Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: NHilGNWfIl40PVxPE5llmP2lQQ11ODkRoKhD3cXcI0w=
Subject key identifier: E4:CC:71:AD:43:04:26:39:08:EE:75:6F:AE:34:9E:E3:24:D6:AA:0F
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 01962F06D97FFB0CF5FCD5D8E03A6BA5ACD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 0C9E
Signing time: Sun 13 Apr 2025 12:01:40 +0000
Manifest this update: Sun 13 Apr 2025 12:01:40 +0000
Manifest next update: Mon 14 Apr 2025 12:01:40 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: nD7YE2TZy9xz1ZF9nmoo4uRakJ2h/XZXo0v9e8eumrQ=)
2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:d9:7f:fb:0c:f5:fc:d5:d8:e0:3a:6b:a5:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Apr 13 12:01:40 2025 GMT
Not After : Apr 14 12:01:40 2025 GMT
Subject: CN=e4cc71ad4304263908ee756fae349ee324d6aa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:4a:d0:a1:73:0e:82:64:4d:a0:9e:39:99:
fc:40:10:61:f0:0f:dd:6c:57:36:32:da:59:45:a4:
69:73:49:9e:67:04:41:f1:45:11:a7:8f:f0:f6:10:
cf:70:fe:93:55:65:74:18:97:c3:c8:93:59:59:fe:
a5:05:0e:ca:80:6c:8d:20:fd:58:9f:cb:a0:91:8b:
9d:db:d3:b6:7a:24:a2:3e:39:1f:0e:4d:ef:a9:c7:
b4:cf:a1:52:bd:15:d9:9e:24:17:89:de:ac:5f:bc:
79:fa:dd:02:49:02:62:07:92:3e:79:13:65:c7:21:
9e:d5:c1:85:3c:b4:e7:af:d9:c3:96:13:17:64:65:
44:b3:6a:b0:fd:53:f9:73:10:81:40:b5:e9:59:fd:
7e:c8:78:5f:c6:c1:26:9e:83:d9:05:c4:dd:ad:50:
93:b2:c0:ba:a7:9a:b6:7b:66:e4:0e:38:70:cd:9a:
5d:c5:48:b2:30:38:eb:ba:cb:8b:e5:ee:8a:13:11:
a9:ab:a3:91:ca:33:69:a6:df:4c:8c:42:a1:f8:1a:
f0:8c:0d:54:8e:8b:f4:0b:22:e2:23:96:57:36:34:
37:73:70:6a:04:eb:e3:13:68:fd:4b:2e:d6:ba:41:
ff:da:4f:95:27:a8:85:ab:91:aa:96:52:49:53:69:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:71:AD:43:04:26:39:08:EE:75:6F:AE:34:9E:E3:24:D6:AA:0F
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:72:00:d5:af:0f:0d:ed:ac:e7:ed:f2:46:22:a1:33:e3:
56:72:3c:cc:d0:9c:be:a4:5a:8b:9b:f5:60:fe:ca:04:e3:ac:
de:7e:da:c4:5e:11:6e:62:91:ed:10:1e:d8:92:e8:1c:2e:16:
25:9a:71:37:44:71:aa:bd:20:2d:87:6e:71:3a:a3:e8:3f:b3:
1b:9c:15:b7:4a:34:2d:3a:bb:05:25:d7:2e:cc:47:c6:f2:98:
11:7f:9d:47:c9:fe:42:ad:1c:a5:fa:69:0d:22:81:7e:94:e1:
f8:a7:ff:06:59:29:e1:e0:41:7b:34:81:e3:22:39:a2:c3:99:
5e:75:39:0c:0b:a0:fe:0c:94:ac:60:9c:a0:d8:2d:33:f7:47:
d0:06:37:c1:93:bd:d9:5b:2f:37:c5:23:f0:c4:55:95:60:34:
86:58:9d:26:89:cd:6f:89:ff:cc:79:30:d9:a5:1d:6e:d3:f1:
f0:8c:fb:e2:ea:73:11:b5:2c:91:a3:8d:35:16:2a:d4:35:86:
4e:29:50:8c:95:f1:32:d7:7c:2a:41:25:b5:ab:6e:5e:17:1c:
54:a1:60:ac:61:e9:54:39:42:b8:a2:54:09:9c:23:53:00:54:
5d:c7:30:cc:b8:2e:e2:2c:74:8e:35:79:6e:a0:04:8d:0a:95:
77:a0:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net