Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: E6eUEWLMjfcgnD8CVTUtPcZJSMPTTjvKHilqbb3OsU4=
Subject key identifier: 9F:C4:D1:39:62:AE:79:6A:D6:C0:09:8B:66:4D:01:DC:2E:FB:98:26
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01962F067AA32C6B744E937B07D4BF95EF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 12:01:15 +0000
Manifest this update: Sun 13 Apr 2025 12:01:15 +0000
Manifest next update: Mon 14 Apr 2025 12:01:15 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: eypMRDzJ0yYREwa3rek3XT2nT+E5qEalaGAJ0FH5Abw=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:7a:a3:2c:6b:74:4e:93:7b:07:d4:bf:95:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Apr 13 12:01:15 2025 GMT
Not After : Apr 14 12:01:15 2025 GMT
Subject: CN=9fc4d13962ae796ad6c0098b664d01dc2efb9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:0f:82:49:6d:50:2a:c1:f0:4c:03:cb:95:
10:d0:94:49:8d:89:03:0f:c2:60:b3:0e:04:2e:5e:
d7:fb:d2:c8:e1:de:5c:a0:e6:72:66:9e:a7:82:c4:
21:f7:e9:7d:b9:6c:fd:a9:de:df:9a:83:44:3e:51:
2e:5d:22:dc:30:75:52:aa:e7:86:bd:97:39:e9:77:
67:38:23:3f:cb:ce:25:68:db:4e:d9:c2:68:4c:e0:
dd:1e:ef:58:60:6b:21:27:87:43:dd:57:d5:85:99:
fc:3a:51:e8:6c:8b:aa:e4:78:d6:e5:7c:58:f5:b7:
4a:2d:6e:4f:b4:7d:52:83:e2:ad:26:03:de:f2:b6:
5f:e5:21:67:8a:e3:64:7d:91:f3:d4:f7:4b:cb:38:
31:f6:47:d4:57:1f:22:9a:8f:c3:36:65:cd:27:09:
0e:1c:0c:91:b0:66:04:3d:b1:36:2b:b9:d0:ea:f3:
be:7e:39:fd:18:f5:7c:68:c3:c7:e9:80:1e:08:d8:
f6:17:74:38:58:92:1c:02:8d:1a:9f:94:b0:65:86:
02:48:55:2e:f2:54:c6:5d:be:43:2a:13:cc:85:6b:
23:8f:91:fe:98:26:07:75:ae:d8:d0:91:a1:57:8f:
e6:91:ca:f7:fd:1b:b5:d5:9e:41:e4:7f:92:f1:cf:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:D1:39:62:AE:79:6A:D6:C0:09:8B:66:4D:01:DC:2E:FB:98:26
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d2:e8:65:05:c3:68:dd:5d:23:ab:48:67:b3:8c:7e:d8:07:
c2:40:c4:a5:1d:ee:fa:92:16:4d:f3:d0:50:ee:36:64:7d:cd:
3a:9b:d6:23:a2:5f:b1:e0:fc:99:0b:1c:db:b4:8d:6e:d2:96:
53:ba:8b:b4:57:7b:e6:3f:f1:99:24:8b:2e:cf:57:54:0d:79:
cf:18:ca:ac:4f:9e:c7:e7:7b:4d:12:f1:23:45:5f:eb:85:10:
b4:09:fe:9a:23:be:4d:b8:eb:5a:51:d5:06:0c:34:e1:7c:67:
c2:ab:91:d2:b3:2c:ec:5b:54:f8:2a:f7:20:05:fc:7b:eb:86:
bc:9e:2f:f6:83:83:14:21:a6:be:4c:2b:01:fc:c9:90:fa:7b:
bf:4e:bc:93:c9:0f:1c:1e:68:82:d4:dc:13:c8:e3:41:32:7e:
e9:b0:76:9e:df:12:90:b6:99:84:a6:52:76:63:29:4e:42:77:
db:fa:a3:9a:e4:cb:cd:c9:54:44:59:29:2a:1a:7b:be:1d:66:
53:1f:37:f5:14:95:30:bb:e5:07:20:4c:b1:8f:1d:a5:57:e5:
e5:84:9b:68:a9:f2:89:49:90:3e:44:49:60:65:0c:37:5a:76:
7e:35:59:ef:36:21:44:0d:b1:c5:74:7c:b8:9c:48:78:26:0d:
da:fc:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net