Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: cRsMhCqT5swDyxDWwVQaGQgr+ozXKfSSveefRnXd0yg=
Subject key identifier: 8B:18:20:8C:41:35:AB:7D:13:0E:71:48:D2:8A:99:7A:B4:CE:11:A1
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01962DF3D8E38F9B89B200255490969EDD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 07:01:17 +0000
Manifest this update: Sun 13 Apr 2025 07:01:17 +0000
Manifest next update: Mon 14 Apr 2025 07:01:17 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: Sq8NjiVUjWeffJXT09ZpQ9uEv3CjTGT4BfH2eD0gMeg=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:d8:e3:8f:9b:89:b2:00:25:54:90:96:9e:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Apr 13 07:01:17 2025 GMT
Not After : Apr 14 07:01:17 2025 GMT
Subject: CN=8b18208c4135ab7d130e7148d28a997ab4ce11a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:31:0e:b7:34:5d:91:19:8e:60:61:58:dd:
37:a0:97:b4:74:d1:81:5a:3f:6d:43:55:8a:41:b0:
12:8c:3d:33:42:17:39:58:ce:63:24:ef:9b:22:d4:
af:c2:68:7c:a1:8a:26:ba:1e:c8:cc:72:64:47:20:
65:da:10:24:e7:9d:c6:e3:d9:c9:9d:82:91:7f:a6:
55:3f:67:5d:40:cc:12:ba:a4:c3:06:9f:6b:f8:9c:
71:8c:26:8f:87:ff:67:95:cd:a6:f6:60:b9:1a:75:
5b:58:1d:2d:2d:b1:7c:2e:69:34:28:63:11:8d:72:
4f:e8:ca:bb:0b:9f:d6:85:4c:74:7a:a5:82:32:c4:
8f:13:2d:80:b9:00:94:8a:bd:ad:fd:9f:37:43:a8:
5f:ae:e1:a9:4a:70:21:ca:1d:be:f1:09:ff:da:79:
85:64:70:84:62:8c:87:3f:e0:ea:ec:80:3d:e5:ae:
06:27:18:41:e8:4f:df:8b:e0:87:67:0e:3c:2e:c8:
70:ac:66:88:19:1e:b3:39:a2:35:92:d9:39:e5:eb:
a7:ae:4a:99:c5:7e:cf:de:93:33:c9:6d:db:44:6a:
48:a1:5a:0e:8a:2b:c8:48:19:84:a6:82:37:3e:a7:
a7:85:a1:d8:61:1c:cb:f2:e2:2c:07:ec:f1:fa:73:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:20:8C:41:35:AB:7D:13:0E:71:48:D2:8A:99:7A:B4:CE:11:A1
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:67:f0:27:b0:f6:20:7a:c2:b1:6d:f4:8d:8c:2e:1a:f8:9b:
74:a0:87:bc:05:19:7c:3b:6b:c3:c2:e5:3e:63:74:d9:00:b9:
f6:c4:4e:65:d3:84:3f:f0:6b:1b:10:da:a1:a6:96:90:3f:00:
6f:9c:11:46:e0:79:1a:a0:f5:2a:25:50:58:f3:ef:e0:ec:b5:
84:f0:f7:66:8c:5c:25:f0:83:f5:02:be:b2:d9:98:c7:8d:56:
62:78:6e:7a:e1:dd:15:36:7e:c6:5e:c1:5b:80:19:a0:56:90:
19:8c:c3:c0:8c:6c:a4:b1:9e:a6:60:02:87:78:99:76:bc:37:
5c:37:e5:13:12:ea:ec:58:cf:55:ea:58:a9:09:6c:d7:ed:86:
86:cf:b9:e7:6a:a3:03:d8:26:14:25:07:dd:21:6e:ee:ab:42:
cb:ce:7c:ed:e6:3b:40:79:69:32:67:38:b5:29:12:08:38:b0:
3e:e7:9f:28:8d:38:e8:2d:4c:c9:2e:d5:e9:dc:b7:dd:0a:58:
b0:62:75:6f:d4:79:4e:d2:dd:a0:d1:67:7e:86:e5:60:03:80:
1e:95:98:ad:56:f5:50:1b:20:cb:84:b2:f6:1c:cd:c9:3c:7d:
cd:1a:40:29:ae:ec:84:cd:7c:4c:0f:5f:b4:fc:d4:4d:44:c1:
e3:ca:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net