Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: uhYJS892E6oMdJSbeFseU9z7Nd8zdD/JZpehsVXaN9A=
Subject key identifier: 20:F7:60:19:22:4D:C9:F0:80:AD:99:3A:40:F6:C6:61:2A:7D:02:C5
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 01962F3DB7652FB34AD99D67871A06D8C894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 13:01:35 +0000
Manifest this update: Sun 13 Apr 2025 13:01:35 +0000
Manifest next update: Mon 14 Apr 2025 13:01:35 +0000
Files and hashes: 1: 1EKO08t3Z9nlIgriObmmD60gwS4.roa (hash: GhRL3PpvS/3V9MnssSh8wyX1VbIpwoy88Gmt2c9/PH0=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: mMAlgch8d0bYo+o+c3pN/ZAbAw1aw6d4q0HbmGT19T0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:b7:65:2f:b3:4a:d9:9d:67:87:1a:06:d8:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Apr 13 13:01:35 2025 GMT
Not After : Apr 14 13:01:35 2025 GMT
Subject: CN=20f76019224dc9f080ad993a40f6c6612a7d02c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:d2:d8:6a:ee:97:ea:9d:31:b8:24:35:ab:
41:e1:f5:25:7e:2b:18:d0:22:e8:1b:36:4f:ef:2b:
e0:09:ae:fb:3a:51:d2:6d:3c:0d:21:de:05:b0:65:
32:76:cf:04:01:d0:d3:15:da:6e:24:ed:2e:dc:18:
61:7a:5e:6d:72:a5:7a:ed:b3:64:d5:34:df:18:0c:
22:3e:8d:63:e0:ca:f6:1c:20:57:47:3d:7c:4e:f2:
4f:f9:2c:3e:16:82:f1:ab:d4:6a:8f:d0:3b:14:04:
1c:c6:62:53:03:36:03:fa:6a:26:a3:e2:9b:f0:3a:
6d:33:81:5e:81:e4:4c:7d:d4:5a:26:ef:4f:61:19:
1f:bb:40:07:03:93:d7:a7:d7:88:21:10:6f:34:22:
1c:d2:bd:e5:5c:46:0e:1a:33:b5:36:2d:8d:61:92:
12:fe:ee:7d:df:72:b8:f2:7b:a2:85:cb:20:ee:af:
a7:fa:8d:66:76:2e:d8:0b:62:e1:0c:66:4e:c2:f3:
26:49:1a:be:3b:bf:06:39:19:74:cb:7e:e9:56:e5:
34:50:63:9d:fb:59:7e:77:1b:4d:3c:91:e4:a2:2e:
1a:17:87:0c:06:2b:fe:a4:be:bd:4c:86:29:42:19:
98:a3:34:00:78:c1:2d:e4:bd:0e:e7:50:63:fc:53:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:60:19:22:4D:C9:F0:80:AD:99:3A:40:F6:C6:61:2A:7D:02:C5
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:db:22:76:d9:63:e4:d9:3d:74:da:86:a6:35:26:6f:12:
23:51:b3:f4:5e:ed:ae:40:e3:be:99:08:02:bd:79:9e:3b:0a:
26:68:e2:ef:55:60:e8:01:37:03:3b:43:5e:57:72:ac:f5:e0:
11:a8:51:c5:03:a6:9b:c9:a0:07:3f:fb:85:5f:23:ff:99:83:
1f:7a:eb:0a:d9:00:51:0b:1e:87:3d:bf:40:26:a5:de:64:fd:
06:17:7e:a5:06:7c:67:8c:6e:a4:0e:73:5b:18:b0:f7:e8:e9:
05:16:cb:8a:6f:32:7a:10:4b:59:7e:8c:93:2f:b2:20:c5:df:
45:77:1e:89:19:60:6f:9b:92:99:26:fb:05:2c:d8:24:18:95:
17:13:a1:7a:a0:19:e3:c8:28:d8:d8:dc:c5:0d:ad:be:7d:73:
dc:23:9e:e5:3a:55:5c:15:b3:45:95:2b:4e:e0:7b:3d:33:4b:
e0:66:01:0d:c8:e9:19:66:f7:a0:1e:9e:39:3e:08:9a:0e:30:
65:ec:1d:8f:51:2e:49:6f:de:ae:e9:e1:27:57:d5:56:f6:24:
85:c6:ea:dc:5a:01:94:a0:35:59:bf:c2:7b:3a:79:c3:d2:ea:
9e:e5:1a:b1:8d:82:21:b9:f3:b0:bd:40:9e:1d:a5:69:34:9a:
b7:ad:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net