Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: c48x4JtfMtTqbUiQVxYrZRadLP5QK5vgc+zSz45DpOQ=
Subject key identifier: 3A:E2:22:BE:FC:B4:24:D1:75:9F:1A:3C:D3:36:55:8D:24:F8:96:1F
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01962ECFCD8BDE3EE44B1A01711ADFFFAFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 03B2
Signing time: Sun 13 Apr 2025 11:01:32 +0000
Manifest this update: Sun 13 Apr 2025 11:01:32 +0000
Manifest next update: Mon 14 Apr 2025 11:01:32 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: rP061J+1QYg/+PA9lHMbC+RYQc5wRj+IQgIQEw6UC28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:cd:8b:de:3e:e4:4b:1a:01:71:1a:df:ff:af:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Apr 13 11:01:32 2025 GMT
Not After : Apr 14 11:01:32 2025 GMT
Subject: CN=3ae222befcb424d1759f1a3cd336558d24f8961f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:6a:96:5e:42:90:0c:c5:ce:66:b7:77:0d:
1a:a1:46:bc:49:04:52:04:78:9f:62:ca:81:5b:f7:
7f:66:fb:b5:37:7f:d1:a8:d0:81:bb:d4:6e:83:a9:
58:fb:0c:93:7c:46:bb:db:d6:fd:84:51:e2:dd:0b:
d0:de:c5:42:6b:2c:59:45:d4:20:a8:97:de:3f:12:
5d:95:6b:e2:58:1d:24:11:42:f0:a4:88:49:0f:90:
04:d2:a3:95:83:31:67:48:dd:05:ac:ac:41:45:4c:
b9:f2:0f:31:ff:9a:bd:39:15:68:ce:72:0e:ec:5e:
8d:95:f1:7c:c1:0a:04:7e:04:76:f8:0b:e5:4b:a5:
c2:28:4d:be:0f:db:4a:58:bf:3a:b8:a2:f9:65:0d:
cf:d6:2a:e5:ee:9e:e7:bc:4a:83:9c:1f:bc:8d:5e:
30:80:67:32:c4:1e:5f:92:13:e8:f8:e3:56:34:d7:
ea:25:10:fb:67:d0:78:0f:bf:36:e3:72:87:e7:0b:
df:89:cb:3b:56:19:dc:5e:9f:fb:12:fd:dc:46:3f:
0a:28:21:62:73:3f:6d:fa:b6:2f:ef:95:f2:03:a5:
36:7e:39:e7:35:26:e7:7f:56:8f:5c:94:07:22:a5:
cc:27:5b:b0:e2:83:90:db:88:47:30:1e:7e:ea:4f:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:22:BE:FC:B4:24:D1:75:9F:1A:3C:D3:36:55:8D:24:F8:96:1F
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7f:12:0a:b9:79:cc:61:24:33:8d:9c:41:ec:e6:bc:d8:4f:
78:3b:6e:bb:48:bf:dd:4c:d1:43:9f:d9:72:67:f4:4b:8b:12:
ad:26:34:ad:95:74:4c:b4:36:13:c9:c1:7d:5d:ed:4c:27:52:
2e:a8:1b:57:a6:0b:00:db:b5:66:cf:64:ca:2a:d3:6e:31:ae:
83:55:aa:e3:6e:6b:ad:5d:34:55:6f:ac:42:d1:c9:18:86:ae:
f7:7a:f7:4f:04:d5:20:22:5f:6d:d9:ab:e7:9e:14:17:c9:de:
a8:c1:ba:aa:c6:12:be:14:c0:42:dd:e5:5d:29:a4:be:b4:38:
55:b3:e2:00:97:b2:7a:49:02:30:31:09:83:6a:f5:64:a2:fc:
d1:69:77:5f:84:0b:4c:bb:8a:6e:67:a2:c8:13:ec:c9:66:2d:
1c:0f:5d:74:71:82:64:97:d8:eb:57:6e:13:b6:dc:73:22:5c:
dd:1a:cf:07:53:c0:6c:46:97:b7:77:d4:b8:38:f7:95:28:70:
ba:7b:cc:6a:21:97:86:57:ff:ea:dd:2d:e6:bb:75:88:5b:ee:
87:0f:87:2b:fb:e7:43:dd:4b:ff:7d:bd:b3:f5:5f:09:6b:c9:
35:13:e8:df:dc:33:45:85:d5:c2:fd:e1:ba:04:ec:6a:7c:75:
61:6e:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net