Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: 41yeyroUzoP8rwkmn7Mo6OPsegwfb0k9NBaZEMHLAJs=
Subject key identifier: 3F:F1:B3:5E:1A:16:6D:AC:CC:DA:28:20:96:73:2C:3A:F6:D5:50:99
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01962E6196DB4F8BF9F1D55E851AB1B92C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 09:01:09 +0000
Manifest this update: Sun 13 Apr 2025 09:01:09 +0000
Manifest next update: Mon 14 Apr 2025 09:01:09 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: xeNKburHFpDMAO8mjfORz2fxwHE7K5K0ZPecVTF7WIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:96:db:4f:8b:f9:f1:d5:5e:85:1a:b1:b9:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Apr 13 09:01:09 2025 GMT
Not After : Apr 14 09:01:09 2025 GMT
Subject: CN=3ff1b35e1a166dacccda282096732c3af6d55099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:45:c2:cc:82:6a:cd:bc:cb:7d:54:34:38:
93:2e:93:88:0e:7c:f1:38:e1:5d:f9:7c:c6:3f:3a:
f4:52:cd:05:7a:12:e3:52:07:05:38:b9:38:81:58:
66:07:b8:ba:90:1c:21:d9:bc:82:9f:32:06:a1:6e:
e1:17:98:87:61:2f:9c:ae:cc:b3:69:af:ac:b0:9e:
1a:4a:20:fd:0b:2e:94:e3:c1:88:cf:07:0c:50:2d:
b7:69:30:af:15:26:3d:5c:84:7e:ba:f0:fa:7e:19:
e7:8b:ff:4c:91:d4:9c:e6:84:cb:18:6e:ca:07:0a:
96:fe:ac:f0:e7:7f:12:b7:9e:51:e8:8b:ec:9d:15:
f4:f9:6d:bd:06:0f:e0:53:98:d6:18:bc:97:78:a5:
4c:01:18:4d:17:c5:8a:c1:68:b5:b2:56:15:9c:3f:
7a:03:ff:ca:e2:7e:60:32:3b:3e:2a:1a:36:d2:11:
36:14:bc:d2:7b:b2:23:71:fc:0e:86:e7:a4:4d:16:
24:e4:f5:2a:44:d4:0d:74:8a:f4:26:7d:be:6f:2c:
e0:d1:41:30:23:88:cf:0e:35:25:58:fd:dc:8f:32:
3c:85:36:53:d0:34:9a:0c:5e:03:be:e3:11:2d:08:
f6:cf:06:2d:02:8c:d5:eb:9b:97:b6:65:76:3d:ee:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:B3:5E:1A:16:6D:AC:CC:DA:28:20:96:73:2C:3A:F6:D5:50:99
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:88:b9:40:83:76:8e:92:4c:5a:c1:bd:d4:f9:21:fb:05:
a2:c2:18:f2:29:5d:27:11:db:e4:a8:e7:bd:ac:f1:3b:be:f0:
38:a9:3f:2c:5c:54:49:bb:37:58:ac:57:d4:b0:87:a2:e5:c2:
fa:35:bf:fd:5f:c8:fc:7c:5a:6b:f5:1f:c9:78:58:6d:d3:ee:
b5:96:79:d3:e3:40:d6:82:73:83:96:f8:57:36:f0:a3:82:f9:
14:97:a8:b9:04:1b:f7:b5:35:63:7a:45:ea:0b:f1:b1:cf:8b:
84:ff:76:ff:97:05:dd:c2:b4:4e:15:1d:b3:a2:cc:af:88:7b:
be:fa:a9:53:44:9c:23:ea:66:a3:b6:35:31:68:08:12:f8:9e:
91:54:85:bb:47:03:4a:f0:b0:be:b7:da:33:17:9e:8f:bd:34:
cf:ec:a1:aa:6b:19:5c:a9:44:2d:7e:46:8b:25:ff:33:4f:c2:
a1:98:e7:ad:3f:85:55:7d:38:06:72:ce:5d:83:28:18:d5:87:
ac:45:7a:df:c3:88:53:19:7f:64:7d:c2:d1:e0:0b:b4:01:7e:
4a:c4:0f:f2:46:34:cc:93:83:ac:f5:12:a0:10:bb:c3:0c:7a:
8d:22:4e:d2:f7:6e:93:f1:cc:22:3a:b0:49:ec:ac:d4:7f:1f:
6c:ac:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net