Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: d40WVq7ZZs1n30jBnlFfuTQVggNpkDSvR6gcOxcF3sM=
Subject key identifier: EA:8F:02:8A:09:7D:7A:BB:7B:95:DE:4C:90:29:B0:C9:BD:43:A3:95
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 01962DF3F129EBEF7FB5A315A23E70EBC0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 0641
Signing time: Sun 13 Apr 2025 07:01:23 +0000
Manifest this update: Sun 13 Apr 2025 07:01:23 +0000
Manifest next update: Mon 14 Apr 2025 07:01:23 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: zr667QM7oauieeHtI2kNCHK6npquaYlb0FXUkguJBcU=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:f1:29:eb:ef:7f:b5:a3:15:a2:3e:70:eb:c0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Apr 13 07:01:23 2025 GMT
Not After : Apr 14 07:01:23 2025 GMT
Subject: CN=ea8f028a097d7abb7b95de4c9029b0c9bd43a395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:74:1b:7f:64:8b:b6:d6:6c:60:f9:5f:c1:
23:34:91:ba:83:51:b4:17:63:ff:27:df:1c:3e:c4:
e1:fd:c9:10:b6:c3:8e:b4:72:df:60:99:01:37:28:
1f:15:3b:7b:fb:b0:b5:40:f9:fd:71:7a:a0:0f:21:
4f:ec:74:09:20:5c:59:c8:e9:a8:20:98:5e:0c:96:
21:99:6e:b7:01:7e:a7:a0:aa:c7:83:c6:a5:a0:d9:
ca:86:0c:93:f9:31:50:07:5f:dd:23:64:b9:c1:e7:
98:4f:b0:da:83:33:e3:b2:81:6d:ed:38:fd:9c:e8:
e8:fd:c2:b2:db:32:d8:7b:87:fe:7f:61:6a:a5:1d:
b3:d1:05:30:68:5a:45:37:c4:ef:ce:ec:6f:e0:64:
21:17:ea:c7:d4:0f:74:3d:9f:9a:4d:17:c7:ee:82:
f8:b4:56:f6:50:f9:42:9e:0a:05:4c:12:4d:24:59:
84:36:f7:55:49:86:5b:78:a5:5d:4c:df:97:4f:6d:
58:64:1b:f7:9a:0e:58:a2:47:fa:59:41:f8:a3:87:
2e:9a:98:f0:b5:a2:c7:1d:55:28:0e:17:85:05:f0:
d7:66:57:5c:c5:1e:c1:41:fa:92:01:2d:ca:6d:45:
84:3d:8b:4f:15:e5:6f:ff:0e:1c:e0:41:3f:99:cf:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:02:8A:09:7D:7A:BB:7B:95:DE:4C:90:29:B0:C9:BD:43:A3:95
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:63:8b:7d:ac:db:45:5c:65:70:fe:05:d5:5c:ee:82:42:
ff:ce:b0:5f:20:30:e9:31:65:be:9b:5e:fa:37:5b:4c:e9:4e:
f9:56:4d:b8:ee:8a:42:0e:f7:23:86:80:9d:c6:dc:1a:6d:f3:
e3:29:b0:4f:0f:c3:ed:4a:77:73:da:8a:ae:e1:00:e6:91:a1:
ff:fe:d5:61:41:ea:87:f2:c9:47:89:14:6a:3a:e8:99:6a:8a:
d3:47:00:f9:bf:86:db:f6:72:f4:90:0e:7f:47:de:c2:e7:4f:
a9:2f:fa:ee:26:f2:a7:85:6f:f1:2c:ed:4f:80:1d:0d:02:1d:
01:9f:bd:c2:2f:c9:0e:63:06:80:23:67:65:eb:ad:03:8c:56:
26:4a:f1:44:80:bf:ff:3e:ec:cb:55:2f:27:5b:57:fa:89:6e:
a6:7f:b3:09:2b:b0:16:e3:a1:48:14:59:0c:5e:f3:43:25:c3:
ab:f5:48:96:6b:de:61:45:ae:48:72:be:8d:47:af:0b:8b:0e:
ae:9b:2c:63:0c:aa:15:05:ff:b4:50:12:84:16:43:8c:af:dd:
1d:4c:91:43:00:69:55:15:c6:a9:69:dd:8e:d9:1c:2f:6e:97:
f1:4d:4a:97:25:53:9b:3c:d3:9d:26:1c:c8:dc:95:05:5d:1d:
aa:b8:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net