Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: d50kfHWZxVEdbSpFs6Mi0d4ticgdLmV/V5ldoRQTItI=
Subject key identifier: 99:DF:42:1F:8C:D8:39:D3:8F:89:F4:9A:06:E1:05:9C:F7:F0:F5:5B
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01962FAB7B79164B3896AB40B8E54FED7F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 02F9
Signing time: Sun 13 Apr 2025 15:01:29 +0000
Manifest this update: Sun 13 Apr 2025 15:01:29 +0000
Manifest next update: Mon 14 Apr 2025 15:01:29 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: 15gtxEfjllL7a5g7OlQWIgYVwkTWVLdmTPbpteHlET4=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:7b:79:16:4b:38:96:ab:40:b8:e5:4f:ed:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Apr 13 15:01:29 2025 GMT
Not After : Apr 14 15:01:29 2025 GMT
Subject: CN=99df421f8cd839d38f89f49a06e1059cf7f0f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:22:3d:fe:72:ed:3f:18:43:36:2c:92:fe:
93:af:0e:a6:9d:e3:08:fd:50:45:24:2c:52:29:46:
58:d4:8b:6d:cc:07:51:d2:58:02:66:47:0f:3e:cf:
ba:59:b6:9d:a5:14:5c:04:54:1a:68:80:0c:19:79:
d0:26:12:63:5d:bd:6d:2c:7c:7a:c8:ee:ca:c1:21:
ff:b8:40:25:01:18:c9:ec:50:92:e7:1f:b6:9e:ae:
1d:d4:85:5c:1b:b7:4d:25:38:15:00:25:2c:77:ad:
c9:fc:52:1e:45:b3:3b:8b:04:ee:29:a6:fa:42:dc:
bc:1a:d0:60:ce:20:9d:a9:0a:9c:f4:de:be:67:9c:
0c:cb:b7:ea:d3:bd:fe:69:f6:2a:1f:c0:ed:0c:04:
9a:18:4b:1a:6b:9b:a9:92:5b:f9:5b:a8:84:dd:80:
b2:43:51:66:5e:c6:cf:00:0a:0b:a8:46:30:17:e3:
65:44:82:27:07:d0:7a:bc:73:e9:56:d5:3e:c7:72:
f5:56:17:99:0b:9a:a0:61:f8:a6:11:9a:1a:ff:1f:
57:9c:d9:39:ed:f8:50:37:63:b6:7a:e8:53:bc:16:
e5:99:94:86:7e:2a:29:b5:bf:a3:a7:7b:f4:9b:7e:
f7:fd:d4:aa:dc:b3:6e:bc:bb:05:f8:ee:10:37:01:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:42:1F:8C:D8:39:D3:8F:89:F4:9A:06:E1:05:9C:F7:F0:F5:5B
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:ce:28:07:57:9d:5d:3b:09:62:fc:d6:a0:8b:a6:d0:5c:
3b:55:e3:3a:02:54:3b:3d:52:50:e5:55:23:db:1a:69:ab:e8:
cf:d8:49:fc:45:a5:cc:38:45:86:ef:61:bb:90:9a:9e:8d:b5:
b7:9d:9e:3f:76:61:57:e1:87:3e:8f:7c:fc:4f:19:09:3f:05:
dd:be:b5:a0:1f:2c:5a:21:11:1e:2c:8d:00:4f:9a:f4:cc:07:
3c:ff:f1:81:47:cb:4a:4d:37:87:8b:ba:70:de:1a:fa:8f:d7:
85:fa:6b:dd:3b:f5:db:1f:1a:6f:aa:42:c0:c9:a1:29:4f:b0:
db:41:77:e7:f3:0f:e2:f6:d4:a9:f2:95:fc:d6:aa:74:f9:52:
4a:b2:3d:99:29:14:82:2e:d9:ad:3d:71:53:e5:47:4a:4d:11:
1e:5e:c8:2d:b0:b5:8b:6f:77:b7:fb:90:43:ea:8e:d1:5d:0e:
f0:1c:28:37:a5:9f:f7:55:f2:ac:73:72:eb:23:6e:96:31:b9:
ea:8f:24:63:14:21:37:94:80:b7:c5:51:65:0f:08:21:13:ad:
0b:7e:1a:72:7b:32:b9:a1:32:3e:59:b4:67:57:57:16:20:2f:
92:14:f2:03:a3:0a:64:62:24:46:fe:6d:3e:84:7f:99:85:c6:
bb:c8:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net