Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: JL718U9F3JaCGS3vbqK76goGY9q8IVFgPQuDlhBYWXo=
Subject key identifier: 36:72:39:02:39:96:77:32:5A:5B:10:49:D5:84:FD:E6:8E:E6:14:0C
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01962F3D41E1191036BED8992AB4436361E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 147C
Signing time: Sun 13 Apr 2025 13:01:05 +0000
Manifest this update: Sun 13 Apr 2025 13:01:05 +0000
Manifest next update: Mon 14 Apr 2025 13:01:05 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: xNewiNcYaJhX2ymdQ3XO6l1YjX5YpdLVq3pJRTKpqEk=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:41:e1:19:10:36:be:d8:99:2a:b4:43:63:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Apr 13 13:01:05 2025 GMT
Not After : Apr 14 13:01:05 2025 GMT
Subject: CN=36723902399677325a5b1049d584fde68ee6140c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:ff:14:ad:10:80:fa:ed:cc:aa:ac:1d:8a:
1c:83:81:13:ad:17:26:2b:56:9e:f4:b4:f9:56:e9:
0c:35:ea:f9:bc:87:9d:84:0f:74:d8:2b:24:c7:f3:
8c:d3:42:ea:64:40:9c:b2:6a:33:cd:0d:74:2e:c3:
a6:db:2b:18:79:d3:80:9c:db:bf:1b:96:6d:b2:8d:
76:60:a1:ae:a8:a0:1f:90:ad:b5:5d:d8:ea:c7:53:
7b:10:d9:dd:21:81:81:80:94:39:d9:e4:0e:d3:1b:
a5:4e:a8:a8:f3:4f:33:08:bd:41:31:2a:fa:44:9d:
ac:da:15:72:25:33:cc:3d:c2:f2:f1:b6:5e:35:6f:
d3:5c:fa:b0:1d:1f:02:ea:93:63:97:c0:37:16:00:
13:a4:46:22:10:d4:ba:4c:01:0b:67:09:c9:c3:18:
67:f5:35:da:e9:22:3a:c6:d2:96:e0:43:15:38:06:
37:23:48:41:18:8d:3e:41:69:e2:08:47:73:f6:9a:
00:89:d9:dc:46:56:97:f2:cf:91:13:25:4b:28:d2:
95:2f:d8:b3:ad:1b:ea:97:da:2c:e2:fc:28:b2:c6:
0e:33:da:05:b8:5e:33:a2:71:0d:2c:aa:95:23:b7:
d1:b5:5d:37:04:d1:f1:4d:2b:2a:b0:63:90:cf:62:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:39:02:39:96:77:32:5A:5B:10:49:D5:84:FD:E6:8E:E6:14:0C
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:df:58:d2:7e:58:5c:b6:6f:66:00:bb:e4:10:10:cf:b8:9a:
5d:da:98:41:f4:81:37:ea:1e:8c:8d:38:c8:44:9b:4b:73:fa:
20:d9:18:69:99:f4:36:9c:66:c9:35:96:8e:f2:47:08:e0:8f:
9e:95:47:57:0d:21:8b:f7:b5:13:16:5d:bc:e6:4e:1a:5f:3f:
f3:6b:d4:04:74:0f:72:7d:5f:cb:86:6b:3d:11:df:1a:dd:f7:
e9:84:fb:86:e7:90:a1:de:75:a9:a5:38:4b:d2:54:7e:22:d9:
b5:79:6a:f1:3b:5e:b8:0b:05:a0:7c:56:ff:e3:94:33:4c:11:
90:1f:a5:82:59:d4:fd:36:98:85:69:b7:de:36:57:95:60:93:
05:52:0b:fa:39:e2:b5:d7:04:72:2c:31:6c:e3:e1:09:af:ed:
47:de:30:15:0d:3b:eb:b2:28:6b:6c:c9:f5:f8:11:24:ad:bb:
06:74:30:66:13:4f:46:47:65:a2:ad:9a:51:eb:0b:2c:02:6b:
60:4b:76:b4:09:f9:ea:c7:ff:87:a8:bb:ea:44:c7:3e:69:f7:
88:b4:13:22:fb:bd:63:7c:83:11:c9:32:f6:53:ce:f2:6c:01:
b0:ca:47:4d:f7:ed:32:2d:9c:4e:b2:8d:79:9b:33:13:73:10:
50:9f:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net