Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: 4x1TwiUOYI5w2HvxL9S9XSbs3jPEdY08GOCkc0S6AII=
Subject key identifier: EC:44:65:6D:DA:E7:D2:47:47:6F:68:D2:8B:33:B0:EA:C0:DB:B5:C4
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 01962F750873168F895689AA637DBE81A99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 14:02:00 +0000
Manifest this update: Sun 13 Apr 2025 14:02:00 +0000
Manifest next update: Mon 14 Apr 2025 14:02:00 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: ut5d5GyngECnGqazOsZGlEz44EWMC1PiHH08d6TmcaM=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:75:08:73:16:8f:89:56:89:aa:63:7d:be:81:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Apr 13 14:02:00 2025 GMT
Not After : Apr 14 14:02:00 2025 GMT
Subject: CN=ec44656ddae7d247476f68d28b33b0eac0dbb5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:b4:97:3d:e5:64:d5:58:96:4c:b4:2f:65:
af:3e:f9:78:a7:76:3a:04:f5:5c:99:40:de:3d:57:
66:e6:5b:76:2f:e6:8c:62:6a:27:90:bd:34:11:5b:
3f:f6:69:ee:78:7b:71:f2:83:57:15:0b:32:58:64:
28:fb:51:e4:9f:af:3d:bb:11:1f:e4:e3:22:df:e5:
21:44:3e:31:30:31:9c:c9:6f:21:ca:8f:12:cc:5d:
73:3e:57:fd:0d:2b:fb:6d:1f:9c:ab:ae:e6:90:ea:
3a:c3:c1:8f:ef:62:4f:f0:24:15:39:1d:24:d8:73:
ef:98:29:30:6b:c8:ae:b7:f4:a7:85:3a:3f:b2:5c:
49:0e:f9:fe:a5:00:df:1f:3a:18:84:75:14:12:47:
3d:3f:4e:e3:64:1c:58:15:38:69:84:74:43:12:fd:
f4:bb:e9:b8:41:80:fa:26:60:f5:f2:48:e2:46:2e:
26:17:2e:65:72:0e:55:50:aa:6a:fb:16:38:fe:dd:
23:93:75:b3:9b:dd:0c:7b:e9:a1:55:f7:4a:61:29:
40:42:d8:3f:47:1e:a4:0c:46:89:7f:7c:bf:8b:d0:
47:f1:db:45:8d:78:28:e4:86:31:a8:2c:68:05:de:
d6:27:7f:69:49:3d:06:c8:8e:3d:fb:fb:37:e1:49:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:44:65:6D:DA:E7:D2:47:47:6F:68:D2:8B:33:B0:EA:C0:DB:B5:C4
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:56:b1:ad:56:69:b1:22:51:2c:9e:0c:e9:f6:c8:2a:15:
4b:7f:b1:65:c9:38:69:75:8d:6b:4b:fd:ec:a2:a9:7a:2c:91:
cd:ee:95:8c:0a:9f:c4:2f:7c:18:4e:51:a3:e7:36:56:01:cd:
ba:93:84:ed:4b:7b:54:ee:48:de:0a:f4:d0:3f:48:63:bf:39:
d2:6b:a8:b5:8e:f4:d6:a1:78:87:e8:01:19:03:04:c8:1a:63:
f9:cb:b8:47:2e:f7:4e:bc:85:20:fe:42:8a:04:e2:05:2a:63:
99:2e:ce:71:28:4c:8c:7c:8d:ca:8e:f0:dd:5c:ca:ab:a3:f4:
03:8f:6d:88:9b:7c:84:c8:f3:34:10:b1:96:fd:ac:c5:ec:8e:
4c:cd:18:8b:c1:fa:5c:4b:99:4a:df:f9:cc:b7:ee:a7:74:02:
f5:79:34:98:c3:f3:9f:30:ea:95:7a:6a:5a:e1:b4:b0:43:9f:
38:11:fc:be:32:a8:2f:41:8b:43:4d:b7:cd:c6:1e:d2:5e:81:
8b:cc:7f:ba:61:cf:b3:1c:98:b5:ee:41:db:33:b8:ca:ee:22:
27:c7:6d:a2:42:05:48:74:5b:b5:47:a8:99:52:5f:01:a1:7e:
79:02:a1:31:6e:7d:e9:f7:2e:4d:38:01:b3:d1:66:96:9b:b7:
16:fc:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net