
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: xQS7aTsJtAWMFI18q0mDSPIrFzxXzhFRo04MyzRx4IM=
Subject key identifier: 59:E4:60:75:59:23:FD:3A:77:38:A6:D4:8E:ED:CD:9A:F8:DA:D8:18
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01962F747E48C8CCEC970368FD63C88F5758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 14:01:25 +0000
Manifest this update: Sun 13 Apr 2025 14:01:25 +0000
Manifest next update: Mon 14 Apr 2025 14:01:25 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: K+3BSHzltLJlvJAv4tJDM13zcAFpnhmQxn/v7SymasA=)
2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:7e:48:c8:cc:ec:97:03:68:fd:63:c8:8f:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Apr 13 14:01:25 2025 GMT
Not After : Apr 14 14:01:25 2025 GMT
Subject: CN=59e460755923fd3a7738a6d48eedcd9af8dad818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:42:a2:43:10:0c:5e:d0:b8:4d:ef:64:71:
7e:16:7a:22:30:ff:ef:17:da:48:8c:88:de:0d:3d:
33:2f:b2:cd:4f:fb:c8:fe:f8:67:58:75:76:db:4a:
4a:1e:5e:42:46:c2:eb:6b:90:6b:3e:46:cd:df:46:
72:cf:c5:02:5a:26:b3:62:77:55:59:51:53:37:8c:
ef:7c:95:87:13:a8:72:37:83:e9:79:96:2e:ac:88:
08:79:1e:6e:d0:76:a4:54:50:fe:42:c1:d5:17:96:
70:21:4c:07:34:66:ca:ef:11:5b:1d:45:ee:ea:1c:
5d:05:37:c3:2c:b5:ef:d7:27:53:df:3c:bd:8b:90:
2a:79:2d:a0:1d:73:ce:3c:ad:e1:2e:03:39:44:da:
94:05:a4:65:bf:6d:c3:6e:6c:fd:37:9d:5e:84:d9:
a5:7c:1f:34:84:db:bb:92:e5:c1:17:d7:72:90:99:
3f:d3:95:14:e6:b2:58:78:32:2a:49:62:1d:7f:7b:
70:5e:e2:cd:4d:cd:6b:28:a7:9c:02:48:69:ff:ba:
7b:f7:1f:7d:41:ba:1e:1f:cc:e0:02:37:76:20:0d:
12:12:3c:ad:86:0f:cd:0f:7e:78:34:9f:46:22:52:
99:33:66:dd:17:4a:a4:38:f0:98:d8:38:f4:81:7c:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:60:75:59:23:FD:3A:77:38:A6:D4:8E:ED:CD:9A:F8:DA:D8:18
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:31:17:bd:ec:34:4d:ee:31:5e:01:45:85:58:c9:3e:df:
e2:52:c9:d5:a6:f3:69:4c:1a:a3:63:68:b2:47:c3:c8:51:2a:
51:1b:2a:d5:ee:65:a8:a1:77:15:bd:d8:c4:ad:ba:a1:82:2b:
c1:1b:53:28:dc:47:3b:5e:44:e9:42:c0:6f:6d:bd:7b:07:cf:
46:14:17:c7:e1:82:27:cc:dd:17:ba:72:5c:e1:f9:69:75:2f:
5c:36:d0:51:72:53:ff:b2:8b:2c:ef:0a:88:37:3c:6f:ec:18:
c2:bb:13:7f:ba:f6:73:92:e2:6c:80:99:94:fb:b1:ee:23:3c:
05:27:d0:8a:d6:20:09:a1:d5:80:da:1d:0e:28:e4:20:4e:0c:
0a:9e:17:d1:48:d6:44:21:ed:6f:db:e5:bf:cf:7a:0a:d7:b2:
48:96:93:93:41:48:95:cf:9d:cf:b6:bf:98:3d:db:d3:9c:2d:
de:da:db:09:0f:e7:b5:25:0f:99:25:61:2a:0d:5d:f0:18:fa:
0d:94:b4:ca:fb:d6:9c:c7:da:2e:69:72:58:17:54:bc:27:ef:
8f:e5:3e:a5:6a:f6:e8:a6:e7:17:d5:8e:8e:c8:62:d5:f2:d0:
39:1a:88:92:ec:82:a2:8e:59:b3:38:bc:6d:33:9f:50:5d:8d:
96:7b:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net