Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: 9sKH6ZYSZBKiM0zM/9I4AVnN+72HbNrGj8U8ySWiuWw=
Subject key identifier: A2:38:70:FD:77:70:EF:55:19:D6:F2:80:61:3A:8C:A0:6A:E4:4F:0F
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 01962F0655D10EDA1DEF44BBFDCD4CD921D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 140B
Signing time: Sun 13 Apr 2025 12:01:06 +0000
Manifest this update: Sun 13 Apr 2025 12:01:06 +0000
Manifest next update: Mon 14 Apr 2025 12:01:06 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: E3LvnoCdnZSTsTKqp/Q+Qj5ju89QTlQbW0ZCmuLhY+w=)
2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:55:d1:0e:da:1d:ef:44:bb:fd:cd:4c:d9:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Apr 13 12:01:06 2025 GMT
Not After : Apr 14 12:01:06 2025 GMT
Subject: CN=a23870fd7770ef5519d6f280613a8ca06ae44f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:94:73:7c:29:75:02:ef:21:fa:48:c1:f4:
9b:4b:db:db:c8:bf:2c:11:c6:f4:12:30:48:32:ce:
4e:cb:44:f1:28:db:ca:6b:21:8b:d2:e7:9a:29:67:
c9:05:9a:37:ac:a9:a5:f9:9a:68:99:17:25:f0:0d:
6a:c5:c1:85:7a:c4:63:3a:59:d0:c2:77:a8:fb:44:
e6:9c:2b:f7:d8:24:9b:00:a7:84:81:fd:0e:94:0c:
e7:d7:68:14:bc:06:5d:18:28:82:27:7b:d1:df:45:
a4:6a:4c:29:f2:21:5f:e6:29:b5:f2:23:82:be:90:
cc:4e:ff:90:59:ff:76:93:e3:e3:44:e9:df:9e:8c:
01:14:fb:f0:2d:d1:3b:d7:78:eb:43:b1:3f:3b:cb:
06:7e:b2:da:78:ba:9c:8f:e4:e5:1b:94:36:58:cf:
6f:12:37:e2:fe:96:d9:66:e5:68:68:01:25:db:41:
e6:14:e5:13:ff:51:e8:5c:79:3b:17:94:9b:da:7f:
c4:12:ed:8b:19:1d:b7:d4:1d:53:33:be:31:bc:ba:
da:ef:7f:4c:92:09:40:c8:d1:0e:15:68:2b:67:cb:
f3:10:cd:54:2e:bf:29:5d:b6:46:47:60:02:20:ed:
b0:62:6b:a5:ae:26:72:68:1c:ad:8a:b5:c0:10:07:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:70:FD:77:70:EF:55:19:D6:F2:80:61:3A:8C:A0:6A:E4:4F:0F
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:a9:ce:01:65:c9:e7:96:28:90:66:23:7d:c8:36:9d:08:
32:ee:62:65:9a:62:db:d7:29:ee:05:1e:3d:0f:b0:67:01:be:
99:4b:f9:69:c6:9e:86:b3:d0:79:ec:b9:2d:b2:92:bd:5d:90:
d5:32:11:71:cd:12:fe:13:04:1e:ea:97:0d:67:09:ed:11:ef:
a6:3a:d5:c4:ef:df:a7:f5:9d:55:b3:0b:30:f4:e6:e6:f8:c8:
45:f2:72:cb:d4:27:40:c8:c9:6a:f8:ef:f1:06:91:f2:ac:24:
70:3c:fa:e7:4e:09:80:59:9d:56:b0:e5:03:82:88:9e:c8:98:
e7:44:54:b7:78:d5:c3:70:ca:7b:2f:8a:62:6a:fe:09:2b:bf:
83:0b:36:76:d4:05:40:3c:d7:73:7b:02:89:76:6b:19:c0:ef:
82:82:ba:a0:26:0a:fb:3f:d9:59:28:56:76:ca:f8:e7:09:43:
49:e3:f7:b2:fb:88:7c:e9:5d:3a:97:17:79:eb:9e:94:12:b1:
27:2e:ad:4a:64:f0:76:d8:c2:85:89:d3:e3:e3:4c:eb:43:69:
10:1e:8d:b5:43:cd:76:e5:be:18:ac:68:fa:32:e6:f5:90:b5:
4d:09:78:a2:6c:28:36:f7:cc:4e:e4:5b:c8:5e:36:4d:89:38:
ef:f5:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net