Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: sQDNll2mENaU2FbdujH8/Y6TEUJa8PwM2sBqZa0uvqk=
Subject key identifier: DD:99:BA:C6:6E:00:93:7B:48:AA:99:BB:AC:F5:EA:31:05:3F:83:D2
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01962E9913CEDC67390FE589C43A2BFD187F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0526
Signing time: Sun 13 Apr 2025 10:01:46 +0000
Manifest this update: Sun 13 Apr 2025 10:01:46 +0000
Manifest next update: Mon 14 Apr 2025 10:01:46 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: nU0cj1NUrrIz6noihFQ7gKwRxgfVpNHAonemind8DLg=)
2: v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa (hash: +ztaiH2S/aHDtgvKfj/YkXPsW58SyJ9uS27Ej7psyFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:13:ce:dc:67:39:0f:e5:89:c4:3a:2b:fd:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Apr 13 10:01:46 2025 GMT
Not After : Apr 14 10:01:46 2025 GMT
Subject: CN=dd99bac66e00937b48aa99bbacf5ea31053f83d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:5d:66:59:ef:72:96:7e:8d:3a:1e:cc:b0:
bf:d8:ef:c7:54:9c:01:6c:26:1d:7f:2c:42:e4:a3:
0e:93:f4:ed:5a:24:6d:b2:74:00:67:02:ca:aa:52:
36:8e:16:34:ec:ac:fc:98:3e:d5:23:e8:92:4c:ea:
73:08:f9:de:1a:ee:6f:c5:9a:cd:5f:d8:1f:0c:ac:
ef:57:51:55:ef:8f:d2:d9:f7:e8:8f:62:12:be:4a:
29:f9:13:26:62:49:bf:37:52:57:bb:ad:e8:fa:2a:
21:65:b4:f0:c5:3f:24:b7:de:e2:79:30:90:c1:7f:
bb:22:a7:bb:37:5a:c6:ee:58:66:9d:56:bf:a9:f3:
78:83:36:db:e7:4a:94:a5:43:e6:44:cd:3c:f6:01:
58:5e:24:57:7a:33:5e:62:a4:01:df:4a:af:7e:45:
39:a0:60:19:e7:27:1e:c9:f1:5d:3e:35:69:00:13:
e3:aa:bf:e6:21:fb:e1:87:b2:a0:4e:11:b9:4a:4d:
e3:06:15:99:a3:8f:b3:20:c4:d6:7d:c8:04:23:6b:
b1:1c:a3:cd:b8:b2:0e:33:70:ae:30:f5:a2:f8:86:
e1:e1:94:04:bd:68:df:21:12:e8:bf:45:bd:20:cc:
77:b2:47:70:3e:7a:a2:84:14:0e:38:01:51:72:87:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:BA:C6:6E:00:93:7B:48:AA:99:BB:AC:F5:EA:31:05:3F:83:D2
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:f9:90:3e:21:73:8c:6f:be:50:a7:be:01:13:69:2c:e6:
6c:08:6f:27:e1:42:ae:a7:3f:d9:64:5a:a2:bf:e2:5c:4b:50:
0e:b9:e8:14:0d:e6:e8:a5:ee:b0:6f:3e:c1:73:ff:71:85:5e:
22:c4:a9:5c:7f:bb:8e:bd:4a:a7:68:18:d9:c8:0b:34:d6:c4:
96:64:ab:c6:b4:72:2e:9d:b2:bd:9f:6f:0c:d0:d7:c4:e6:e9:
0e:2d:39:74:96:99:61:87:92:66:ce:e6:db:1d:bc:4f:dc:47:
c8:2f:fc:e8:62:7a:55:a5:78:20:b0:01:f1:7c:50:9f:88:76:
6d:1a:45:f8:32:1f:91:fa:b8:74:ab:59:c8:7d:8e:f9:a6:00:
3c:de:ba:2f:53:ff:ad:06:23:05:01:ef:88:d2:45:85:b3:08:
ac:29:b3:d2:fd:f0:68:f3:3a:02:48:29:dc:91:6c:02:13:6b:
db:62:dd:89:e1:16:bb:30:f1:8e:ef:1f:43:33:ad:c3:cb:c8:
d0:c9:ff:79:04:b9:29:27:81:93:61:6c:5b:14:b2:8b:ca:2e:
25:a4:f9:55:0d:0a:8b:69:d7:a9:c3:60:67:50:5b:4b:10:dd:
4e:01:07:75:b8:d1:b3:a6:cb:93:4b:b8:71:72:c8:48:a2:ea:
f0:58:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net