Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: /rrHzzdK6ZqThMPjhPkxb6esbbsB1Pv9zzgfBLNWWzA=
Subject key identifier: E4:DF:46:18:E6:22:72:46:53:AF:35:32:19:AA:61:46:C9:A6:CB:07
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 01962ECFAD72F672D61390081A462A7AEACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 0146
Signing time: Sun 13 Apr 2025 11:01:24 +0000
Manifest this update: Sun 13 Apr 2025 11:01:24 +0000
Manifest next update: Mon 14 Apr 2025 11:01:24 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: koUwDaPo1umD0NKCszgMrbf5SQCqt1rQtJeDPWa2LjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:ad:72:f6:72:d6:13:90:08:1a:46:2a:7a:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Apr 13 11:01:24 2025 GMT
Not After : Apr 14 11:01:24 2025 GMT
Subject: CN=e4df4618e622724653af353219aa6146c9a6cb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:57:d9:aa:31:5c:59:4a:58:4a:8b:c8:c0:
87:00:55:f0:f5:5b:91:0d:3b:6d:c5:0d:35:c8:da:
3b:1d:95:bb:26:fb:dc:ec:bc:9d:b3:7d:03:2f:50:
6b:5e:f7:cc:35:b3:31:64:04:79:dd:b8:2b:2c:61:
54:86:8a:d0:2e:b2:34:a1:83:57:85:c0:83:55:95:
31:b9:83:26:cf:0b:45:33:6a:0e:bb:84:b8:b6:c0:
c8:40:a4:f1:23:85:ac:00:4c:64:91:20:d4:46:6f:
0b:52:ba:64:4d:04:ec:3b:36:7b:e7:96:2d:25:9c:
39:72:83:65:6d:36:2d:5a:a1:1f:34:9b:fe:7a:9e:
6e:6b:c4:a7:d2:a1:ed:48:e9:7b:57:87:b0:fc:05:
c7:34:95:23:ad:5f:51:83:c1:e7:b4:0c:5e:3b:9e:
31:5f:30:06:f0:92:da:d4:83:f0:6d:00:74:8a:ed:
cb:41:2d:c9:a1:b7:e1:cd:cc:7b:ed:bd:d1:71:7f:
fe:cd:e7:63:30:af:c0:9c:b7:d1:d7:b7:e0:27:00:
a5:09:1d:48:a6:3c:f1:b7:9d:e8:3a:c2:02:2a:16:
f8:de:56:1d:7e:1f:b8:13:05:a4:55:c0:54:9f:db:
55:94:1f:a2:d6:99:ea:b4:5a:48:13:74:65:5a:c1:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:46:18:E6:22:72:46:53:AF:35:32:19:AA:61:46:C9:A6:CB:07
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:01:9a:b6:87:e2:92:59:1d:bd:b0:35:34:09:d6:dd:6a:
fc:17:8a:05:8f:81:5f:dc:db:83:67:bf:96:e0:66:2f:24:b4:
42:2c:c0:b1:e7:e2:59:ca:d3:15:1f:89:3f:71:3b:2e:00:01:
95:82:a1:4c:db:eb:c3:08:2c:f0:ce:9c:3d:5e:45:35:29:ef:
5e:45:8d:34:39:45:dd:31:a4:b2:d8:e1:2a:c2:5f:8f:07:18:
a0:3f:b0:2d:ef:12:2e:c1:9a:e7:b9:ca:ce:a1:2f:c2:21:71:
10:05:a6:82:75:ae:af:be:a3:88:de:cb:82:5b:d5:10:1a:d3:
51:5d:a3:b6:bc:a3:55:5e:82:d0:36:4d:e1:b6:3d:13:29:b5:
6d:4f:5f:27:cb:ae:c8:ab:cb:5c:14:4e:ef:c2:53:3e:e9:7e:
50:ed:b1:4b:66:ab:97:c6:8d:fe:bb:e7:bc:47:98:4c:e7:0a:
1d:3e:6d:07:24:b2:f9:d9:3a:5b:c3:c9:61:33:68:17:9a:f4:
24:fe:14:cb:34:b9:e5:d8:57:33:7b:62:bd:d4:ac:ac:66:cd:
e9:03:33:55:03:c7:10:8f:33:d6:55:1e:30:da:28:be:4e:e7:
82:f2:c6:43:ee:59:0a:63:5a:1c:d6:d6:82:34:10:31:8c:f6:
fe:a9:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net