
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File: fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier: wprjUwEzu74jyt5h6UQAX8lLEdRLJOPkGE3Lvp+koeI=
Subject key identifier: C5:7F:B2:B1:02:1C:51:F2:02:45:B3:1C:C3:B3:81:61:61:CD:EB:89
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01962DF3A5EB3D3E33A484FE1487C68EF41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 07:01:04 +0000
Manifest this update: Sun 13 Apr 2025 07:01:04 +0000
Manifest next update: Mon 14 Apr 2025 07:01:04 +0000
Files and hashes: 1: 9yjHUYS9Fxw_4dxtmR-3Rxot344.roa (hash: AWQ6glDSqhKNOCwBlnvSM0hvzT6dwIHbQaxbn9xxzkI=)
2: XQ5p_v2P6Gqcwe6mUUsVtaNZ97A.roa (hash: AfJ0RTbLQ6sDHJhxmnbkdCHcxDZgS6nXOmdvB8FlyiA=)
3: Y5V8eP_AgzuwiFE2HrYGmskh04c.roa (hash: SlwWJVVTaYw9Z8mUHoA0C0IZ8H875se5L3mE0H1vEwY=)
4: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: jMpn4w+pQ9EvEuuecVJ3/C0cE+u95fJFSHt+mYHdm9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:a5:eb:3d:3e:33:a4:84:fe:14:87:c6:8e:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Apr 13 07:01:04 2025 GMT
Not After : Apr 14 07:01:04 2025 GMT
Subject: CN=c57fb2b1021c51f20245b31cc3b3816161cdeb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:37:53:de:83:91:66:95:b3:d6:82:e3:ae:
a6:9a:35:25:d2:98:f6:36:a2:7c:b6:55:f8:a0:8c:
40:28:b9:1a:86:52:26:c0:8b:84:ee:ec:6c:cd:67:
d4:fd:d7:5d:2c:36:96:03:e7:06:9c:10:db:65:1c:
89:78:44:0a:83:f1:e8:65:7f:4c:34:e0:d0:ab:94:
d6:28:4c:f4:fd:ea:1f:46:a6:cc:e4:38:0d:21:ce:
4f:50:f3:8c:eb:f4:5a:42:d1:cb:71:7b:77:5c:37:
83:e1:58:f3:25:1a:69:2e:48:c0:4d:3c:c8:a4:be:
9d:56:48:5d:4a:58:04:3e:4a:00:94:cc:c6:26:f5:
6a:26:e2:6f:e9:7d:6c:c0:46:cc:e2:1a:5d:81:e9:
6d:5f:0f:e8:5c:65:1b:fc:01:2c:08:7c:1f:f7:e4:
fc:fd:5c:71:38:73:af:4a:92:7f:42:01:8c:42:62:
ec:90:dd:39:a1:ce:71:69:75:06:e3:9b:98:97:da:
22:2e:48:ad:bc:92:92:80:b4:1d:5c:f2:5a:c1:d7:
f6:c1:c0:e2:7d:23:82:a7:f3:fa:a9:a9:9b:b4:c2:
26:d7:22:60:a3:4f:32:c6:5e:50:20:0e:48:f7:9e:
8e:8c:9a:7b:2d:5f:df:a7:fa:09:97:cc:72:a5:35:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:B2:B1:02:1C:51:F2:02:45:B3:1C:C3:B3:81:61:61:CD:EB:89
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:78:af:4f:72:9b:ae:4d:65:11:df:76:6f:cf:65:51:ca:
ec:da:0b:56:11:cf:5e:4d:64:89:bc:4a:89:aa:a1:95:e5:84:
2f:0f:e2:b8:68:55:87:b9:f8:5f:9a:78:c9:6c:ce:d2:12:9b:
69:e5:72:f7:c4:ad:74:f1:d7:9c:20:49:c1:ca:dd:62:ac:bb:
d9:2a:4a:f3:7a:03:45:cf:92:07:07:80:52:3f:11:fa:e0:26:
6d:05:9d:73:08:6b:7e:3d:d4:4b:01:01:60:22:34:e7:81:b9:
b5:e0:40:fd:89:ba:cc:60:46:66:b6:ee:39:1b:4e:88:f5:05:
18:33:49:b4:f2:9e:a5:38:06:19:1d:16:ea:33:8f:87:59:64:
c8:f4:de:a0:27:88:aa:a2:d5:5e:da:cb:7e:13:13:b5:32:a3:
52:2d:d3:26:61:8a:ef:1f:ec:81:7f:f8:de:8c:e3:06:af:0d:
91:1b:43:4a:2d:bd:f9:12:d5:92:9f:ae:1e:bd:82:36:e9:95:
57:3d:dc:6f:da:35:3b:e7:bd:5a:5b:2a:47:c7:14:03:44:ff:
45:44:70:21:2c:65:9b:e8:1e:e4:23:28:2c:66:11:0e:e6:1c:
a5:27:c4:f7:0f:5b:aa:6f:b8:e8:d2:1c:b3:01:cd:fa:f5:82:
a5:74:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net