Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: GfVlfnmEKTOhpBWMpAbW9EPpEB1BIBnJUR0rzj1b9i4=
Subject key identifier: 3E:94:A5:55:0E:6B:46:3E:91:6E:12:B3:A8:3A:BB:51:B2:60:2E:20
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01962F072C9F5856E784FB58C90B65AEF143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0621
Signing time: Sun 13 Apr 2025 12:02:01 +0000
Manifest this update: Sun 13 Apr 2025 12:02:01 +0000
Manifest next update: Mon 14 Apr 2025 12:02:01 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: U4LYbIfQOtHMNX/AATus/jBoTU3hoTbOPtKIf4etjTw=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:2c:9f:58:56:e7:84:fb:58:c9:0b:65:ae:f1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Apr 13 12:02:01 2025 GMT
Not After : Apr 14 12:02:01 2025 GMT
Subject: CN=3e94a5550e6b463e916e12b3a83abb51b2602e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:0f:5f:71:7c:b3:0e:b7:a1:cd:2d:0c:cc:
a9:10:e1:f3:6d:f9:1f:03:ca:8d:8a:e8:74:90:d0:
8d:05:1b:3c:52:42:54:c8:55:03:c5:23:fd:30:36:
3e:48:4f:13:18:a9:56:8d:f0:2c:7b:8d:ca:21:1e:
71:a9:a0:56:79:bb:9e:63:0f:b8:2f:b2:9d:d8:e5:
82:e4:e0:ea:de:58:97:fa:59:9f:3d:be:a0:95:1a:
71:ab:6b:99:8a:12:d4:0e:6d:ee:c6:57:60:c6:4b:
c1:de:cd:3b:10:49:a7:67:7a:27:22:e3:32:a3:d7:
fe:39:47:e3:25:26:94:e1:15:da:cb:b8:f6:6e:1f:
b7:91:d7:77:24:cc:69:10:29:7a:b6:1c:6b:dc:5b:
23:92:74:09:f4:f5:d8:2f:bb:7d:b6:a6:e2:42:01:
cc:f1:69:6b:1b:9f:35:05:5a:fa:0d:2e:93:99:19:
5c:ed:8c:5e:46:eb:06:24:2e:88:80:8c:9c:13:cc:
72:2a:b3:ca:bd:58:59:55:47:c4:2e:d1:80:cb:bd:
7e:86:57:05:00:c0:fc:86:64:c4:87:34:03:80:e1:
04:34:2d:0a:59:28:b3:78:a8:37:b5:09:3e:89:44:
ff:67:66:6a:5e:40:66:ca:7c:82:99:cb:ed:67:fa:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:A5:55:0E:6B:46:3E:91:6E:12:B3:A8:3A:BB:51:B2:60:2E:20
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:d2:37:b0:22:74:81:7b:3b:92:0f:55:20:70:9c:64:e6:
bc:94:a3:02:14:6d:91:b3:30:11:56:a6:89:47:44:d7:9d:01:
0f:e6:67:4b:c7:1b:22:4e:72:85:df:f0:48:f1:91:4e:f3:68:
96:70:b6:c9:19:0e:60:66:79:2e:50:f6:36:98:52:bc:94:a5:
1f:67:31:c3:5b:32:b4:8d:13:df:94:93:dd:26:ae:45:42:19:
6e:ba:25:cb:a5:dc:ab:f8:20:a2:94:7d:34:3c:c7:aa:dd:54:
07:b6:d0:71:f0:b1:f3:fe:cb:3f:96:93:eb:1c:62:af:d3:a5:
50:7e:df:ff:bc:2b:83:49:36:c6:25:6e:7d:05:41:22:74:1c:
19:33:7c:69:bf:64:9f:e9:fa:9b:fc:e2:5c:0f:3a:e2:53:80:
12:e3:f5:23:43:e5:65:8b:2a:c0:e2:25:19:f4:49:6b:dd:ee:
9c:e6:fe:68:17:42:cf:31:fa:32:f4:ef:f1:be:7e:bf:3f:b3:
c5:15:c4:0b:dd:f7:d4:a4:e2:0f:33:25:6b:cd:5a:f2:ed:c4:
27:90:46:f8:c1:fa:27:68:e3:88:14:f2:f7:8c:a9:65:a2:a5:
dd:e6:c1:5e:04:ef:07:45:fe:64:2b:a2:46:b6:f3:f8:c7:70:
fc:a7:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net