Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 8FiE5WBalVZ9VQjr6K5Tmy1NFXb5h8iQs2wQ26k5Xb0=
Subject key identifier: DE:63:9E:81:2F:1A:D4:B3:55:F9:66:35:E3:BA:E1:AF:57:F0:AC:DA
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 01962E988C55BEADCAEF462FD5A0D27D2DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 03B2
Signing time: Sun 13 Apr 2025 10:01:11 +0000
Manifest this update: Sun 13 Apr 2025 10:01:11 +0000
Manifest next update: Mon 14 Apr 2025 10:01:11 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: hX2nqPJtL550vGRPVbKdxQAY9DJh2FmLEvPEKf5Za7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:8c:55:be:ad:ca:ef:46:2f:d5:a0:d2:7d:2d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Apr 13 10:01:11 2025 GMT
Not After : Apr 14 10:01:11 2025 GMT
Subject: CN=de639e812f1ad4b355f96635e3bae1af57f0acda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:15:48:67:0d:f4:00:ef:b2:6e:65:be:8f:
59:ae:0a:87:11:b0:78:81:fd:cd:53:b0:a3:b4:1c:
20:53:65:64:94:b9:c4:16:24:08:e5:c6:76:03:90:
e7:b9:62:09:15:f8:a2:1c:e2:89:2e:df:5b:27:ac:
c9:43:e1:c6:05:30:73:cb:4f:b1:93:00:5d:1b:8e:
de:87:88:a2:38:1b:be:07:ba:60:56:7a:c6:a7:de:
10:c5:47:11:6f:a3:8e:61:5c:a5:b0:f9:d1:de:e8:
24:e1:cd:b0:ac:cc:24:a3:88:10:96:15:11:16:e2:
6f:44:62:be:16:7a:82:d1:ba:57:92:29:7c:65:b9:
42:32:21:7e:3c:97:18:32:34:b8:7d:7c:07:30:2c:
40:ec:ed:27:da:48:b7:21:40:19:c7:07:7a:da:2c:
83:bf:58:88:a6:20:a2:18:28:88:4c:bc:2f:15:12:
a5:6e:af:90:31:a2:e0:a9:5f:10:66:0f:8e:f9:30:
eb:c6:45:06:ae:96:32:0f:6c:ab:5d:cb:ac:f7:e4:
f0:9d:53:1c:84:2a:c3:b6:ca:51:a2:49:da:d2:c2:
53:25:b8:c2:df:b3:17:d4:05:3a:d9:9d:e3:5f:da:
3e:44:9a:7b:9d:d3:6c:c6:86:96:43:a3:35:d7:c5:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:9E:81:2F:1A:D4:B3:55:F9:66:35:E3:BA:E1:AF:57:F0:AC:DA
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:16:aa:ff:bc:7d:76:8c:cd:55:c5:04:49:74:cb:47:91:
61:2d:a7:92:b5:d5:b6:a1:81:48:2c:d6:0c:3f:59:f5:a3:8e:
ee:93:8f:74:48:15:61:92:0f:3f:68:a0:af:8b:a5:a3:6a:f4:
20:23:c9:8e:02:42:25:20:de:0a:c7:56:82:17:c4:34:56:17:
a5:13:24:db:a6:14:e6:0f:ed:13:85:c9:48:72:e5:3e:1d:8a:
3e:aa:5c:d3:7f:c4:88:d2:30:44:e9:f5:5c:1f:72:20:4a:87:
9d:ac:9a:f1:46:a8:8a:62:61:24:44:eb:54:d9:b2:2a:a1:f3:
5b:d6:3f:a5:d2:16:cf:d1:69:c1:00:0f:d1:ad:12:d3:ca:06:
2d:47:18:f0:83:f3:8f:4e:31:1c:10:7f:c9:01:b2:af:4b:9f:
b1:d1:25:eb:cf:36:a0:34:53:c8:16:08:18:74:db:ce:53:fa:
bb:5d:4c:e2:81:0d:ae:fc:43:e9:d3:73:3f:33:53:16:c2:a3:
ae:26:dc:5f:f5:cf:0d:86:64:93:6e:9e:b4:e1:9f:e5:e1:ec:
aa:11:40:97:a3:76:c7:f7:a7:3c:e4:5b:46:f3:66:04:06:a8:
5c:6b:57:bc:38:53:c1:45:3a:1d:1e:ca:e1:e1:92:ce:a7:01:
32:49:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net