Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: MBEIZx7w3Qsv83G1QV6Ear4nddtaKNHTDLNy9McSvUg=
Subject key identifier: 0A:ED:77:A3:A6:07:56:E3:C2:41:B7:9D:50:F7:3E:B7:75:E8:9D:CA
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 01962FAB4F66BE0714C85433275C88D2F791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 14F0
Signing time: Sun 13 Apr 2025 15:01:18 +0000
Manifest this update: Sun 13 Apr 2025 15:01:18 +0000
Manifest next update: Mon 14 Apr 2025 15:01:18 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: R52ONofszYrwiznUlfYhuM1F3S5kuPNURTfN7kQeWwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:4f:66:be:07:14:c8:54:33:27:5c:88:d2:f7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Apr 13 15:01:18 2025 GMT
Not After : Apr 14 15:01:18 2025 GMT
Subject: CN=0aed77a3a60756e3c241b79d50f73eb775e89dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:be:d4:a9:7c:37:c7:ec:b1:20:b9:4f:8d:
27:2d:c3:b8:65:bd:ff:55:8c:2d:e3:4f:2f:6a:6a:
57:d6:ac:56:a7:e8:45:fb:8b:78:77:85:01:2e:23:
88:54:51:ce:b2:c5:e5:7c:3f:e3:91:5d:d0:ca:37:
53:63:c4:84:2a:7b:6f:07:26:b4:58:31:32:2e:b8:
49:aa:8c:34:77:96:7f:23:92:3b:3f:98:2a:19:33:
75:f5:9a:c8:6e:2f:a0:05:5e:18:28:2d:d4:9f:c0:
02:35:f5:9f:19:65:42:2e:c2:5f:5d:4d:b9:84:16:
14:76:3e:50:45:bd:29:60:a9:ec:28:7e:6b:86:ce:
f5:a0:eb:f3:73:91:2a:fc:b2:7f:cf:ba:75:3c:d8:
bf:92:b9:86:62:fe:9b:01:97:e2:ff:40:21:67:2a:
f5:5d:5f:b1:60:a8:f8:7c:a5:cd:fb:72:9c:33:62:
b1:cf:b9:07:bc:49:98:78:0c:c3:d4:e5:07:f2:b9:
73:f2:7b:c0:64:6b:80:8e:bf:bc:7e:a9:a6:ea:19:
77:be:4b:d6:1d:3c:4f:62:4c:65:d4:58:e3:8d:c1:
7a:47:80:99:43:72:e8:af:fb:ca:e3:a3:48:b0:cc:
6b:43:b3:48:48:00:c0:fa:40:a9:52:bc:e7:d9:cb:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:77:A3:A6:07:56:E3:C2:41:B7:9D:50:F7:3E:B7:75:E8:9D:CA
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:83:6e:b0:76:23:d9:a6:e1:c0:e6:a1:37:2c:23:76:8c:
a5:14:db:2a:7b:b1:c5:22:fd:97:f9:af:58:c2:df:bc:83:7c:
d7:b7:68:bb:47:c6:9b:b1:9a:a0:5f:9c:aa:ef:82:04:64:1f:
56:67:44:0d:02:c8:cc:e2:09:25:a3:c5:43:ca:97:f3:5a:b3:
19:37:29:b0:36:66:2f:bc:52:bf:a2:c9:44:6b:40:01:82:b0:
ee:cf:af:7c:0c:5a:a6:a7:24:91:75:2a:b9:bc:3f:0b:6c:a9:
4c:6c:e4:5f:51:2d:fe:47:01:8c:41:cc:64:d4:93:c0:f0:fa:
81:70:5a:47:ee:5e:35:97:65:6a:12:1e:e1:d5:71:8e:ae:79:
09:a5:c5:9e:12:46:a1:00:59:d6:45:b6:8f:c6:5a:72:71:0d:
32:90:fe:c5:d7:4b:63:d4:64:c4:03:21:fb:1c:d3:92:85:ac:
47:ee:06:c2:5b:44:ca:c8:a1:31:cf:21:a2:80:f1:fc:a4:7b:
e2:f0:44:ec:cf:65:0d:86:a8:0f:ab:9f:78:a6:28:78:4a:ae:
5b:fa:93:49:61:2f:42:1a:73:5f:2b:9c:ac:42:a3:8b:4b:01:
90:5f:d5:b3:cb:f9:e1:a4:a6:fc:7f:ab:ad:8e:ea:ca:6a:6b:
81:51:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net