Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: ZImLCCJlax9Gw+8Qb+EW96dLjGZZ9sM6wv8sgB/2b2s=
Subject key identifier: F9:E3:8E:16:9B:CF:AE:11:E9:3A:B6:1E:9C:E9:8E:75:A1:5E:38:5D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01962DF42FAF1AA5A0C0B45C732E8CF3A373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 0FE5
Signing time: Sun 13 Apr 2025 07:01:39 +0000
Manifest this update: Sun 13 Apr 2025 07:01:39 +0000
Manifest next update: Mon 14 Apr 2025 07:01:39 +0000
Files and hashes: 1: 44fsOPhLBto54i38jO9Qp6LcR34.roa (hash: q6FqWEqTwKl4W57zhlt+bCI2esmopnN71WRYkbStb/o=)
2: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: YM1wWBv2tmTjjIwczqFDmtTDsbtY0hQVMFxqHd3Y1T4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:2f:af:1a:a5:a0:c0:b4:5c:73:2e:8c:f3:a3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Apr 13 07:01:39 2025 GMT
Not After : Apr 14 07:01:39 2025 GMT
Subject: CN=f9e38e169bcfae11e93ab61e9ce98e75a15e385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:95:ad:92:02:3f:9f:44:3f:fa:ee:5f:e6:
ab:0d:78:02:98:07:66:c8:70:81:0b:85:7d:b9:24:
f0:38:97:d6:ac:f7:7b:42:63:1d:34:81:88:38:50:
a0:15:63:f5:5f:06:f4:8c:fe:49:a7:cc:28:06:1a:
61:ee:cb:15:36:69:a4:1f:d0:5a:de:db:f1:4d:0e:
9a:8e:85:bd:00:03:69:37:08:12:f2:e4:82:db:44:
9f:86:54:8f:e4:58:ae:f7:6c:97:37:af:1a:f3:a2:
f4:67:7f:9e:37:e2:9b:f0:7f:a8:f8:1e:6d:40:cb:
29:87:ca:7f:04:77:4e:53:d9:cb:b6:ff:ac:a3:d6:
6a:ca:e3:e0:4c:fd:43:58:08:7e:34:15:c7:8a:63:
ab:9d:e0:8e:f9:1b:f5:09:07:17:8e:e7:25:53:2f:
16:f1:bd:a4:ce:89:d3:4c:42:01:3d:04:fa:92:3c:
71:86:e9:04:21:52:15:ae:9c:92:d3:ff:18:d3:f0:
7f:51:ef:8f:e8:0b:01:47:e5:1e:f2:9c:f1:b7:03:
ed:97:3e:d8:88:db:09:31:07:4b:00:4c:f1:24:92:
83:b2:94:31:05:7f:75:00:f9:13:9e:f3:ae:51:92:
af:c7:ff:e7:61:7e:60:8a:ff:27:a4:07:df:15:b8:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:8E:16:9B:CF:AE:11:E9:3A:B6:1E:9C:E9:8E:75:A1:5E:38:5D
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:53:11:23:e8:47:55:54:1f:21:4c:cb:49:9d:f7:5c:5f:
01:b4:3d:b4:f6:f0:bf:c1:02:c0:ee:6c:c5:36:33:6e:24:02:
f5:d6:cf:53:4b:d7:f2:eb:ff:dd:f6:d7:20:52:75:5b:02:41:
35:7e:6d:bd:f4:c2:ee:87:34:0d:4e:64:73:4f:04:3e:89:c1:
b4:13:1e:4e:a9:ed:cd:4e:e6:47:d8:92:57:0c:2f:63:1f:ee:
49:87:70:bb:cf:e0:a1:4f:f6:de:9f:3d:f1:cf:41:6c:c0:ca:
0f:fe:59:6f:c9:9f:2a:33:03:a0:51:4f:54:33:d2:b4:36:6f:
85:fb:3f:f4:5a:9c:f5:56:46:3c:b5:ee:77:33:0a:c4:40:88:
61:fb:77:28:5d:03:e8:9b:09:f2:e9:4a:7a:2a:b8:6b:a5:6c:
1a:fd:aa:7a:04:2d:98:02:c9:b7:5a:73:38:d4:91:92:48:1e:
46:f9:5b:77:b1:60:9a:09:8b:9f:be:7e:b4:07:7a:7c:b4:28:
7e:6b:66:55:37:9b:61:c6:fb:90:af:66:e3:f5:e3:5c:8f:eb:
39:fa:fa:98:1f:39:7e:30:8d:f4:5d:20:61:b6:46:15:b3:21:
ce:d7:70:69:5a:9f:fd:16:bc:09:4d:70:27:b3:89:50:af:3f:
6b:6f:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net