Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 4oLQ5AITImVuZKRlf6xu3x3XZn7ZhtkxzpMM13bWpwA=
Subject key identifier: E0:23:24:04:1C:5C:11:E6:72:F3:41:57:5E:57:85:41:45:15:97:EA
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 01962F06CAA30ECD3473C196D96076905037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 12:01:36 +0000
Manifest this update: Sun 13 Apr 2025 12:01:36 +0000
Manifest next update: Mon 14 Apr 2025 12:01:36 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: TBKQmMh0mBjVkmvW2XBwMh9EgN/P8oW/ZKczb4cbX/I=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:ca:a3:0e:cd:34:73:c1:96:d9:60:76:90:50:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Apr 13 12:01:36 2025 GMT
Not After : Apr 14 12:01:36 2025 GMT
Subject: CN=e02324041c5c11e672f341575e578541451597ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:b9:0f:94:df:83:17:38:a3:00:42:af:71:
d1:cf:53:21:c8:a9:b9:5a:04:66:16:ca:ed:b7:8b:
78:fd:9d:1f:90:18:6d:50:8f:30:a4:f7:c3:91:0b:
1c:15:08:09:4c:e2:e8:e2:ec:48:bc:d4:0c:58:aa:
72:a5:b5:14:b2:33:b3:ce:75:ca:08:4b:53:35:4d:
91:c1:3d:5f:a1:af:1c:ba:44:0f:f0:2e:77:59:04:
36:8e:5f:46:b5:6e:59:3d:4f:e6:b0:b7:09:a6:5b:
82:5f:8b:81:f1:c9:cf:d6:3f:54:d0:1c:8b:57:19:
92:69:e3:fa:e7:7d:0a:53:82:3f:67:4b:5b:2f:81:
b1:f0:92:0e:fb:47:2e:0a:e6:b0:e8:bc:72:b3:ff:
5f:ff:9d:0a:86:48:05:82:c1:fa:c0:b2:65:e3:ba:
dd:30:74:2d:73:43:96:05:90:31:e9:6a:ab:de:dc:
77:fa:a7:d1:bd:e1:5a:e8:80:fa:3e:07:7d:db:14:
1e:ff:4c:57:23:fa:f6:01:cc:6c:f9:be:67:e6:00:
bd:80:07:f0:15:b5:82:42:ae:d4:61:dd:65:b8:cb:
17:b0:4c:27:e1:45:1c:8e:e7:16:3f:70:e4:2d:29:
15:ad:57:d6:53:c7:97:43:bc:4f:27:52:e0:58:f4:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:24:04:1C:5C:11:E6:72:F3:41:57:5E:57:85:41:45:15:97:EA
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fe:f4:31:9c:3c:21:c9:91:ca:6b:c5:22:47:ed:3d:81:8f:
d9:12:ec:64:d6:a7:19:5b:7c:f7:a3:37:62:46:ca:33:ad:17:
db:c3:2f:aa:4d:d2:2f:20:75:e6:8c:6b:a5:b1:10:20:f5:70:
25:03:b3:1d:1e:2e:83:ac:de:fa:0f:ef:76:10:30:bd:02:b0:
b0:a5:59:e4:bc:40:4e:ff:fb:31:14:a2:f5:78:96:8d:32:b3:
1d:1c:26:93:9f:65:58:24:e6:9c:b1:75:49:46:22:21:fb:b5:
76:67:11:97:a3:47:bc:95:36:c1:dc:dc:82:a7:0c:16:9b:5f:
a3:7e:e2:20:80:9c:15:d5:5b:e1:b2:a1:fd:ec:d8:46:cf:cd:
21:ca:4f:fb:14:b1:07:7c:56:11:83:49:9b:c2:e4:02:89:3a:
7c:96:ed:0a:f1:2f:5d:78:77:10:d4:04:28:22:86:29:88:1f:
4a:85:10:35:68:51:6d:ff:7b:18:0c:9f:ff:35:b3:45:fb:1a:
90:1b:b6:38:2d:9c:d9:3a:69:09:2c:74:d8:60:87:01:56:bb:
4a:c2:22:96:d3:1a:8f:25:e7:02:38:b5:53:1c:76:47:cf:44:
d3:19:62:45:ac:ad:cc:d4:2b:0f:e0:e5:f2:b9:fd:c9:d1:77:
59:9e:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net