Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: eKtmk2YQwXPkmB5/frTkhfQ/z4Zvh4qkInRNS2qaUjU=
Subject key identifier: 64:57:1C:50:07:FC:15:54:E4:8A:34:05:52:D1:6D:83:E8:41:84:44
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 01962F744458AD23F3D8A29B5FA673B5294F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 14:01:10 +0000
Manifest this update: Sun 13 Apr 2025 14:01:10 +0000
Manifest next update: Mon 14 Apr 2025 14:01:10 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: Yg5WDV1jsHq6NeSb/S4zFqTVIgKOOzNJ37dVlMyyRy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:44:58:ad:23:f3:d8:a2:9b:5f:a6:73:b5:29:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Apr 13 14:01:10 2025 GMT
Not After : Apr 14 14:01:10 2025 GMT
Subject: CN=64571c5007fc1554e48a340552d16d83e8418444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:86:de:33:73:0e:7d:77:e5:8a:01:db:ba:
e8:4b:e9:36:e5:fd:09:46:c1:0f:5d:46:b5:0a:36:
ef:94:b5:4c:10:a4:46:c8:e5:06:41:69:c3:a7:c7:
3d:36:04:13:df:df:e5:b2:d6:26:ef:ef:da:02:b6:
4e:48:0e:5b:23:ad:e9:04:95:54:bc:f5:9d:d8:0d:
2b:7b:f9:39:0a:cf:fb:27:22:1e:a9:af:31:19:64:
9a:c0:9e:cd:02:39:62:00:39:79:c2:b2:cb:0b:1a:
32:57:cc:7b:1b:46:bf:f9:23:bd:36:13:a8:fd:07:
8a:fc:44:18:01:a7:78:b1:cb:b8:db:98:6f:c5:4d:
f0:07:d1:27:7e:e8:77:72:94:55:04:f3:1b:73:22:
48:0f:94:5e:be:d1:4c:91:9e:63:5b:17:4f:91:3c:
39:3f:aa:ea:bf:78:27:47:20:c5:68:06:04:6c:2e:
29:23:e5:96:a3:3c:9d:27:7e:60:d6:75:57:26:0e:
07:61:a7:3f:a6:04:a5:4b:17:ab:ea:03:75:5d:8a:
a4:a9:f2:c5:00:e5:c9:ff:d8:ea:8a:f1:f0:0f:84:
16:09:3f:0b:00:78:56:72:6f:7d:e9:2c:8b:b8:f5:
25:36:82:4d:9c:8b:da:a6:95:54:a6:39:d1:95:fe:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:1C:50:07:FC:15:54:E4:8A:34:05:52:D1:6D:83:E8:41:84:44
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:49:02:48:89:5e:bd:1d:13:0f:7e:cd:de:70:12:e3:1f:
78:b1:34:53:1c:a6:2c:a9:02:3a:67:c9:a7:09:8b:0f:fa:1b:
4f:f9:b3:67:e1:60:0f:5e:c7:bb:3d:bd:b9:4c:63:79:a6:1f:
93:40:4e:1a:85:12:9d:cd:09:31:e2:40:31:d9:40:3b:7a:97:
02:01:dc:ca:c2:0d:86:fb:5d:26:c0:f8:36:49:d8:74:cf:13:
b2:35:c3:b8:96:10:62:0f:10:7a:8d:42:63:c8:6a:31:99:1c:
6d:ff:23:da:3d:d3:7b:a5:44:6b:89:7d:2a:7b:64:ae:29:20:
c1:08:6f:80:1c:34:47:52:3a:ab:c5:1e:1a:07:69:60:7e:97:
eb:c5:7b:b5:ec:3b:4b:6c:47:85:f8:8e:b5:84:a6:9a:15:1f:
03:b2:5c:26:0a:85:92:7d:74:8e:a1:3a:be:64:a3:bd:d4:00:
62:6b:d0:b8:bd:48:28:3e:ff:6c:6c:f8:eb:f6:0e:c3:35:bb:
ab:0b:31:a9:69:d4:0c:aa:75:39:95:2f:0b:07:cb:3c:7c:8d:
5d:8c:ac:b9:81:5f:1e:9a:a3:9c:51:50:42:f8:d2:59:1f:4f:
90:93:06:e8:68:d6:78:9c:c4:ea:49:05:bb:fb:0b:68:f6:a7:
ff:aa:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net