Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: QkY0k9XiYq9tQGgnqp8Tw8sBwo6ZJNdB7SDLSCSgK94=
Subject key identifier: C5:03:FC:64:77:19:26:A3:A2:27:CF:F1:59:8F:61:A5:F8:52:FE:1A
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01962F07093C760821D24DF3F1639FBC47A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 03CA
Signing time: Sun 13 Apr 2025 12:01:52 +0000
Manifest this update: Sun 13 Apr 2025 12:01:52 +0000
Manifest next update: Mon 14 Apr 2025 12:01:52 +0000
Files and hashes: 1: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (hash: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: d+kJRti82e3z19P/vpfhvaArABVNJ0ErS4V/1cpLUlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:09:3c:76:08:21:d2:4d:f3:f1:63:9f:bc:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Apr 13 12:01:52 2025 GMT
Not After : Apr 14 12:01:52 2025 GMT
Subject: CN=c503fc64771926a3a227cff1598f61a5f852fe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:d8:0d:a6:8a:e5:b4:59:d3:ab:08:16:70:
f0:ca:7c:84:80:dc:85:66:90:31:de:23:ff:ea:6d:
68:35:85:65:0b:dc:d8:b4:5f:72:4d:1d:0c:28:5e:
27:c6:09:35:26:11:ce:80:67:13:b5:f0:7c:12:00:
c7:32:ab:0d:46:f3:69:d0:44:61:7a:35:ed:2c:5b:
4d:a0:5f:01:8f:bb:a4:ed:07:78:e4:00:c4:42:43:
2c:d4:0e:81:ab:c6:0d:d2:20:2f:f4:e7:c4:aa:74:
61:78:2e:f3:a6:5e:23:4f:00:20:e2:42:e0:a0:3d:
51:1b:0c:b4:7b:b5:51:c3:1e:3d:ce:7e:43:40:50:
b4:1a:d7:4a:54:eb:1f:76:9c:03:14:a7:46:45:10:
47:35:f3:2f:e9:35:4e:f2:16:7a:b0:57:ac:60:c9:
45:09:b4:2f:54:4a:65:32:24:80:a2:06:6a:78:05:
f6:c9:f5:34:cf:a5:b0:7d:4e:5b:0d:4c:63:8b:9f:
39:6c:ef:9f:ec:38:70:31:e1:a7:41:ec:ab:b4:39:
52:b2:33:25:82:dc:9e:21:42:b2:45:f1:d0:79:56:
b0:4d:e8:27:2c:11:c0:b0:3e:14:cb:a2:b0:c4:9a:
46:91:af:9e:85:48:e8:8e:20:8d:28:de:d8:a1:4f:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:FC:64:77:19:26:A3:A2:27:CF:F1:59:8F:61:A5:F8:52:FE:1A
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:81:fb:8d:5b:fc:e0:59:a0:36:af:cc:c1:d7:cc:87:4a:e9:
99:d5:99:4f:c8:f6:46:c3:f5:a3:c4:eb:32:5b:aa:31:6f:d1:
1d:b7:53:c1:92:58:12:35:4f:5b:b9:db:26:12:88:d0:1d:dc:
95:6f:78:43:4c:3e:a5:ab:e3:7b:de:9c:be:ca:52:40:44:2a:
9a:a0:94:1f:1f:0c:54:95:10:53:68:81:5b:51:02:c9:ca:74:
4b:d6:21:e1:54:c5:bc:98:2b:c0:b0:81:ba:c3:cf:4c:a0:41:
87:43:d2:aa:68:58:a5:31:30:e6:cf:96:1c:e0:02:a3:7b:9c:
fc:20:fe:50:b2:b3:67:79:ac:d9:bf:41:1b:fd:2e:c0:f0:27:
de:96:c2:59:24:00:c2:30:3f:7f:3c:f9:f2:b2:0f:ee:90:23:
a3:ac:fc:6c:65:e7:7f:d2:e6:e6:ba:25:c1:21:09:18:87:06:
ad:0c:9d:5e:eb:89:2c:74:69:95:46:9c:86:a6:a3:b2:63:bd:
a0:e8:d6:e0:3d:aa:12:39:b2:8a:83:ac:80:9e:b2:5d:70:4d:
90:d0:ae:6d:49:1e:75:7f:9e:41:74:14:bf:72:e4:29:2f:45:
1f:53:46:9b:92:18:72:7d:28:ca:f2:1a:42:59:e8:ca:77:af:
bd:5c:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net