
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: 8M9DsF8pmhQ/CfkpwTMc5bQOz6VcBW27cwWuKuu5sc8=
Subject key identifier: B3:50:D9:D4:CB:54:70:3E:E9:9E:94:9E:88:BF:A7:96:BA:D7:93:9F
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 01962F3DAEF31A7E9BFBC4DEE36DD7CAC8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 086D
Signing time: Sun 13 Apr 2025 13:01:33 +0000
Manifest this update: Sun 13 Apr 2025 13:01:33 +0000
Manifest next update: Mon 14 Apr 2025 13:01:33 +0000
Files and hashes: 1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: DlpQa93XXOKXN8e9msH0DBqJ0lUSB5u9OVy7U/mV8oQ=)
2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:ae:f3:1a:7e:9b:fb:c4:de:e3:6d:d7:ca:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Apr 13 13:01:33 2025 GMT
Not After : Apr 14 13:01:33 2025 GMT
Subject: CN=b350d9d4cb54703ee99e949e88bfa796bad7939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:95:76:a3:3a:37:d7:3a:57:a8:74:f9:94:
83:1f:13:15:49:f1:71:c4:35:d1:27:14:f5:05:6d:
03:0e:72:be:69:cd:d0:20:6e:d1:ce:8d:f8:d0:c5:
e8:41:60:c2:7b:20:01:e5:9d:c1:a9:39:cb:80:4c:
39:9d:4e:1d:28:d5:39:0f:3a:a3:c0:97:b2:5f:fc:
f2:18:95:99:c9:fd:d4:ff:14:7f:08:b8:f6:c0:e0:
e2:f4:41:ef:e1:d2:45:3f:38:07:79:b8:71:90:ea:
df:5a:ec:c1:7c:d0:a1:e8:2d:4a:93:71:a3:89:23:
bc:49:75:bf:70:ab:65:e2:71:44:a0:07:14:0e:6d:
98:09:57:c4:6e:14:0a:c9:87:0a:d9:80:61:7a:4b:
0e:41:1b:18:6a:59:25:2f:6d:23:06:85:55:ea:29:
16:01:f6:65:fd:ff:73:ea:ac:46:f0:c7:57:86:99:
90:d8:b7:54:3e:7c:1f:b4:ac:6c:fa:cd:a2:7b:ad:
a0:d0:5b:c9:7a:ec:f9:75:22:fa:b8:a9:1b:ef:42:
7d:6a:14:73:f1:52:da:0b:34:45:cd:76:ad:c0:c3:
ce:9e:67:5b:16:4d:0d:53:2e:58:b7:55:2a:3e:a1:
07:2b:79:7f:99:3d:88:89:16:88:1a:36:66:e4:85:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:50:D9:D4:CB:54:70:3E:E9:9E:94:9E:88:BF:A7:96:BA:D7:93:9F
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:61:a2:7f:13:3d:6a:cb:6e:ed:e1:17:5b:de:00:4e:32:
ff:99:a8:11:7e:7e:4d:6c:b8:89:9b:75:a7:5f:c9:27:f7:16:
b2:68:a4:1d:b4:44:69:e5:ea:13:10:7b:0e:20:07:87:ea:b1:
c4:96:ed:14:da:40:d1:f0:82:66:16:5c:b4:c3:bd:3b:a9:60:
6c:48:fe:3b:5a:b5:f8:94:69:97:90:5c:d9:8a:d2:81:29:9b:
8d:c3:ba:ba:ad:aa:e2:fc:10:3d:32:b1:a9:c3:e6:cd:54:3e:
90:47:af:97:1c:db:78:e8:53:fc:ff:d3:2a:5a:59:53:16:bf:
f1:fa:a1:dd:7e:d3:fc:f4:9c:17:61:e6:4f:98:7c:ab:24:16:
54:a0:1f:95:da:ee:c4:d0:18:15:69:70:72:ab:02:ef:9e:34:
7f:f1:b4:bf:ac:bc:d4:76:65:cb:da:67:ee:1e:e2:58:ec:e0:
9a:4b:ff:d7:e7:6b:30:b5:25:98:b5:4c:a0:47:b1:73:2e:e0:
e9:41:d0:87:dd:31:89:69:e6:23:ea:62:e3:a6:2f:26:4f:54:
89:e8:f4:2f:90:09:da:db:74:69:d3:3e:d7:4a:48:46:56:b1:
68:6a:dc:36:c5:86:4a:fe:82:3b:14:6c:84:ef:8c:9f:22:ad:
de:6b:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net