Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier: hmv3HjR4scoP7QSl6e+H3y/hRbECTM4YbopSmRZL14k=
Subject key identifier: 76:9F:0F:F1:B1:6B:27:03:E6:55:3B:AF:6E:54:BD:3D:AB:80:CF:04
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer: /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial: 0195ECB8C396C2C071D9F1FB97FB189F3217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number: 07E6
Signing time: Mon 31 Mar 2025 15:01:26 +0000
Manifest this update: Mon 31 Mar 2025 15:01:26 +0000
Manifest next update: Tue 01 Apr 2025 15:01:26 +0000
Files and hashes: 1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: 67oAQwIOGbWz1Q65e28e7Ab0dGANUQtobSYCvBS0v4g=)
2: bhwBYoazvA5A_Z_cE9R34ToOWGg.roa (hash: sma7MnYwGc+h3WkyXXW6543+L5js/BDpTSkKMtbWDZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:b8:c3:96:c2:c0:71:d9:f1:fb:97:fb:18:9f:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
Validity
Not Before: Mar 31 15:01:26 2025 GMT
Not After : Apr 1 15:01:26 2025 GMT
Subject: CN=769f0ff1b16b2703e6553baf6e54bd3dab80cf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:d4:83:eb:f8:6a:15:6f:5a:50:26:3e:07:
aa:c2:69:4b:55:50:8c:c5:86:68:11:7d:f7:3b:cc:
84:30:ef:57:16:4a:b3:0f:64:cb:cb:fe:3c:13:11:
71:9d:0e:d3:32:28:ee:bf:68:2b:33:32:3b:e8:39:
68:1d:16:f5:01:8f:67:90:52:f9:d4:a5:c7:37:3b:
05:95:12:d8:fe:54:2f:2d:61:7e:da:c6:a8:71:48:
18:4b:72:90:cc:1c:9f:ba:49:7c:01:57:06:d8:3d:
69:27:32:54:a9:66:c9:0a:8c:2f:f9:b9:49:fe:af:
bd:9b:3a:d3:2a:03:0b:22:9b:bf:7b:92:af:c7:56:
ce:f4:44:5b:4f:10:0e:af:6a:23:ab:48:4e:80:15:
87:cc:7b:8b:c8:f8:8f:79:99:33:d2:db:51:36:e5:
ce:38:59:22:94:08:4a:51:4c:cc:6c:5e:23:16:d1:
f6:7e:41:64:d7:c3:7b:82:9e:eb:6d:1c:7b:77:38:
7b:99:79:7e:1c:9d:be:fe:87:a3:23:dd:23:02:07:
b6:4e:a8:d7:8b:19:16:ef:fc:b0:50:e1:fa:b5:23:
f7:5a:ec:77:2d:b1:ac:7a:f2:c3:5f:08:40:1d:bf:
86:8a:80:d4:46:c0:22:a4:8c:7a:73:19:fe:d2:3d:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:0F:F1:B1:6B:27:03:E6:55:3B:AF:6E:54:BD:3D:AB:80:CF:04
X509v3 Authority Key Identifier:
keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:58:cd:4c:8b:c5:df:b6:fb:f1:0b:4b:9c:07:f3:55:10:
02:3b:40:6e:f3:c3:72:80:39:e8:2f:a7:9a:8e:76:47:56:d0:
9c:cf:e1:a5:07:b1:65:f0:6f:6f:75:c7:73:3c:b9:9e:7a:a9:
23:33:6e:af:fe:ae:6f:53:6d:ff:ce:d0:d9:8a:8f:2f:a2:2e:
20:5a:1d:0a:fe:67:09:bc:6b:23:8e:cc:25:e8:6b:46:a1:ad:
23:84:8d:df:90:cb:16:d2:45:45:26:c7:6f:b6:22:5e:8c:ef:
44:2f:0c:d1:cf:9a:24:11:ef:ce:bd:58:c9:3c:fc:08:52:02:
4b:23:b2:21:e9:2d:16:12:41:cf:f9:8b:02:da:f4:10:7e:63:
96:9e:d1:ec:92:ce:c7:95:05:13:55:f3:e6:30:83:41:8e:1b:
1a:93:fd:bd:cc:5d:bd:ef:e9:0b:63:f8:5a:7e:61:89:0a:f7:
6f:fc:eb:a4:00:06:f3:10:2d:d8:8a:04:c2:79:75:de:30:3f:
31:9e:2a:d1:e5:ca:7b:b1:1e:43:d5:c6:9c:a1:7d:fa:17:ba:
7d:35:74:e9:71:5c:b7:93:8c:69:59:55:24:13:66:9a:f5:11:
8d:8e:45:45:bd:53:2b:9c:ae:fd:e6:b8:79:1e:99:2d:1b:06:
55:2b:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:23:58 2025 by rpki-client on console.sobornost.net