Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 6tEtkMF7I4yuqMvIcYEb4m/OPBslpg3ebdA5LsrVL44=
Subject key identifier: 4B:CD:4D:FA:BB:62:A1:2A:2A:DE:22:2A:F7:1E:35:91:93:51:5C:85
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 01962E9952A40CA6040F1121F7B9283D498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 023C
Signing time: Sun 13 Apr 2025 10:02:02 +0000
Manifest this update: Sun 13 Apr 2025 10:02:02 +0000
Manifest next update: Mon 14 Apr 2025 10:02:02 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: RGhR9YOxfFND5hyMdDUW7ShmYnmVRUhdjibTFxkgR74=)
2: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (hash: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:52:a4:0c:a6:04:0f:11:21:f7:b9:28:3d:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Apr 13 10:02:02 2025 GMT
Not After : Apr 14 10:02:02 2025 GMT
Subject: CN=4bcd4dfabb62a12a2ade222af71e359193515c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:4a:4b:f3:63:a8:e9:87:49:e8:b9:b6:c4:
20:08:e0:31:8d:41:87:d2:54:90:97:e2:99:f3:8f:
7b:c9:17:b1:e7:3b:98:8f:36:66:a0:4a:a8:1b:90:
b3:be:39:15:83:80:09:d6:f5:c1:cd:fe:f9:28:9a:
f8:61:dd:94:a7:91:ee:45:d3:50:29:d2:91:60:8e:
51:9b:be:84:18:b8:62:85:cd:87:86:2e:1e:f9:0e:
f3:ca:14:b4:83:e1:e6:85:33:ce:26:2a:00:7b:ff:
fc:f2:7d:49:e6:c7:f7:85:e9:39:5b:b6:ff:28:af:
66:9c:4d:e6:b3:2a:2e:40:84:7b:cc:aa:57:c3:aa:
70:65:72:4e:8a:14:81:1d:71:e4:a5:65:77:c7:ff:
a9:35:5f:28:41:9e:fc:04:64:31:27:b7:aa:89:39:
96:f9:52:8c:42:b8:40:84:cb:e7:bb:54:20:49:d1:
82:0c:a1:9a:e4:1b:ea:9b:a7:2c:d8:6d:ac:96:7a:
ef:79:f8:21:fa:41:e5:b2:2d:83:e3:c9:f3:be:49:
be:35:3a:cd:41:94:3a:58:9e:d3:96:40:f9:1b:fa:
c5:52:d2:5a:45:0e:ef:e4:f7:20:75:dc:14:39:76:
a8:72:2d:0f:a5:e5:f4:2c:cc:6d:fc:d3:7b:71:58:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:4D:FA:BB:62:A1:2A:2A:DE:22:2A:F7:1E:35:91:93:51:5C:85
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:53:6c:dd:c7:c8:19:7d:14:31:3d:9d:be:89:84:4e:0c:
0d:7e:45:20:46:d8:d4:32:f5:a3:1f:b8:0e:e9:71:7e:16:0c:
d0:59:b5:a5:08:74:20:c6:4f:3c:17:2f:01:e0:ab:72:04:88:
8f:e7:48:88:ed:93:23:0c:d3:6d:85:6c:4d:63:05:98:29:53:
6b:04:93:cc:2e:bb:0c:21:1e:ea:ed:1a:bb:d8:6e:90:91:8f:
86:4e:ce:ae:9d:cf:77:59:44:5b:64:f8:49:4c:6f:ae:d6:24:
72:68:5f:ba:d2:11:d2:17:cc:6f:93:82:ad:1a:e7:d4:08:69:
57:d1:3c:a4:d6:74:e2:a8:41:8e:57:d7:4a:e8:27:97:c5:09:
fb:80:fc:d8:19:f3:78:13:0b:80:bd:7d:9b:b9:39:75:11:b7:
0a:16:f0:67:1d:37:99:b7:3e:fd:77:b7:c7:db:a0:07:6d:53:
d2:e8:68:74:8f:09:49:e0:fb:6e:b3:4c:df:82:f6:ed:3a:11:
4f:95:9a:59:45:4c:de:b2:f4:71:59:4f:b8:80:73:53:d3:6e:
2d:a0:b4:1f:bb:eb:49:a4:89:b2:05:12:17:98:09:4a:32:0e:
19:b6:fa:45:89:28:13:b5:01:e1:c8:f2:7c:cc:51:e6:89:af:
4d:e9:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net