Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: IuMFHlSIzFUeuCI2LAZymB7MyAkojmtbYM5FAPW5Rvs=
Subject key identifier: 27:FB:99:AE:70:D0:56:63:65:42:75:F4:2A:A7:A8:43:60:50:C6:74
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 01962F74ABFA743F79F1D0C07A74F0B46128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 14:01:37 +0000
Manifest this update: Sun 13 Apr 2025 14:01:37 +0000
Manifest next update: Mon 14 Apr 2025 14:01:37 +0000
Files and hashes: 1: 8xMxjtO-k2WYJj5fJmeVkGV5YA4.roa (hash: h2/dulkFhykUkX0igL56x6SI1vv2NsPZ43/9G+3BAxs=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: TNCUEa6CEQwa/uUphjQMkgfrCBWY4BLt/Tfc8FGCslQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:ab:fa:74:3f:79:f1:d0:c0:7a:74:f0:b4:61:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Apr 13 14:01:37 2025 GMT
Not After : Apr 14 14:01:37 2025 GMT
Subject: CN=27fb99ae70d05663654275f42aa7a8436050c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:a8:45:cb:40:89:55:77:4a:0e:fc:92:ae:
70:2b:27:9c:a9:c4:1b:6e:29:ed:f2:ce:ba:ac:45:
8a:47:c2:9e:d9:ff:39:f0:28:7f:2c:e3:d2:b7:a4:
8e:ee:4f:a3:28:0c:b2:64:7b:38:a1:b8:0c:b9:67:
a6:b3:05:a1:d1:52:f1:ec:40:a9:70:2f:45:a1:dd:
88:b7:fb:48:56:d4:7f:b2:b3:1f:9c:46:24:13:c1:
64:10:b3:05:d9:08:9c:6e:9c:e9:e2:65:ef:63:7b:
cf:e9:cc:2b:e5:6f:de:98:6e:ad:a5:35:55:ac:1f:
a4:a3:7c:81:35:46:d8:c5:fd:5e:3a:8b:62:49:21:
67:7e:04:3c:d6:1a:96:6b:ad:cf:5c:04:fc:91:cb:
70:7f:1b:4a:52:52:32:a1:51:de:60:50:c1:77:94:
83:f4:4d:ce:f4:73:87:92:15:7e:ed:b8:22:6b:df:
d6:3a:84:dd:74:e1:5c:08:9b:cf:ac:77:30:a8:c5:
eb:c8:6c:6e:0c:6b:a7:13:9b:7b:61:c3:e3:10:17:
62:36:05:99:9e:25:3a:14:61:04:6e:42:ec:2a:ee:
a2:13:f4:c7:fa:cd:b7:5e:80:15:ae:15:41:4f:91:
78:a7:0b:42:68:8a:5e:23:9d:06:78:86:e3:0f:ae:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:99:AE:70:D0:56:63:65:42:75:F4:2A:A7:A8:43:60:50:C6:74
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:27:20:43:69:2f:33:b3:08:58:d2:cb:29:1b:3a:35:c3:b7:
56:81:4c:c2:72:09:b1:0f:b9:17:55:3a:41:3b:79:8a:0f:b9:
79:d2:c5:8f:1c:eb:79:63:d6:51:f9:76:ce:b1:f3:04:40:83:
67:4c:f2:10:db:9f:97:92:de:92:fd:20:d6:a2:0a:8b:ec:57:
b8:77:89:ad:f3:58:56:7b:01:44:1d:7d:5e:e0:9c:f6:1b:6c:
38:72:a2:ab:7c:a2:49:34:85:9f:3e:0e:3e:0e:34:6c:c2:54:
8a:fc:5e:96:42:bd:46:f0:68:c5:45:b6:07:26:4c:d9:c5:41:
21:43:d3:cd:59:b9:33:8a:e2:18:4f:a1:44:32:fb:c4:cf:a9:
ac:b2:4e:24:2b:e3:aa:5e:fa:3a:b6:dd:f1:20:f8:c5:1d:fd:
d3:8e:ae:ce:27:f4:05:d9:54:84:3e:db:a3:a2:c6:12:14:62:
3e:de:41:f9:e6:3c:e5:29:c6:a8:0e:27:96:a4:15:66:b7:a5:
9a:7f:34:12:e1:bd:fb:af:13:18:a9:d3:2e:e2:58:dc:cd:6b:
bd:fb:30:76:5c:67:04:94:cf:0d:f1:03:09:f1:61:28:56:e3:
16:6a:9f:7d:f0:1c:fa:c9:15:ed:a2:d7:f0:95:78:25:17:6f:
0a:02:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net