Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: 19s0zwcSiXs8ip8WuSVWR0RQ8RptRATaQe4YHhP6ssA=
Subject key identifier: CA:7A:8F:91:9E:98:55:98:8D:73:BE:48:7A:8D:CB:9A:FD:6B:85:04
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 01962F07153EC8DC6A566F0D900428D32C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 12:01:55 +0000
Manifest this update: Sun 13 Apr 2025 12:01:55 +0000
Manifest next update: Mon 14 Apr 2025 12:01:55 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: BOQZrwNKyjzvK16aaUKAzSmPSNu8zimTQ/EmUd0wcns=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:15:3e:c8:dc:6a:56:6f:0d:90:04:28:d3:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Apr 13 12:01:55 2025 GMT
Not After : Apr 14 12:01:55 2025 GMT
Subject: CN=ca7a8f919e9855988d73be487a8dcb9afd6b8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:08:ec:fd:dc:19:e4:93:06:09:40:49:c6:
b2:69:e5:8e:6f:80:89:b1:98:2c:2c:1e:05:04:c5:
eb:16:07:74:de:3b:ee:29:5e:d0:c7:8d:3e:03:99:
db:4a:3c:63:e6:43:90:1e:e3:ce:41:2e:a8:cc:72:
88:1d:f4:3b:78:1e:bc:47:05:86:1d:46:c5:b9:03:
c5:b4:6f:1e:2d:85:23:b6:dc:89:18:6a:69:83:ed:
5c:ad:64:05:e3:60:77:bf:09:b0:b4:0b:8e:b1:67:
6e:9a:7e:47:7e:ae:ef:a2:86:72:f2:c6:59:6f:75:
ce:ed:5b:f0:00:ee:2f:6d:17:7f:1d:29:1d:12:25:
3a:7e:0a:d0:93:be:40:d1:c2:10:61:69:db:d5:b4:
90:4f:2d:13:7f:13:fd:8c:91:ea:5e:e2:0c:04:2c:
11:81:8c:80:cf:10:92:1b:f2:2d:5a:a4:25:ca:03:
bf:b9:9c:61:cc:de:37:e6:a2:f4:d7:95:89:b0:14:
88:10:9d:ba:e4:5a:8a:67:90:61:9c:1c:7f:a8:7c:
d5:65:b3:a4:f4:22:92:cf:77:bb:eb:53:89:01:dc:
62:5b:03:c7:aa:1d:b4:fa:05:18:4d:f1:3d:85:46:
ac:0c:1e:8c:0b:f3:c9:19:83:76:e5:99:05:b0:87:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:8F:91:9E:98:55:98:8D:73:BE:48:7A:8D:CB:9A:FD:6B:85:04
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:26:d0:0b:2d:fd:b3:3e:4e:ae:3d:e3:fe:1f:56:2b:4e:35:
f0:98:4f:8f:32:ff:3b:ba:0b:9a:37:1f:db:95:8f:b6:68:de:
9c:0a:8c:1a:c6:cd:07:27:53:45:8b:aa:80:62:35:ed:09:32:
eb:ed:c4:e0:64:3a:84:b8:2b:82:b0:31:9a:05:22:39:54:9c:
af:bd:28:5e:13:70:31:13:e8:d1:5f:d9:7b:51:a0:21:91:f1:
70:f9:47:37:3f:d7:39:b4:05:95:4d:08:c6:2e:e6:84:28:e0:
35:d9:f3:d1:ba:17:21:e1:03:6c:dc:2c:43:61:a0:6a:40:d0:
b5:ae:81:13:70:f7:15:01:77:51:19:fb:cc:a0:a0:32:5d:8f:
f9:11:a5:b9:f7:06:06:99:88:51:01:33:46:7d:e6:28:76:af:
bc:c4:04:19:01:f6:8d:ff:c2:b3:52:3f:99:75:58:89:c2:a8:
3b:59:41:83:75:a2:b3:2b:aa:07:0e:24:e2:63:f3:32:c5:b6:
de:4b:98:b7:5f:80:59:26:7e:19:08:f7:de:cc:69:4b:33:99:
b8:50:fb:0f:44:38:87:d8:2b:f5:80:9f:a4:fe:32:c5:4c:60:
4c:84:6b:b9:66:4a:67:e8:4f:26:02:ff:50:e6:c5:da:f1:a7:
91:8f:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net