Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: bN0whzWmpdgCjzNG4tKej8QbSQMCkPo7bzudFhll6iQ=
Subject key identifier: CB:3C:58:80:0A:24:A1:A4:74:87:BF:C8:D7:2B:3D:E2:0D:54:1D:4A
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 01962E619100CEE7B0F6D24B14FCEE8352B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0B66
Signing time: Sun 13 Apr 2025 09:01:08 +0000
Manifest this update: Sun 13 Apr 2025 09:01:08 +0000
Manifest next update: Mon 14 Apr 2025 09:01:08 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: U/utCoY5fFok+ds76eVW2xDBnZOHnBC/yeYlA9Cemis=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:91:00:ce:e7:b0:f6:d2:4b:14:fc:ee:83:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Apr 13 09:01:08 2025 GMT
Not After : Apr 14 09:01:08 2025 GMT
Subject: CN=cb3c58800a24a1a47487bfc8d72b3de20d541d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:85:87:c2:1b:e2:27:f7:6d:53:72:1a:40:
d3:9c:54:66:5c:a1:84:3e:51:06:ad:c9:dd:77:3b:
ad:36:bb:c3:56:c1:de:60:bb:4b:ce:82:77:fa:fe:
2e:60:55:03:90:54:85:ed:fb:ba:5d:ba:63:a6:0d:
cc:e7:96:be:38:57:51:ff:01:66:ee:b6:16:9b:f0:
a0:cc:43:c9:da:62:42:c2:15:f2:ef:ef:05:95:2d:
0a:48:20:31:64:fe:72:05:3f:24:d5:76:ac:50:9f:
d7:77:3e:c7:f1:41:0f:3d:be:7b:55:ea:7f:97:f8:
45:66:b8:16:1a:97:f3:34:09:e0:79:e1:c5:8c:69:
2a:d3:c0:da:f5:58:e5:fa:9a:5a:54:33:72:b4:40:
42:79:16:f3:5a:cc:16:e4:14:34:62:65:1d:1d:cb:
cc:60:9a:53:31:97:1c:a9:5f:a0:b7:ae:42:5c:05:
d0:4d:2f:2a:42:ae:17:8c:ea:d1:cc:2b:a5:15:ee:
fc:6b:6c:59:f7:02:cb:29:d5:da:15:54:d9:8d:33:
63:83:db:3a:5d:89:59:91:5c:fa:d9:2f:a1:eb:4a:
a9:b4:92:45:30:82:bb:05:e3:a1:28:8e:fe:82:06:
7d:30:48:49:4c:36:01:92:b7:87:13:e6:b8:aa:ab:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:58:80:0A:24:A1:A4:74:87:BF:C8:D7:2B:3D:E2:0D:54:1D:4A
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:95:b2:17:48:c4:fb:75:10:04:2f:32:40:e2:fd:22:a5:
22:62:20:7a:fa:74:d6:e7:9e:f2:91:02:7f:4e:5d:f3:47:63:
01:b3:0d:c3:b6:97:fb:17:8f:7d:b8:f4:29:53:76:ae:ba:c3:
42:b1:e4:33:3a:cf:b6:73:b5:92:70:29:98:ab:38:e0:f6:20:
95:5a:8a:5b:c6:84:c3:f5:aa:6d:76:74:ad:c3:64:73:08:4b:
63:34:eb:e5:8b:10:14:a9:30:ca:f9:50:7f:63:fa:b3:73:14:
09:14:20:c5:12:7c:f0:31:9e:c3:ec:0d:d6:63:0a:6d:09:34:
6a:56:77:17:02:cc:81:dc:36:de:d5:ff:21:9e:b4:ea:c8:ed:
b9:51:cf:28:92:ba:4b:e6:a6:6c:e8:df:33:c3:e9:74:ab:ab:
7b:f1:52:64:e2:34:17:25:ab:97:a8:1c:28:a5:4a:69:b5:58:
34:b1:a9:07:23:5f:90:16:a4:ed:30:34:a6:76:25:c4:a4:95:
6e:9a:aa:5c:50:64:16:1f:83:1f:ab:17:52:2b:5b:8a:2c:6a:
0e:64:82:d6:0e:84:59:7f:43:f1:a5:dd:9f:a6:a8:7d:3c:e7:
11:30:6a:b3:a8:c7:7f:6b:b5:36:7a:e0:f1:07:ce:9d:43:03:
b5:fc:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net