Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: UgO5dauCm38z8dAPOPwk7IQIOFbvi92k1oixbtw2sC8=
Subject key identifier: 3C:35:C8:01:8F:24:00:A4:C1:46:40:A4:D2:A5:C4:D1:CE:A4:1B:F1
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 01962E6192383EDEA717A440B99B19CC6B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 09:01:08 +0000
Manifest this update: Sun 13 Apr 2025 09:01:08 +0000
Manifest next update: Mon 14 Apr 2025 09:01:08 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: +27lHJ7cq/ho5Mqdh6NU43cmMhWK+xRI7/0QGK43K0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:92:38:3e:de:a7:17:a4:40:b9:9b:19:cc:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Apr 13 09:01:08 2025 GMT
Not After : Apr 14 09:01:08 2025 GMT
Subject: CN=3c35c8018f2400a4c14640a4d2a5c4d1cea41bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:9f:79:97:7e:18:96:af:32:53:8a:18:c7:
17:70:d6:0c:c7:17:0f:9e:b0:2c:51:55:bb:d3:5f:
cc:ba:6e:2e:91:2c:74:04:85:5e:02:c6:14:2d:47:
84:82:fb:f6:ae:0e:ad:83:fe:b3:26:48:dc:1e:50:
60:12:7f:7c:b3:d1:f1:fc:95:a7:af:b9:95:63:0d:
c4:64:02:fb:a2:ac:08:25:d4:fb:ff:86:ce:b8:9a:
9a:26:8e:1c:8f:04:cc:36:5f:c0:5c:f6:9f:0c:2a:
6d:68:46:6c:21:33:5c:5e:96:45:e0:13:64:c5:27:
79:6f:86:6e:96:dd:74:13:24:26:52:2b:cd:57:8d:
7d:8d:1a:4d:d2:62:ba:07:f5:51:30:0e:89:20:3f:
ce:eb:f4:8e:ad:56:1f:3f:43:40:15:26:aa:72:d9:
3b:f6:fd:69:1d:0f:c5:dd:c0:52:b7:7b:d9:95:16:
85:3b:1f:e8:a1:25:5d:73:c9:c4:7f:89:19:96:9e:
b0:21:7c:f9:6f:c1:ed:a2:e8:99:ba:e2:0b:27:66:
72:d4:65:d1:d1:b8:3c:79:7b:a9:e6:1f:58:d2:bb:
f1:77:6a:ce:f8:6f:27:55:c9:95:19:f6:5d:40:f8:
58:8d:7f:1b:59:98:73:ed:6e:28:9e:03:03:01:cb:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:C8:01:8F:24:00:A4:C1:46:40:A4:D2:A5:C4:D1:CE:A4:1B:F1
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:3c:00:ea:02:17:a1:f1:44:58:ee:d7:0e:a6:0c:13:57:
2b:87:61:23:aa:f3:2a:bf:84:f7:73:cb:91:a1:14:cb:a9:ce:
2f:b3:ba:e6:01:69:9e:2f:df:0d:a3:f0:e8:60:93:cf:e5:b4:
5c:3f:39:00:33:02:f2:41:ff:14:d0:4d:7a:c2:8e:dd:56:ab:
a0:46:2b:a3:03:42:1e:7b:60:57:05:0d:6e:e2:50:0d:aa:9b:
0c:3a:0e:fa:9a:75:15:41:71:56:59:e5:5c:59:d9:7d:69:d0:
1f:d7:48:3e:14:8f:3f:15:94:49:fb:5f:9d:a7:a7:e9:f1:66:
8a:2b:54:eb:ab:98:b6:0f:45:58:f6:16:67:93:55:5d:fb:ff:
6c:b8:1c:82:30:ba:50:2d:1e:23:02:bd:f4:5c:67:1b:f1:40:
b3:93:a3:bc:36:8c:7d:e6:85:3a:56:f9:37:a2:13:32:78:4e:
83:a6:3e:b7:31:0a:a2:d9:6c:e6:14:44:a9:28:ef:f5:b3:e0:
ac:7d:dd:43:90:7a:6d:aa:60:aa:f8:c7:4f:80:46:44:9f:86:
00:c8:73:e5:d4:a8:17:a6:20:d6:de:8e:aa:95:e8:95:4b:24:
a6:d7:d6:8a:17:c2:98:38:8a:e9:cf:5f:a5:73:97:aa:8c:ea:
31:3a:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net