Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: jaYgmoQlSkYmV6lk+stBi12ZS5HO51t0RcPVU+lvv2Q=
Subject key identifier: 20:BB:71:63:FC:0C:1F:49:E3:A4:75:6E:82:86:F3:49:19:25:AF:E8
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 01962F74753E877812EBEA0964E76049FFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0DD0
Signing time: Sun 13 Apr 2025 14:01:23 +0000
Manifest this update: Sun 13 Apr 2025 14:01:23 +0000
Manifest next update: Mon 14 Apr 2025 14:01:23 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: noJLJS4X0zJLi3XTteHuDBs/gVm6pRNMYnkwUKQ3TYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:75:3e:87:78:12:eb:ea:09:64:e7:60:49:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Apr 13 14:01:23 2025 GMT
Not After : Apr 14 14:01:23 2025 GMT
Subject: CN=20bb7163fc0c1f49e3a4756e8286f3491925afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:6d:88:5c:60:57:58:ab:c2:1b:12:a9:26:
5e:d5:bb:0b:67:e5:0d:68:3b:1e:c8:a7:c0:2a:05:
14:d4:eb:ac:b0:39:e5:d9:8f:e8:74:49:e8:0e:75:
2e:eb:b6:52:c9:3c:be:c1:8c:e8:8b:41:46:c6:68:
ab:56:c7:56:00:7c:0b:a4:84:a1:4e:d0:5a:3a:20:
1e:73:fb:d3:c8:19:c0:2b:28:1f:d9:ce:8a:cc:00:
d3:ae:39:85:98:6f:2e:4b:81:d2:64:20:b9:b5:fe:
59:fe:e8:8e:f9:7d:a0:90:27:f6:77:73:a5:5e:95:
14:a9:a8:5c:56:fb:dd:e1:7f:37:5e:57:58:bf:0a:
78:75:f6:ef:d9:bd:b2:7d:9c:1f:2e:90:e4:42:43:
ce:53:bc:ed:84:f2:cd:cf:c0:34:5e:ce:d1:b7:81:
14:5f:c6:bb:09:37:18:fd:90:bb:1d:c1:62:aa:aa:
e2:d4:63:ad:9e:67:fe:12:7b:b3:1a:5e:10:49:67:
a9:5a:bc:b6:a6:32:63:d8:0f:44:9d:da:dd:e5:8a:
9f:1d:27:ee:c6:89:cf:0e:53:30:a0:ab:06:df:0a:
ec:ae:91:a0:fd:ff:94:f6:15:9c:ab:a2:1c:a7:54:
d5:a4:ff:86:33:f4:6b:f7:04:7f:36:1e:96:90:7e:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:71:63:FC:0C:1F:49:E3:A4:75:6E:82:86:F3:49:19:25:AF:E8
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:8d:90:64:6a:fd:f9:46:50:20:6d:c3:07:90:01:05:41:
33:ca:05:8a:39:67:cb:d5:a0:37:7b:d5:21:c5:bc:06:b0:21:
18:0f:37:e6:11:6f:e6:d7:f7:4e:4d:9c:14:4e:84:f5:11:6b:
b5:bf:5a:1c:d9:bc:ef:f0:7f:f9:41:5e:43:86:36:7b:06:10:
17:33:1a:a3:0e:5c:e2:80:a6:da:a5:5f:75:f1:bc:37:5d:28:
a4:7a:5c:68:03:0f:96:ad:a3:b7:59:98:63:f0:62:fc:c4:e1:
03:c6:36:7f:db:0f:f1:17:4a:8f:f6:ae:c6:c4:a2:24:71:d4:
70:06:e6:f3:69:e8:1c:e1:e5:13:13:ee:4b:97:29:8d:1e:95:
60:df:21:5f:42:cf:56:3e:3f:da:8b:21:f0:75:72:cb:39:f3:
71:89:39:4f:b6:19:f5:1e:ef:47:3f:9a:30:e4:b9:bb:ae:b0:
c8:dd:58:9d:f4:4b:50:d5:a5:fe:ce:46:c3:59:f0:39:50:3e:
4a:69:bb:29:6e:87:81:17:d8:90:42:a6:81:8d:88:1b:6e:e8:
51:37:a9:12:61:d7:7a:89:75:14:ab:45:8e:30:77:45:99:45:
df:30:ba:6a:91:47:b6:cc:df:79:e0:b1:7c:db:04:ef:ae:4c:
8d:1d:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net