Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: jmIwSD2ph+FJLTRIEYPvv3U88NXF3xUi1uFm6Tfp9Jk=
Subject key identifier: D4:43:14:1D:10:77:63:B0:E3:A8:90:0B:D5:6A:F1:7A:A8:40:D9:C7
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 01962F067499C1B62362E82C18AFE89D245B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0AF3
Signing time: Sun 13 Apr 2025 12:01:14 +0000
Manifest this update: Sun 13 Apr 2025 12:01:14 +0000
Manifest next update: Mon 14 Apr 2025 12:01:14 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: wbcvQbrKunLNreyknqjhm3p6+JHHmxX8Xr9nsnXfNmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:74:99:c1:b6:23:62:e8:2c:18:af:e8:9d:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Apr 13 12:01:14 2025 GMT
Not After : Apr 14 12:01:14 2025 GMT
Subject: CN=d443141d107763b0e3a8900bd56af17aa840d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:82:4d:d6:3f:ac:05:ca:e5:db:73:ad:da:
59:a8:09:2d:e4:5d:a6:20:a1:23:74:14:9c:0e:72:
03:97:fd:33:f0:9b:d8:7d:50:94:fe:2b:95:95:1d:
7c:36:08:3b:b3:6d:b4:a6:34:2b:a1:7b:48:04:da:
bb:bf:ac:c4:f9:34:a0:f9:14:8c:51:58:2e:a2:d2:
89:af:c0:7c:31:88:07:eb:87:fe:a9:68:f2:aa:34:
73:15:2d:06:7f:64:7f:ee:d1:67:7b:4c:3b:a5:62:
d2:d0:1b:49:0e:fb:7d:19:a1:08:93:eb:05:08:29:
4b:45:31:95:e2:2e:7f:09:36:76:a2:97:e3:14:d9:
a6:ab:2a:a8:ed:2a:36:fa:04:97:74:c8:aa:eb:1c:
1b:b1:55:ce:93:3b:02:61:e1:b2:e6:eb:5d:68:aa:
8e:59:ce:65:8f:dc:84:74:4b:71:ec:80:a8:77:23:
7f:00:24:ef:67:ca:60:ee:1c:02:3a:36:32:19:be:
a5:d9:c5:5b:a6:38:59:a9:63:2e:da:e9:5c:b5:cd:
5a:d4:2e:cb:ab:e6:d3:63:e1:7a:10:bf:7b:8f:3d:
7f:96:ff:c0:60:34:9b:32:b0:66:78:e2:00:ca:8b:
99:19:d4:07:ed:7d:f7:23:0d:7e:34:62:c4:a2:94:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:14:1D:10:77:63:B0:E3:A8:90:0B:D5:6A:F1:7A:A8:40:D9:C7
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:35:95:d7:25:e9:6c:e0:86:17:10:0f:64:9b:55:57:68:
16:a6:6e:d2:3d:44:17:7c:06:48:f8:ac:cb:ac:88:6a:5c:72:
ab:12:26:b9:dd:37:34:36:35:8a:9c:c9:0d:b0:52:1c:e4:f3:
95:ae:93:2b:29:50:f3:dd:39:97:d1:18:3d:f4:a5:c7:f4:32:
95:be:23:a2:d0:49:d3:4a:98:25:8a:4e:49:39:89:ec:24:53:
34:65:89:dc:20:bd:d1:2b:fa:4c:bd:42:3d:bf:be:ef:c0:3a:
6d:80:43:08:8b:73:9e:5b:24:1d:a6:bd:0c:4a:b6:08:67:e2:
00:b7:f8:b8:0f:85:1f:1b:fb:f5:b7:dc:16:37:9f:72:c4:20:
e8:67:a2:d7:53:a9:3b:63:7d:5d:30:e7:08:2e:15:9c:b6:62:
db:9c:2b:61:ba:d7:cc:0e:bc:9f:5e:ef:98:48:61:99:3d:dc:
0c:83:ab:63:29:9b:da:14:64:58:22:30:27:cd:56:54:36:63:
ab:de:1b:e0:86:f7:c4:2e:a5:c9:f0:4b:0b:77:8c:74:cd:a6:
66:d0:00:43:f1:a6:bd:c3:8b:dd:ff:45:5e:85:4e:a9:f5:49:
3a:f8:01:98:a1:02:9e:77:5c:45:69:40:65:b6:07:b2:57:9f:
29:19:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net