Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: uQWoSXzD2pdB/n0ivPOeMJ41c5Jd4nAO3YxMQ1oqMmE=
Subject key identifier: 9C:CA:B7:E8:65:93:89:21:05:FA:F4:AC:4A:3E:92:22:72:41:09:B2
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 01962E2B4C8F567EF6156EA46046F3DC3BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 05AE
Signing time: Sun 13 Apr 2025 08:01:51 +0000
Manifest this update: Sun 13 Apr 2025 08:01:51 +0000
Manifest next update: Mon 14 Apr 2025 08:01:51 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: 4AAZPI8MCEQabWHx5irSfE/xujfH0OvtQf+VyPtVCJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:4c:8f:56:7e:f6:15:6e:a4:60:46:f3:dc:3b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Apr 13 08:01:51 2025 GMT
Not After : Apr 14 08:01:51 2025 GMT
Subject: CN=9ccab7e86593892105faf4ac4a3e9222724109b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:19:29:ee:aa:ac:e3:67:9c:93:3b:2e:a0:
e4:34:53:ca:82:4e:c0:49:1b:1b:2a:9e:32:8e:92:
2f:e8:92:ad:00:1c:14:50:19:70:05:fe:de:be:7f:
1f:12:82:a1:4a:64:6a:5d:ae:72:07:a5:fe:90:4e:
75:70:8e:68:b3:16:bb:1e:dc:87:74:26:06:ef:cf:
92:3d:09:1f:4c:a2:77:a1:03:5c:2e:b4:2e:e3:ce:
02:67:19:b8:59:08:ce:cf:b8:dd:6e:df:e3:bc:8c:
36:51:66:82:a2:eb:1a:f1:a7:37:39:d5:1d:9e:33:
52:ea:a0:d5:ee:41:3d:70:7f:fb:9c:f5:78:c9:06:
4f:c7:de:3b:d7:38:ae:03:d1:af:4f:2a:54:fd:ce:
f9:f4:d8:03:8e:95:e1:e1:e8:e9:34:98:fb:15:61:
f8:d9:cc:2b:7e:d5:d8:40:c1:4c:51:cc:c9:d6:9d:
17:b0:82:90:28:d3:17:11:d7:a8:49:c4:24:cc:f9:
41:78:0f:90:2c:8d:0f:e2:aa:aa:64:f9:24:5b:c6:
d6:81:45:9c:0b:c3:07:e2:4c:29:43:e4:90:2c:91:
4b:1d:57:0c:08:1c:b4:1f:ca:e4:a3:fe:85:ca:2a:
f7:34:11:32:0e:99:cc:1f:90:45:6e:47:95:7d:13:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:B7:E8:65:93:89:21:05:FA:F4:AC:4A:3E:92:22:72:41:09:B2
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:63:4e:d9:e2:2d:47:db:2b:6a:55:9a:4c:b0:13:e9:e9:7b:
dc:5f:80:f2:57:dd:34:0e:99:72:dd:55:76:84:a8:e6:ed:b6:
c3:6a:fe:1d:ec:28:1f:92:e4:53:ae:95:21:99:09:69:58:80:
6b:7a:f8:53:33:d9:c5:7b:65:3d:82:0c:7b:a4:23:62:a9:53:
6b:96:de:ed:4f:2a:5d:83:de:c8:02:a8:f1:74:29:33:21:27:
c8:64:46:00:6c:8c:93:50:a3:5c:cb:58:fd:ef:2e:7e:bd:28:
3b:f1:c2:df:43:86:73:ac:61:81:ab:3d:ac:18:15:3c:2d:f1:
8a:d0:04:3f:99:16:04:9b:6a:25:67:9f:6d:29:06:41:0e:ac:
94:8b:e6:85:dc:b4:b6:a9:06:f6:20:49:a2:85:5c:d9:f0:55:
de:43:7e:59:99:8f:13:84:4c:4a:ee:5a:37:e1:bb:90:53:c2:
86:02:7b:a3:c1:d0:c4:d6:fe:62:d9:6d:4d:ec:4e:8e:e3:d6:
95:ec:db:36:97:91:43:be:fd:b4:db:66:2c:24:14:f6:06:04:
de:0f:1c:cc:09:81:72:31:83:74:df:d8:da:ea:6d:45:fb:b2:
45:43:26:bf:8b:8f:91:4d:e4:47:a9:00:80:35:d6:12:fc:31:
df:d7:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net