Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: eba20478rHU9sqCRfeuZkq37VNHAPPQ8tgUXdvkjFDg=
Subject key identifier: AC:FD:35:92:48:4F:16:78:AA:29:16:FF:A3:C5:0F:6E:55:EE:38:5D
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 01962E9885961559E323DC62FE01B8FBA791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0DC6
Signing time: Sun 13 Apr 2025 10:01:09 +0000
Manifest this update: Sun 13 Apr 2025 10:01:09 +0000
Manifest next update: Mon 14 Apr 2025 10:01:09 +0000
Files and hashes: 1: AHAEcpQC5M7HA3lpCyAUPO_2dfI.roa (hash: QyNnsqD7JTUcYd/+hLfrA6pGFz4v5bZK87dfCrHLd18=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: A3m4SSdpqyKi8+5m9DR2t8Ncnkthx6EVR2cCTque+xM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:85:96:15:59:e3:23:dc:62:fe:01:b8:fb:a7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Apr 13 10:01:09 2025 GMT
Not After : Apr 14 10:01:09 2025 GMT
Subject: CN=acfd3592484f1678aa2916ffa3c50f6e55ee385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:bd:28:39:eb:fe:c2:78:42:6d:10:37:14:
7f:10:06:36:a7:4f:8b:f6:e7:07:e5:ec:d2:0f:72:
4c:40:0c:eb:b1:5e:b8:f0:58:3e:2e:30:04:c3:dd:
19:49:65:c7:a0:08:22:8a:f5:a9:ad:c8:c4:6a:f6:
d5:fa:b7:e8:36:e6:4f:e4:cf:cc:0b:fc:cd:c6:3f:
22:fa:9d:30:44:d2:f1:4a:9c:42:89:40:49:dd:22:
e7:03:4c:9b:bf:db:fc:c8:2a:e4:e6:bd:9f:04:72:
88:62:1e:67:ac:a4:cd:d1:e3:53:e3:19:ef:1b:e8:
a6:98:1b:7c:cd:dd:c8:7e:18:b0:1b:92:52:3a:27:
e5:51:91:8f:9e:1b:8a:1b:d6:e5:a8:9d:23:43:a6:
e8:5a:70:64:1b:36:73:62:6e:35:97:31:6c:dc:32:
92:a4:1a:41:99:26:cc:c6:24:1f:ee:d1:74:cc:ff:
14:e6:e9:81:4e:6e:72:d8:68:36:b2:c7:ab:4c:42:
cc:c5:40:b3:92:17:09:75:df:d2:89:dc:74:1a:28:
18:78:51:f3:08:44:80:41:9b:7c:95:18:a6:f2:9e:
8a:d6:77:ea:b3:95:d3:fc:fd:64:e9:c8:20:2e:98:
93:32:2f:e5:9d:52:68:ea:1a:0d:d5:31:5e:43:e6:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:35:92:48:4F:16:78:AA:29:16:FF:A3:C5:0F:6E:55:EE:38:5D
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5c:cb:d3:7b:bf:12:d4:96:63:51:27:e2:c7:d0:52:65:ab:
49:ec:9c:d9:ce:b6:c6:65:9c:e6:95:64:1e:cb:bf:c6:c6:d9:
05:fb:b9:43:77:69:1b:c0:c3:2c:a6:c2:1b:9f:bb:41:fb:14:
7a:d3:68:8d:9c:fb:cf:e0:d6:16:f3:5e:27:de:0b:b3:25:e0:
cd:ff:7b:1c:5b:12:cf:f5:b4:a8:53:8f:ad:28:92:68:0a:08:
74:cc:9a:55:0c:09:57:f7:e9:80:e1:13:38:b5:18:d3:19:64:
56:ce:28:20:74:4a:19:69:19:18:d9:66:cc:5d:7f:c2:93:79:
e3:93:9b:13:44:62:05:25:32:7c:31:6e:d7:26:b8:5a:b6:62:
87:60:9e:77:e1:98:e6:4b:08:31:ba:83:4f:15:3b:e0:41:2b:
21:10:db:e1:99:84:0a:3c:f2:aa:01:c1:22:21:2b:75:16:66:
13:d0:0c:35:3c:a6:a0:74:08:87:7c:40:4c:6a:9e:3c:67:6f:
59:e9:f0:95:08:d3:9a:ec:a5:a7:09:8e:4f:c0:05:83:e6:13:
dc:15:76:7c:61:61:fb:14:6a:bd:b9:cc:da:dd:8f:4b:2c:18:
63:0a:c6:dd:cf:03:0f:f8:d2:56:1f:ae:9c:4b:5c:b2:b8:e2:
48:51:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net