Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: nfqC6skbB5a7+jGJ/UZgvF2eIbbnh/r0XJPlP9Ev5zE=
Subject key identifier: EB:D6:F8:20:E6:27:E7:89:D6:E9:0D:9D:F2:DB:1F:4A:E6:88:12:36
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 01962DF3F8896B09345872A7B7A7770BC1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 07:01:25 +0000
Manifest this update: Sun 13 Apr 2025 07:01:25 +0000
Manifest next update: Mon 14 Apr 2025 07:01:25 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: wdXP1A45R7jegwE/LsU3CKdMOGJ7b4vzINxrn0XT9qE=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:f8:89:6b:09:34:58:72:a7:b7:a7:77:0b:c1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Apr 13 07:01:25 2025 GMT
Not After : Apr 14 07:01:25 2025 GMT
Subject: CN=ebd6f820e627e789d6e90d9df2db1f4ae6881236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:fe:c5:f8:1b:37:07:39:30:fc:b8:72:78:
c8:b1:7f:ea:96:7b:60:ea:01:9f:0a:e6:c7:1a:da:
81:f4:04:47:d1:2e:13:6d:8f:a4:f9:d4:76:e4:a0:
18:e1:a6:9c:2b:16:5b:65:42:81:82:d1:b0:75:59:
9b:91:aa:b4:95:79:fc:47:54:13:60:93:1f:64:c2:
c9:70:c5:35:72:d4:27:96:8e:d7:f0:b8:65:9d:c8:
37:41:94:32:1f:46:2f:07:d2:75:14:75:6c:e6:5c:
ce:2f:21:23:60:b7:17:fb:04:7a:fa:40:a6:8c:51:
c9:a6:be:79:e2:9c:f2:a4:76:40:8b:1f:1d:c2:ac:
1a:58:d2:5d:08:0f:3c:93:00:6d:a3:48:dc:b9:8d:
09:12:ba:59:0a:d1:ec:a6:bd:83:23:b2:f3:be:7f:
aa:23:1d:ec:d6:ba:21:92:9d:a6:df:be:3c:39:4c:
29:8f:b7:54:58:b1:2a:78:f7:d1:76:7f:3f:b5:c0:
95:47:dc:bb:fe:d8:6f:10:8f:fd:b3:ff:69:3b:d2:
b8:48:bf:d6:c0:55:51:6a:21:55:ff:df:6f:f8:9b:
1b:75:b3:45:84:c5:cf:d7:da:1f:01:b7:91:28:d1:
69:14:f5:80:7a:cf:76:7c:81:5e:84:e0:2a:8b:b4:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D6:F8:20:E6:27:E7:89:D6:E9:0D:9D:F2:DB:1F:4A:E6:88:12:36
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:97:df:72:06:e2:77:45:78:0e:1e:3d:8b:2d:d5:df:26:
35:cf:f3:6d:bc:c4:cf:4f:65:54:88:c1:3d:3f:b5:df:a2:4f:
b6:f7:df:10:28:af:50:09:08:f6:ff:43:39:66:e3:05:57:9c:
72:ed:9c:01:42:7c:b6:6c:a3:ae:0a:f5:08:7d:93:19:0c:2d:
b5:66:cc:51:ad:2c:6b:6c:8c:ed:b8:a9:8d:a2:95:fb:77:1b:
b5:75:28:6b:24:bd:72:b2:18:89:a7:00:95:a6:6a:ad:84:89:
d7:46:3c:c5:97:58:08:c9:9a:26:b5:ca:12:c1:13:80:dc:f9:
44:a0:ac:29:b2:28:35:8e:52:b0:79:2a:7a:6d:e8:ed:e0:af:
06:2c:0d:9a:4a:19:7a:68:5c:fe:68:3f:be:82:92:fa:07:8d:
f9:58:6a:89:40:96:cc:59:6a:e1:5b:22:41:c0:f3:9c:30:b4:
08:98:f1:38:98:64:54:37:e8:95:03:c5:a1:2b:75:1c:b9:92:
e0:41:0c:49:6c:cd:32:97:1b:98:9c:7c:b0:ff:1a:86:c2:45:
9d:a9:ce:74:aa:b7:ee:db:75:2b:ff:cb:d3:42:a0:74:92:8b:
29:41:83:52:96:63:50:9f:27:81:8b:1b:aa:92:20:fa:86:99:
1a:3e:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net