Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: NPfqsE6Yo3QxmRS1JOqRqK3wpsVajiTpUERQVCiTo50=
Subject key identifier: 63:89:A2:AD:60:B5:37:CB:07:EF:AA:75:FD:83:42:A9:EF:94:BD:BC
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 01962FAB508DB1843080E14365BB3E25D1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 4D
Signing time: Sun 13 Apr 2025 15:01:18 +0000
Manifest this update: Sun 13 Apr 2025 15:01:18 +0000
Manifest next update: Mon 14 Apr 2025 15:01:18 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 57X3w1Ennf1maSZcSM9Tj7K+rqXKcdKdoouw7qF/S6Y=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:50:8d:b1:84:30:80:e1:43:65:bb:3e:25:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Apr 13 15:01:18 2025 GMT
Not After : Apr 14 15:01:18 2025 GMT
Subject: CN=6389a2ad60b537cb07efaa75fd8342a9ef94bdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:67:a3:ec:e9:b5:4b:1a:37:f4:9a:8f:16:
02:e0:87:e9:ac:0d:2f:a5:36:c9:b0:2e:73:47:a5:
9d:e3:a1:f6:75:4b:91:3d:98:b9:a8:81:03:54:ea:
82:f5:65:4f:6b:68:92:47:ff:a3:b6:fd:82:b6:17:
45:b5:ca:db:2a:33:6a:72:35:d2:11:83:67:80:e7:
e2:55:1a:c4:aa:d7:9e:b0:23:9d:57:42:65:b6:a5:
53:76:43:6d:f2:4c:d4:8b:36:cc:f2:6c:83:d8:bc:
90:43:5a:15:1d:38:f5:41:14:7d:0c:d8:d7:7f:e0:
55:dd:84:10:94:96:da:76:c5:d7:77:59:39:ab:3e:
20:36:e2:6a:57:f0:f3:c7:35:df:de:1e:83:44:82:
2f:f3:6c:31:8a:b7:db:af:28:1d:86:43:fb:0f:b1:
9b:7e:52:09:69:7c:41:f3:b8:5c:2e:16:e7:a5:6e:
29:fa:ad:eb:84:d5:dd:6d:ef:4f:7d:5e:af:86:8e:
96:79:d8:8a:07:42:fd:d9:84:87:1d:17:22:92:48:
cb:d2:69:74:a5:97:72:eb:6b:d5:c4:f0:c4:ba:ec:
ad:9b:96:a1:61:e2:d9:a4:c6:79:fb:b6:45:cf:4a:
57:42:a7:bf:40:fe:8e:25:b6:09:36:30:44:89:a7:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:A2:AD:60:B5:37:CB:07:EF:AA:75:FD:83:42:A9:EF:94:BD:BC
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:ad:59:2b:85:11:75:56:8b:74:bd:b5:e5:05:d0:79:4d:
49:07:2a:9b:b0:03:8d:ea:2f:65:46:ad:e9:56:d9:89:0c:c7:
45:8a:07:b4:90:b2:5e:0a:ee:9d:e9:40:a8:3c:46:87:2c:9d:
c4:4a:bd:ec:a7:d5:40:7a:69:c2:7d:d9:3d:6f:16:b5:45:58:
d7:1c:9a:a7:9a:94:aa:aa:bf:d0:93:43:09:99:88:24:19:b0:
f3:8d:6a:2f:fa:6c:79:ab:07:d0:2e:29:41:dd:f2:a1:55:f5:
ad:a0:7a:42:40:18:b4:11:52:06:2f:55:70:84:02:cd:5b:54:
fa:01:12:a3:af:f7:61:65:69:ad:6b:4f:60:e2:e5:61:cb:13:
d9:d4:af:90:7c:ee:01:14:71:ad:88:22:ee:51:c8:9a:37:8c:
70:f9:15:f8:eb:40:ea:56:d0:67:20:25:a2:00:fe:1b:6f:5c:
91:2f:1d:af:27:52:ad:26:29:55:65:69:e3:0e:94:a7:32:aa:
b1:f6:07:6c:4c:d3:d7:ed:39:d3:e5:d4:3b:c0:05:86:f7:39:
ec:dc:e5:b4:77:5c:31:e5:55:ed:55:7e:0e:74:a4:7b:f4:4a:
4d:aa:5e:95:d4:1d:23:19:df:c1:f1:f5:de:a3:3c:cc:9d:48:
e9:19:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net