Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: xSKlNQgyEm760J2kuuAQBn5VJBiMAAofjMIeQUSuQ9o=
Subject key identifier: D7:61:74:0A:03:F7:43:23:91:CF:A3:C6:58:1B:CE:16:D0:A3:DF:70
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 01962DF3E31A036CE74EDEFD0BE448B87335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 08D7
Signing time: Sun 13 Apr 2025 07:01:20 +0000
Manifest this update: Sun 13 Apr 2025 07:01:20 +0000
Manifest next update: Mon 14 Apr 2025 07:01:20 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: aL4IOu7CmS3SCxH3js6+wXJclOCeGMk/n4vxK3BVfAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:e3:1a:03:6c:e7:4e:de:fd:0b:e4:48:b8:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Apr 13 07:01:20 2025 GMT
Not After : Apr 14 07:01:20 2025 GMT
Subject: CN=d761740a03f7432391cfa3c6581bce16d0a3df70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:38:8e:7b:9d:a9:23:27:f9:d1:c6:b1:bf:
a4:ac:d5:2f:64:97:cd:fd:ae:01:df:1b:b2:9f:78:
f6:7b:a9:ba:23:50:09:07:b4:6b:50:ad:3f:ca:1c:
da:fe:50:44:6e:67:21:21:40:79:e4:44:9d:70:96:
2a:22:a6:fa:82:34:88:ce:34:d0:9b:d5:bd:dd:5f:
8c:55:da:6e:54:79:2d:b2:bc:ab:00:72:e6:3f:22:
45:4a:58:fc:ab:92:3d:67:20:50:d1:39:e3:e2:c9:
08:f9:c9:af:f9:0f:cc:03:12:cb:50:3f:bd:ad:4a:
c0:a3:db:eb:52:2b:be:c5:0f:9d:64:f5:bd:36:51:
54:ba:9d:19:a5:16:6f:c6:0b:69:c3:4b:f9:ca:3b:
77:c5:02:9d:b1:60:09:32:40:b2:52:05:91:76:45:
b9:e1:e7:d0:ac:b2:33:43:89:ec:3f:23:8e:91:06:
ba:c1:cc:7f:91:87:bc:1e:20:6d:92:3c:9c:58:2e:
6c:4a:35:cf:a7:59:fd:cb:b1:25:54:0e:b3:7c:4a:
ed:19:aa:cb:dd:e0:71:03:16:d3:6b:7f:6c:de:06:
7e:3e:3b:74:f0:eb:d5:71:c2:bf:73:e4:35:84:91:
de:a6:f3:11:6b:6e:98:43:98:52:b5:9b:3d:06:89:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:74:0A:03:F7:43:23:91:CF:A3:C6:58:1B:CE:16:D0:A3:DF:70
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:0f:b4:b4:58:23:9a:c2:0e:fb:c9:52:53:91:2a:cd:8a:
73:2e:d7:8f:b0:08:06:8c:78:d2:5f:1e:fd:12:a4:db:5e:45:
6b:e6:d6:a8:3b:91:97:a3:c9:30:35:50:16:8e:85:bd:83:5f:
cd:c4:80:4e:a6:f8:29:7f:d8:1f:27:cb:9a:67:c0:4b:a4:04:
96:4e:5f:90:f0:73:b4:d3:5d:fb:ef:14:f9:ce:ba:6f:7c:40:
d0:3f:7a:9c:d3:e1:e8:67:fc:f4:00:ad:ea:57:ed:ac:23:97:
37:aa:a1:93:29:4d:ef:a9:e5:70:9f:ce:7a:15:49:e7:06:96:
c1:95:02:12:fd:c6:7c:44:38:f7:e1:67:d3:91:d7:5d:5e:60:
8f:9c:c8:16:a5:c9:e4:2c:09:ff:92:85:9f:e7:a2:b1:ac:2a:
f8:3b:c8:17:11:14:11:9b:2c:f5:5a:25:f9:7e:e3:e8:54:ea:
96:4e:3f:d9:46:32:62:11:bf:04:6a:ae:1e:65:42:d4:4f:68:
05:04:43:a6:70:32:5d:dd:27:23:9c:7e:02:9b:9b:55:7e:48:
3e:25:2a:11:9c:33:b4:bf:94:dd:df:04:2c:bc:f7:df:fc:20:
e8:02:9d:51:e9:51:64:69:e2:df:32:89:1a:9c:46:be:fd:2e:
c6:b4:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net