Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: 0i9F+BNOiW6CDy+fudoRnUpTSjI+/e2ZPTcfJ/9VVrc=
Subject key identifier: A2:3F:A4:0D:B8:F6:F8:50:42:56:5A:B7:FF:1B:BE:1C:72:27:D3:A1
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 01962E6197BE18317480647783107E502A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 147B
Signing time: Sun 13 Apr 2025 09:01:09 +0000
Manifest this update: Sun 13 Apr 2025 09:01:09 +0000
Manifest next update: Mon 14 Apr 2025 09:01:09 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: +McNZvxy47D2UgV3lmXFpzhVvo89VzY6T4fhlJgX61E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:97:be:18:31:74:80:64:77:83:10:7e:50:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Apr 13 09:01:09 2025 GMT
Not After : Apr 14 09:01:09 2025 GMT
Subject: CN=a23fa40db8f6f85042565ab7ff1bbe1c7227d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:56:6f:8e:e1:be:25:86:30:71:7d:04:88:
ab:3d:7e:67:63:9b:eb:1f:0b:ce:b6:8e:e1:28:ea:
cd:3e:a5:c5:72:70:af:f2:57:f3:86:ec:c0:10:d6:
63:fe:e3:1e:b7:5b:70:fa:f2:65:ef:9b:56:1e:81:
07:4b:ac:1f:2e:af:5f:c5:51:a9:43:2e:47:f5:7e:
3e:71:c4:31:8e:ca:57:5c:bd:13:fd:d1:fe:53:98:
21:78:ab:bf:7d:f0:a2:a3:20:e8:8e:2c:5f:7c:b0:
32:2e:19:62:78:17:14:f8:7a:6a:90:b7:ee:1c:49:
75:3f:c3:43:50:8a:31:78:3e:21:95:32:a5:8c:62:
f9:91:e4:4c:d4:4d:58:47:96:be:ca:29:73:5d:92:
6a:82:29:10:f6:8d:33:ec:ea:67:34:64:76:72:e3:
ef:a6:59:0f:ef:68:9d:b2:09:40:df:16:12:fc:b5:
78:95:82:22:17:38:8c:e1:6a:82:a6:f9:39:c0:41:
0c:dc:bd:17:1a:ca:1b:73:66:a2:2e:a9:ae:d0:07:
c4:ec:7e:51:60:e7:48:63:77:f4:c1:de:08:02:19:
df:1e:4c:30:44:07:48:d4:de:d6:98:e0:3c:81:ad:
21:98:df:81:83:93:77:30:a6:86:b0:56:56:56:9d:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:A4:0D:B8:F6:F8:50:42:56:5A:B7:FF:1B:BE:1C:72:27:D3:A1
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:8b:1d:fe:8b:45:d3:cc:0b:99:51:fe:a5:f7:88:5b:8b:
84:1d:dd:49:31:38:b9:f0:6c:32:a3:ec:0c:53:1a:f0:58:c1:
16:21:f5:19:db:44:13:0f:a0:ca:1d:cf:57:14:af:b9:b5:f1:
ad:7a:06:fb:ba:38:b1:ab:d3:d1:56:f1:7b:6c:c5:4b:5a:81:
64:15:e5:ec:fc:82:3a:ff:f6:23:68:d9:db:8b:64:42:04:e1:
2f:16:e6:6a:bf:2a:29:6b:6c:b8:d5:88:c8:a8:02:47:77:82:
2b:6b:4c:7b:47:9a:15:b3:a1:da:1c:86:fe:92:0b:4d:cf:96:
3b:03:e0:a5:3f:fb:6a:bb:39:f1:3c:4c:71:c2:ee:e8:c2:b5:
55:5a:b5:18:68:f7:b2:59:0b:6e:dc:7c:ed:09:56:65:11:d7:
e8:84:6c:99:eb:1f:93:56:df:a3:c3:3a:fd:3d:f1:bb:a0:6b:
a7:13:78:f3:a5:84:e1:06:33:29:cf:b1:63:47:01:bd:5f:22:
7d:a4:a0:af:53:34:45:8c:2d:8c:df:19:f2:fe:b4:14:d6:56:
ee:6a:00:db:65:2a:02:e0:a7:9f:b1:d9:e7:27:5e:f0:d8:10:
36:bf:59:94:ce:2b:d7:82:34:63:44:30:85:5c:4f:61:64:99:
fc:9c:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net