
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: l1ibhLHewToMUG9w7Sh34m+YKPfZmZjRbQJIkbJoUG0=
Subject key identifier: 06:9B:EA:F6:34:E6:6E:95:1D:F8:B6:E2:0B:12:A6:92:F3:1C:D0:9F
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 01962F74A83AE2EFE529D194E7733AF8C3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 14:01:36 +0000
Manifest this update: Sun 13 Apr 2025 14:01:36 +0000
Manifest next update: Mon 14 Apr 2025 14:01:36 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: BNTN8v/V1IOc4daGty1GKWefeobpDhnmMBaG8iO8cyk=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:a8:3a:e2:ef:e5:29:d1:94:e7:73:3a:f8:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Apr 13 14:01:36 2025 GMT
Not After : Apr 14 14:01:36 2025 GMT
Subject: CN=069beaf634e66e951df8b6e20b12a692f31cd09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:16:da:29:9c:b4:f2:d8:c5:54:ce:3c:b5:
e3:0a:de:8f:e8:1d:91:2d:fd:e3:17:db:d4:2f:81:
2a:0a:74:9d:3d:9a:1e:65:52:57:71:28:b0:4b:d0:
88:67:a2:06:d4:98:17:67:85:ad:0e:d3:ef:71:c9:
22:8f:b4:f1:05:d3:31:67:a8:98:38:19:45:60:bf:
26:48:5b:04:8b:75:99:17:ff:4f:bd:ed:bb:c4:ef:
96:d3:ad:eb:cd:e6:a2:c9:08:eb:93:b4:be:8d:eb:
52:20:77:26:1d:85:c8:ad:b7:ea:09:dc:af:25:15:
93:88:2b:47:5a:6e:61:d0:e7:57:7f:53:42:8c:d8:
74:51:d5:46:52:40:c0:e6:aa:a9:d8:9f:67:4a:79:
fc:5d:c8:a8:b6:b2:4e:7e:8c:f2:4d:2c:95:37:c7:
8f:94:d7:09:e3:5a:b9:a9:da:06:8b:73:5f:ad:d2:
6e:00:dc:f8:dc:fa:80:ea:39:0e:67:cc:59:eb:08:
03:e0:60:26:ce:50:5b:33:ca:10:05:eb:19:06:f5:
b9:3a:06:1f:bb:fc:9e:0a:c2:cd:65:7c:dc:63:33:
6c:b7:13:f5:bf:f9:b3:47:16:d2:77:b5:fd:6c:73:
90:fe:e7:9a:4d:3d:1b:8d:ad:c0:f4:e4:5b:f6:e0:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9B:EA:F6:34:E6:6E:95:1D:F8:B6:E2:0B:12:A6:92:F3:1C:D0:9F
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:32:0d:0f:5a:f2:02:42:73:a6:f4:bc:91:ec:9a:20:89:51:
36:ba:20:23:88:52:b2:b0:3c:f8:63:3b:a7:f0:5e:00:87:c0:
61:94:13:05:9e:d0:10:9a:cd:f5:a2:0d:e3:e1:0c:db:02:77:
ce:f2:e8:9f:61:e3:0f:43:b7:d9:4f:c0:ea:8c:3f:0b:cc:4a:
b2:48:73:f5:40:99:cd:2e:34:eb:f7:dd:8d:86:c8:9b:ff:6b:
63:e5:c6:c0:c1:1a:f9:68:ea:f2:c3:bb:ff:28:c3:6c:14:ba:
34:1c:a2:45:46:f0:5c:32:7a:eb:70:7b:01:26:1b:b9:6f:89:
20:22:fd:dc:dd:0f:0b:29:28:51:0f:22:44:f6:92:e3:82:7e:
72:53:d9:30:f9:f1:6c:79:b5:ca:f5:7d:0e:6a:de:6f:cd:d7:
67:32:aa:a3:a3:17:f9:5e:cd:f0:df:ff:ae:5c:dc:6a:d2:87:
5b:fb:f6:67:4c:ed:16:2d:a7:4d:8e:7d:a3:48:4f:60:0e:a6:
f9:66:84:8d:7c:5a:f2:ab:a2:84:c6:d0:ac:6b:04:52:13:d0:
f6:7f:61:7f:03:c2:78:ee:8a:e0:40:dd:f3:a9:c8:e0:db:da:
3e:2a:1a:0c:91:16:fd:e2:c2:aa:b5:8a:9a:42:4f:ce:9d:48:
5f:a3:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net