Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
File: QwPxM011rEMsDKp404mnDAnBLKY.mft (raw, json)
Hash identifier: TtvWn7ayHBgzsxW3Ysal4Dgxt8rfiyPqkgmQRR4aYJg=
Subject key identifier: 63:68:CA:DF:FB:C6:E0:63:A5:95:0F:B4:D9:DB:BB:B5:6E:06:C5:88
Authority key identifier: 43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
Certificate issuer: /CN=4303f1334d75ac432c0caa78d389a70c09c12ca6
Certificate serial: 01962DF400CBAD061D2F752D1A011F737A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
Manifest number: 3F
Signing time: Sun 13 Apr 2025 07:01:27 +0000
Manifest this update: Sun 13 Apr 2025 07:01:27 +0000
Manifest next update: Mon 14 Apr 2025 07:01:27 +0000
Files and hashes: 1: QwPxM011rEMsDKp404mnDAnBLKY.crl (hash: ycHu2muP5SUdC1nmbZKQoLoSUIbZBKBi0pY2LEQl3EE=)
2: etqHJp94mEXyM-mZRNVFRO7Kziw.roa (hash: Y6iOU/XBP66s91SGzXjQj2BEKS4QjWa/buoOF4uhFqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:00:cb:ad:06:1d:2f:75:2d:1a:01:1f:73:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4303f1334d75ac432c0caa78d389a70c09c12ca6
Validity
Not Before: Apr 13 07:01:27 2025 GMT
Not After : Apr 14 07:01:27 2025 GMT
Subject: CN=6368cadffbc6e063a5950fb4d9dbbbb56e06c588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:c8:17:f2:43:b1:64:7e:bd:00:60:29:ae:
f7:25:b9:6b:5b:8d:64:73:2a:a5:2e:64:2a:bc:d1:
30:d4:92:c1:3b:04:da:61:d4:cf:45:10:dd:c8:3a:
86:12:4a:6f:d4:b0:fc:e0:f3:00:d1:24:29:a2:56:
d4:43:d5:4f:d0:94:f3:7c:16:b5:08:66:35:a9:66:
86:7f:6a:7d:c7:f8:51:31:f4:5d:ff:1e:85:e7:d1:
b9:f5:df:73:85:3b:d5:07:64:6b:68:e6:f6:ad:21:
0c:5b:fb:1d:8c:7e:89:ec:c7:d5:44:7c:7b:e8:78:
a6:c4:d6:4d:65:f8:04:ac:2d:1d:5f:f6:93:5b:08:
6f:cb:2d:0b:7d:a7:79:e9:59:89:d9:ca:36:bb:ff:
90:24:36:3a:fd:3f:30:55:b6:27:62:35:8c:0a:e8:
55:c2:6d:02:3c:78:08:31:a5:c7:b2:57:a5:cc:0b:
5b:67:17:89:c0:34:5c:5e:2c:60:4f:c9:a3:0d:ca:
0c:14:26:40:f3:c8:c6:c6:c3:c0:99:fb:61:8c:15:
88:18:ae:1b:14:81:fb:38:df:73:38:3f:6b:13:76:
96:b9:0f:c1:c3:ce:14:dc:9e:71:24:7d:d9:18:92:
47:a5:6e:de:2f:67:f3:a1:15:68:f0:8b:e8:88:9d:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:68:CA:DF:FB:C6:E0:63:A5:95:0F:B4:D9:DB:BB:B5:6E:06:C5:88
X509v3 Authority Key Identifier:
keyid:43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:04:fd:cb:8a:02:ed:3d:90:30:3d:77:8a:c8:b9:92:86:bf:
c5:22:48:0c:48:a3:e4:41:ab:37:9c:be:65:e0:51:ed:a0:7b:
17:2e:5b:7b:74:ba:33:37:2f:5d:48:c8:03:69:48:75:e3:73:
5a:7f:28:f4:77:44:89:d3:9f:3f:2b:5e:9b:3f:94:c9:af:9e:
45:2b:53:d9:17:fc:6a:e1:4d:c9:6d:bd:3c:3d:35:18:74:b8:
af:61:0b:a1:0d:d6:b5:f6:9a:f9:ce:56:75:b0:57:b8:e0:29:
53:6b:59:fe:31:91:65:1d:19:bc:fa:22:69:37:7a:da:10:3c:
ef:60:46:c7:49:3d:69:e5:0f:06:1d:3d:57:79:8e:da:a0:d5:
f4:c9:b7:59:ce:c3:ad:ba:88:da:5c:92:02:6f:f6:93:57:20:
ff:91:46:15:63:ca:23:2b:a1:2f:ff:01:14:a4:25:d2:3e:89:
a0:64:36:23:2d:a4:20:b4:91:bb:d4:ee:85:e2:be:4e:fa:b1:
16:03:ed:1d:72:92:7f:98:12:e4:fb:c8:0d:a3:4f:f4:d8:11:
80:b1:ed:90:4d:b8:2d:b7:9a:a0:68:7b:9d:48:79:70:d2:d4:
ff:04:04:c7:15:d1:8c:06:1c:ae:9a:74:22:bc:bb:72:ef:d4:
11:e0:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net