net