Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: RJdqAVmGu7BtbBcfd2f9vXb2KSCVKPpWRi8yLHnyUnA=
Subject key identifier: 45:C3:43:70:D4:B4:8D:4B:6E:4A:85:61:3E:E0:EE:30:B0:08:EC:6C
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 01962DF3DE3D5E1A4EBCFC45C49548851800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 1418
Signing time: Sun 13 Apr 2025 07:01:18 +0000
Manifest this update: Sun 13 Apr 2025 07:01:18 +0000
Manifest next update: Mon 14 Apr 2025 07:01:18 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: 102W2WypAT/kICDn5GoHHnSuCvh9BQ24kUZ1bdEzszc=)
2: 6R0wvkFPscZQ2uww-ZvwnaXh--0.roa (hash: wyiJ7rZP6x6kzeIfld1VjsLp4nIqzGhNhuxTGdTq1Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:de:3d:5e:1a:4e:bc:fc:45:c4:95:48:85:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Apr 13 07:01:18 2025 GMT
Not After : Apr 14 07:01:18 2025 GMT
Subject: CN=45c34370d4b48d4b6e4a85613ee0ee30b008ec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:0b:ed:af:d6:2e:a9:7f:a2:2a:63:7a:93:
df:51:34:16:75:bd:e5:33:98:95:93:e1:6a:66:d7:
ac:93:8b:c8:1c:17:da:05:43:09:c2:dd:bf:51:81:
72:38:24:ea:bc:13:1b:c9:ab:a6:c4:47:a4:7c:88:
62:08:2c:53:b8:21:a4:4a:e1:9f:61:a2:65:13:20:
2a:f7:97:13:c0:42:25:41:d4:84:7d:ee:ea:07:4a:
45:8b:99:46:18:56:0c:d8:55:cf:98:13:b0:b7:ae:
bf:55:63:d8:04:6f:84:bc:c7:61:9f:1d:17:db:76:
15:9b:45:4f:ff:21:b9:10:1f:f9:da:c8:3a:1d:92:
3f:8a:66:73:e7:64:6e:44:b5:77:8d:6a:be:8c:22:
fe:9d:1b:21:8c:a6:43:58:29:32:35:24:15:38:dc:
14:ed:09:96:e6:92:43:d2:6c:ef:85:e7:fe:15:08:
54:bb:48:f7:69:28:0a:74:2b:7b:2f:13:0c:6e:b1:
27:f7:0f:ed:92:65:a1:73:70:f2:69:cc:f7:65:51:
b5:7b:cf:06:af:18:f7:c0:c5:88:fa:d6:3a:b7:66:
25:ab:42:a1:6f:24:20:c5:9c:1f:ef:b0:de:75:de:
6d:d6:a3:29:ff:44:cc:a0:4b:50:b1:5e:81:15:ac:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:43:70:D4:B4:8D:4B:6E:4A:85:61:3E:E0:EE:30:B0:08:EC:6C
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:4b:8d:a8:96:a4:f6:07:a1:b8:40:d4:f5:67:dd:da:3f:
0c:46:bb:61:77:95:05:15:c9:e0:37:7b:07:7f:08:5e:fe:e1:
cf:60:7c:4a:64:4f:10:0c:26:20:17:c9:b8:ea:a4:ec:3b:ee:
a8:f1:5a:98:4b:dd:bf:29:0c:92:10:a0:8b:91:e5:62:dc:52:
65:05:7d:17:60:09:16:a8:f2:99:67:09:df:33:0f:dc:0e:79:
48:a2:d3:70:df:1d:42:2f:d0:73:0d:0e:aa:8f:63:b7:f2:9a:
1c:1b:bf:e2:75:71:ab:9c:89:83:d0:9d:a1:39:34:36:37:f3:
99:2b:72:2e:c3:79:57:bf:ef:ff:7c:52:f5:ae:0a:fb:de:c4:
4f:17:37:66:fd:45:a8:7a:fc:0d:36:09:31:f5:64:27:34:d7:
ed:c4:94:0c:cb:f3:c7:85:eb:3e:30:5c:cd:ab:36:d3:11:e1:
f3:91:0b:7d:67:ea:d5:19:0e:c6:fd:60:a3:16:42:6e:72:d1:
6e:0d:e7:e8:81:50:e6:85:a6:7d:54:c4:c0:50:9f:4f:ed:b3:
30:f7:69:18:18:fe:84:3f:c3:38:42:34:1f:2b:9f:1e:d6:1f:
6c:9d:3d:16:bf:5f:5d:99:07:c0:e3:43:25:b3:06:cb:12:33:
04:62:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net