Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: FpBQc5Byjsa0ykFt5N5xjWRcDfioDjCUroWFzDQv1i0=
Subject key identifier: F9:47:1D:C1:1C:35:A5:F4:F0:1A:AE:A5:71:86:D1:69:26:13:B8:1D
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 01962E2B2152EB3689054AD7D4806A2377A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 0285
Signing time: Sun 13 Apr 2025 08:01:40 +0000
Manifest this update: Sun 13 Apr 2025 08:01:40 +0000
Manifest next update: Mon 14 Apr 2025 08:01:40 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: EnY7I10ZRSWSNkagbAeV1TWYHt5BuTNFCaTvApqmjS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:21:52:eb:36:89:05:4a:d7:d4:80:6a:23:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Apr 13 08:01:40 2025 GMT
Not After : Apr 14 08:01:40 2025 GMT
Subject: CN=f9471dc11c35a5f4f01aaea57186d1692613b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:5e:f9:b2:3d:7f:c7:20:e3:ec:6b:0e:ab:
46:a2:80:70:40:d3:70:0b:1a:80:eb:0e:bb:5a:b8:
80:55:c2:97:06:a4:31:38:01:8d:c7:3f:50:b1:90:
81:32:ab:b8:32:c6:8c:b6:a1:de:e3:05:85:19:1d:
a9:5e:37:58:15:40:83:13:f6:00:78:79:8e:98:52:
9c:e8:77:fa:46:39:b8:d1:82:74:9e:44:9b:2c:59:
33:b8:bc:3c:3c:e7:7c:b8:6c:b7:0e:d1:2c:1b:be:
02:f8:20:af:a9:a9:bb:e4:31:96:42:03:4f:69:17:
2b:50:30:09:e3:ba:71:e9:a1:03:79:d3:19:f3:54:
7d:e7:92:71:b2:ab:cb:c4:83:61:b2:d3:fc:c4:68:
90:ef:c7:d2:c0:e7:5b:b2:44:16:e8:1a:41:0c:5f:
8d:f2:5d:e1:8e:71:77:36:34:a0:84:e5:56:98:a4:
68:37:11:7d:72:74:d6:9e:4a:ff:24:7b:74:22:22:
93:a8:74:8a:e9:35:93:63:78:80:06:2e:50:ee:11:
69:6c:51:98:f4:71:43:bf:c5:a1:48:ae:34:2c:55:
67:33:bb:3b:7b:15:b5:f3:8f:d3:c1:bf:4c:81:80:
4e:4a:0c:54:cf:3b:41:d1:4e:e8:25:a6:48:bd:ee:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:1D:C1:1C:35:A5:F4:F0:1A:AE:A5:71:86:D1:69:26:13:B8:1D
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:81:a9:75:b3:2a:64:40:79:6e:71:4a:06:9f:d2:bc:3c:
91:2d:42:42:82:de:32:55:08:3d:4f:da:8a:e0:5f:8a:41:df:
98:fb:06:b9:58:3b:6b:0d:31:83:e3:dc:7c:b2:94:fd:ac:77:
61:2f:60:63:06:18:0f:1f:06:4b:f0:57:a0:cd:e9:71:04:d5:
7f:93:d3:f9:8e:46:a4:88:0e:fa:21:43:87:7b:1e:70:a6:2a:
d1:2e:a5:38:74:48:a3:ea:8d:63:da:57:32:f8:92:95:ed:39:
4a:83:65:78:7d:06:aa:e0:67:5e:3f:5a:69:a2:ab:01:e9:11:
15:1a:f3:73:f4:de:88:96:32:69:64:74:d5:2e:a4:2e:69:31:
f9:3d:7c:cf:ee:0f:4f:1b:8c:cc:e4:a0:b2:6b:89:30:75:ee:
99:a8:7e:47:41:1a:23:cf:cf:39:52:94:bd:5e:9a:25:aa:d9:
4f:f3:e0:4c:fe:53:ab:48:99:dd:6f:07:6d:39:dd:64:42:e5:
50:e0:15:63:e1:8d:b2:ca:b2:96:f7:f1:8a:53:9b:81:b2:78:
20:4d:bf:e7:86:f6:df:e0:b8:4c:8d:50:1f:fa:7c:66:73:0c:
f3:26:6b:10:89:5a:06:5f:a8:a7:1c:57:b8:ae:f2:dc:05:ae:
88:36:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net