Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: dQ+EOToLTSfCjSQmi7jk6SK3JRV5j2WZOQbaYNR2b6g=
Subject key identifier: 7A:34:92:C8:6A:9B:75:A9:05:B5:5A:25:58:21:6B:1D:9F:14:1C:FE
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 01962F06CF7DF5C753927DD819FFCA648D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 12:01:37 +0000
Manifest this update: Sun 13 Apr 2025 12:01:37 +0000
Manifest next update: Mon 14 Apr 2025 12:01:37 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: 5Qhtp4nO0YaQBtRvtXCZ87VVWDO83nQQCi6+xqZwcJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:cf:7d:f5:c7:53:92:7d:d8:19:ff:ca:64:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Apr 13 12:01:37 2025 GMT
Not After : Apr 14 12:01:37 2025 GMT
Subject: CN=7a3492c86a9b75a905b55a2558216b1d9f141cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:4e:4a:9d:45:22:a8:af:a4:cb:80:e6:d8:
fb:f4:bb:6f:af:09:89:73:ab:69:c7:d4:26:02:fe:
a1:62:ae:80:0c:7b:9a:e2:d5:6c:f0:48:13:a2:2a:
b4:90:b7:62:23:21:47:74:8e:81:dc:2f:87:a2:a8:
3e:e4:ce:2e:01:fe:aa:01:ff:9f:c6:9c:f8:a4:c0:
30:1d:df:f6:21:a8:cf:b4:8b:03:b7:ee:d3:c7:1e:
9b:a4:bd:00:9a:e8:8b:cd:7e:11:ef:f3:00:24:79:
39:9f:e0:17:54:c2:66:0b:02:5a:4f:1d:9b:83:68:
83:a9:91:1b:24:e2:9c:ad:61:6a:49:d5:7f:8b:72:
0e:17:a6:e4:68:6a:bb:a7:4f:f3:b8:35:52:22:93:
4c:18:f3:de:5a:6c:14:a6:39:6b:35:d5:90:50:b3:
f6:cd:e6:05:b0:eb:c4:1e:1a:93:26:29:19:35:1c:
55:7c:a0:c2:7b:80:42:8f:c8:b6:31:78:89:72:64:
14:fd:76:53:47:4f:6f:8e:b3:2f:70:84:c4:0d:86:
07:13:96:a7:32:b6:32:1e:ed:b1:2e:4e:d9:5d:b5:
bf:0b:4e:70:4b:0c:c8:28:7a:8d:3c:55:88:0d:9d:
2d:78:2f:7a:70:cc:7c:64:c2:f5:34:be:11:6c:cb:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:92:C8:6A:9B:75:A9:05:B5:5A:25:58:21:6B:1D:9F:14:1C:FE
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:ff:60:2e:0b:e8:29:10:27:92:19:4f:96:e9:3d:09:d3:
90:26:17:7a:9b:da:00:4e:f1:34:e0:c2:ed:97:db:d8:40:f9:
fa:f0:ba:5e:95:53:2f:31:7d:c2:f4:98:de:53:14:14:1c:4b:
48:cb:c5:bb:52:68:c8:84:bd:27:5b:6b:3f:bd:4f:8e:32:8b:
80:43:de:2a:6c:6d:16:9f:6a:f0:ad:b6:8c:f7:8d:92:99:6e:
28:3c:48:d9:5c:74:04:97:3f:f2:fe:20:a2:a1:60:73:76:7f:
48:b4:a7:cc:26:3c:ee:91:e4:ed:eb:ea:f9:cc:59:ce:90:8b:
34:b6:63:d8:cf:21:d2:b7:86:24:4c:59:fb:fe:82:97:6f:c9:
bc:be:e7:2e:1f:33:c0:dc:a0:c3:4b:4c:71:f3:df:82:b9:5d:
dc:b7:d8:37:a6:19:c4:c3:6d:fb:1f:91:88:64:29:8b:73:0c:
38:93:2c:45:41:f3:d2:0e:25:b0:0c:3b:7b:78:a3:8f:8f:ce:
00:54:57:97:32:91:a0:9b:7c:6e:b5:e0:5d:51:43:2c:e0:aa:
92:52:da:61:9b:99:f4:a7:f5:8f:75:2d:96:b8:4a:6f:d5:d0:
b1:63:46:4c:1d:2f:6b:94:6f:e1:e8:e3:5c:b1:2a:b8:55:7a:
9e:e3:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net