Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: fa2mlgtxGcmZZppz+Gtu1q5aj+zZDBD4WRpbWo1bW6Y=
Subject key identifier: 3A:4B:C6:E3:58:3A:96:12:25:95:6C:AA:00:3B:E5:45:62:3E:03:89
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01962E61B0A699CF9114082F0C237FCB4B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0D82
Signing time: Sun 13 Apr 2025 09:01:16 +0000
Manifest this update: Sun 13 Apr 2025 09:01:16 +0000
Manifest next update: Mon 14 Apr 2025 09:01:16 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: bqhW05QlA31ctyiqEd9q4CfKg8yHFK+1CmEUM+PA6ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:b0:a6:99:cf:91:14:08:2f:0c:23:7f:cb:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Apr 13 09:01:16 2025 GMT
Not After : Apr 14 09:01:16 2025 GMT
Subject: CN=3a4bc6e3583a961225956caa003be545623e0389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:91:e3:e9:40:c4:f4:07:15:8c:50:83:5e:
46:d9:60:e2:b3:03:f0:51:6d:50:cb:74:36:cb:f8:
3e:81:bb:9c:4c:33:f0:bb:cf:78:46:38:fa:29:20:
34:4b:7d:e7:67:99:8c:e5:93:19:77:d2:4b:a8:0b:
e1:b7:5c:84:d5:a6:e0:c4:55:ab:36:68:6e:8c:ad:
e8:f0:19:63:83:fd:e8:60:15:ec:7a:0b:93:d2:55:
4b:a2:dc:a2:ee:f7:99:be:15:78:a4:79:d7:a2:4c:
a0:3e:38:68:c6:78:2e:b8:fa:98:a1:64:87:b1:a8:
fd:84:c0:c0:56:a1:72:6a:bf:9b:b0:f2:c4:bd:30:
ea:95:4d:b7:e4:ce:0d:76:d6:9e:a6:96:f3:ba:86:
29:9e:ed:95:f4:f4:c7:a7:b3:85:62:c9:01:15:51:
d4:06:fb:ad:b6:03:4b:30:62:4c:fe:35:cc:cc:95:
b0:66:ad:be:a1:83:9f:08:26:a8:6f:b7:9d:ed:90:
ee:c7:bb:59:db:77:ea:fc:a6:f6:82:fe:c3:23:ea:
a9:f5:b2:66:b1:d9:1d:e9:0d:cc:aa:8e:5d:f5:21:
e5:cd:02:be:e3:7c:23:4b:c2:bc:f3:bc:cb:d1:c7:
d2:5a:05:cc:a3:3e:e9:88:e3:6c:46:f2:27:10:29:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:C6:E3:58:3A:96:12:25:95:6C:AA:00:3B:E5:45:62:3E:03:89
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e4:48:f9:06:c0:19:ab:76:f2:2b:e3:1c:e1:09:9d:69:64:
ca:1e:b1:57:97:41:24:99:f4:65:24:18:64:ba:3b:38:2b:e4:
65:db:89:05:eb:78:01:cc:08:f8:4f:b2:e5:a7:9e:e5:f7:58:
2b:e8:95:52:8a:c9:44:f1:9c:23:3b:77:0a:0f:3b:fe:1a:3d:
61:83:a3:c3:df:49:07:bd:db:28:1d:16:09:b9:1d:4b:68:f8:
09:e5:82:22:49:36:15:f9:8b:a8:0d:b6:da:15:6d:12:ce:4f:
24:c3:6b:bf:9c:c8:6a:f7:65:3a:f6:bb:44:c6:66:70:6b:a2:
17:0d:73:8c:f4:b6:ba:ef:1c:b9:cf:c3:05:ee:d5:76:b1:0c:
72:71:93:50:2d:f0:ff:4b:d8:8b:2f:2c:25:89:fa:6e:f6:f7:
d3:69:7b:29:b8:7b:af:7e:18:d1:56:8c:b0:e2:76:98:ed:3f:
20:4b:a8:b4:f7:d1:27:58:0b:5a:da:28:19:23:a1:65:c3:fe:
b2:bb:24:a4:e6:81:80:8a:10:cc:a7:86:8a:b4:47:1f:f2:1b:
0e:85:67:0f:3a:14:49:ca:37:2b:2c:2d:37:ee:97:49:87:c7:
98:f8:c9:a3:07:c8:1b:12:f2:a1:91:d3:c9:4c:fc:8f:f0:9c:
b8:f8:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net