Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: C/1fxNjGNCw2lWFZzCAilImSSltVtwT3dNvt5a1WbI4=
Subject key identifier: 22:F5:53:51:96:1A:A2:02:59:69:31:67:C2:E0:AD:3A:D5:07:A6:3D
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 01962ECFA77C89BF9C2F404824BDBC8B9E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 4A
Signing time: Sun 13 Apr 2025 11:01:22 +0000
Manifest this update: Sun 13 Apr 2025 11:01:22 +0000
Manifest next update: Mon 14 Apr 2025 11:01:22 +0000
Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=)
2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: +BcVue7IMMWTIWRFHral9ENyhdsgHFqgAxKeBe9zMok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:a7:7c:89:bf:9c:2f:40:48:24:bd:bc:8b:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Apr 13 11:01:22 2025 GMT
Not After : Apr 14 11:01:22 2025 GMT
Subject: CN=22f55351961aa20259693167c2e0ad3ad507a63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:06:18:56:c1:47:97:31:e3:d7:ab:5d:6d:
eb:0e:ea:d0:72:67:98:cf:6e:79:b6:d7:c8:52:07:
ed:32:60:5c:c2:74:23:4a:7e:d2:67:2f:1c:62:86:
8b:0f:a0:2e:ca:40:4a:0a:c5:9e:1b:15:34:0b:ed:
48:9c:22:e3:e5:2c:6e:89:9d:f1:bd:34:b5:aa:d9:
cd:07:7b:ad:61:d0:86:a9:9a:7e:a0:3f:5c:be:72:
8e:eb:e7:42:83:7b:90:52:95:d0:64:38:9a:b0:7f:
78:9e:15:0b:0c:f6:f5:dc:0c:e5:4c:54:7c:ea:09:
be:fb:5f:ce:28:48:6c:3b:f9:73:7d:52:63:84:d0:
82:44:53:c4:87:66:6d:77:9f:bf:ee:34:d7:40:fe:
28:60:80:a4:89:9b:56:eb:56:6a:b0:53:b9:ea:bf:
e6:2c:8f:05:26:aa:89:fc:04:d3:f7:05:8d:71:04:
4f:4c:c5:78:43:e8:84:61:8c:23:ed:c8:b4:6e:39:
6f:3e:73:52:4e:34:17:81:74:66:0b:38:01:68:f0:
af:5d:06:e3:d8:57:63:4e:ab:2f:0f:fa:3a:97:3e:
21:e9:ac:e3:6b:79:c1:4a:ed:88:15:57:02:63:ec:
74:02:fd:4a:77:10:19:be:65:d3:34:c4:0b:4e:d4:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:53:51:96:1A:A2:02:59:69:31:67:C2:E0:AD:3A:D5:07:A6:3D
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:4c:9e:72:a2:8b:b0:63:21:c1:19:1f:25:58:c4:1b:a9:
3c:57:4a:61:64:5e:65:75:3c:d3:a8:8c:c7:0f:b2:61:d2:0b:
4a:67:cc:87:35:26:fd:3f:6a:3f:3c:dc:32:e0:2d:c0:68:df:
79:72:5a:71:60:b1:c1:7f:47:d5:7d:2a:20:9d:c2:56:ff:44:
9e:8d:fe:9a:c6:96:08:bc:95:0d:f1:09:17:5b:23:38:83:0a:
f3:93:d4:7e:ac:48:ef:2c:86:fd:27:56:29:a5:5f:fe:1d:db:
39:44:d3:a7:47:87:62:3b:5c:0f:1b:87:e8:5b:c2:35:e7:af:
8c:29:83:7a:78:96:8c:00:36:a8:7c:b8:a8:5f:64:d1:39:0f:
25:d1:94:ef:bf:d8:84:56:df:ec:43:4d:a0:e7:dc:ee:e9:cd:
6f:28:55:41:d8:2d:08:7d:0b:37:80:d1:fd:ed:f3:07:1c:80:
75:1e:c3:e9:25:31:f8:2b:4e:12:a4:c8:b6:6b:fd:0b:50:bd:
67:98:a8:cc:14:ab:2b:57:41:a0:f9:b7:49:8b:1c:b6:7a:6f:
6f:0a:00:fa:b0:eb:56:94:3b:23:c4:b0:47:5b:fe:87:31:12:
bd:86:e9:a8:3a:d0:6d:cf:9a:a5:c4:9b:db:9a:ff:c0:59:6b:
9d:31:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net