Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: ZPTjcdzzNj5GgAxwy9b4AedzxJQkNIThkTvjwNytmdQ=
Subject key identifier: 29:F7:B1:B0:33:31:21:B6:06:77:CC:A6:EC:88:86:37:EE:67:BC:85
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01962DF4076B97D5F29BDEAFFE0F1937ABE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 07:01:29 +0000
Manifest this update: Sun 13 Apr 2025 07:01:29 +0000
Manifest next update: Mon 14 Apr 2025 07:01:29 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: EHLDzDxoX7i9YSj0K2sC6RWUhL1r3kCNouQSWpaRe8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:07:6b:97:d5:f2:9b:de:af:fe:0f:19:37:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Apr 13 07:01:29 2025 GMT
Not After : Apr 14 07:01:29 2025 GMT
Subject: CN=29f7b1b0333121b60677cca6ec888637ee67bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:ea:52:a0:46:9e:33:e2:ac:98:d9:21:13:
98:1b:fa:d8:31:61:26:31:85:9e:6f:94:de:19:b7:
15:1b:29:7c:00:38:5a:bd:ec:22:1a:a3:c8:de:8f:
88:f3:f5:cf:69:d3:96:4b:e7:52:e8:ec:87:8c:07:
d1:a5:aa:07:46:92:ff:ec:64:73:11:92:cc:8f:60:
fd:8d:15:0d:ba:3e:2f:61:0e:d8:d8:61:0e:c9:e8:
ef:78:4a:b2:63:b3:f1:76:3d:a7:87:ae:1b:f7:97:
52:d5:fd:84:68:af:cf:9c:0e:2c:58:71:22:67:14:
71:0e:42:8d:f1:86:61:5c:1e:e1:d4:bb:f1:5a:26:
c7:88:50:c1:53:1b:88:8e:7b:78:e5:c1:94:97:b8:
13:2b:0e:ca:41:9a:bd:fc:2e:b3:0c:ee:48:5c:bc:
5a:6f:b8:2b:88:1f:a8:d3:c0:86:16:59:68:7a:fc:
72:86:57:ca:f0:f8:8b:69:27:82:5d:7e:00:12:82:
a2:1b:46:3b:5a:e5:a0:77:6c:48:18:0e:ff:76:16:
5f:9f:19:ef:c4:33:8b:20:5e:d3:25:7a:ea:6c:ff:
85:40:ba:44:64:c5:8b:7f:98:7d:6c:d0:03:5c:d3:
9e:45:01:56:41:cc:6e:73:75:d1:a8:33:80:4e:ab:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:B1:B0:33:31:21:B6:06:77:CC:A6:EC:88:86:37:EE:67:BC:85
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:42:16:72:bf:90:76:c3:07:88:8b:57:e2:82:53:6c:d5:e2:
db:9a:9d:c8:fe:32:07:e3:cb:ec:27:01:19:55:5e:49:cf:b2:
67:17:ff:bf:a6:f4:f3:2e:74:6b:e8:21:77:ec:97:d0:90:5a:
c6:8d:0b:a6:00:4d:4e:35:d8:44:ee:d0:a0:40:dd:ba:12:19:
1a:f0:94:d6:62:1d:40:a3:25:cc:f8:f5:c0:ce:c3:8c:fb:a5:
f4:66:49:43:70:0b:15:32:d7:22:99:b7:81:f0:e9:6b:32:cf:
4a:a1:68:7c:07:c7:b2:12:15:b8:c8:08:b7:43:63:a0:89:af:
9b:23:80:7b:60:69:1e:ec:64:ee:49:04:6b:a8:55:b5:46:21:
53:45:2d:84:fe:25:84:c8:c8:26:2c:00:39:58:5a:67:ad:c5:
ea:1f:92:f9:32:23:ac:e3:ad:4c:90:9d:43:35:71:3e:85:d4:
43:62:61:bd:a1:b1:70:b6:6f:a3:3e:f9:81:1c:0b:1a:20:82:
2f:30:f7:cf:a1:71:6b:81:fc:02:e0:9b:62:37:ab:1c:19:74:
4e:4c:f9:9b:01:6d:b2:a7:ca:da:56:88:54:8f:39:b6:ff:b1:
18:01:14:63:03:7c:73:4a:0a:cb:a5:7d:27:d8:d7:4e:ef:db:
a9:eb:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net