Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: 8kmdvN8qjuy4bXof2u506ppswDSDQolJaBaB9Vn0eEw=
Subject key identifier: 8C:15:B3:30:5A:52:96:30:A5:F9:CD:80:12:28:D6:F1:E8:34:49:B0
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 01962FAB95636128BFB3FCED74D1227826D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 15:01:36 +0000
Manifest this update: Sun 13 Apr 2025 15:01:36 +0000
Manifest next update: Mon 14 Apr 2025 15:01:36 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: NphwsJYnmjAtSZm2QVwFbau6osTL6y9nukIa4e5T4uw=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:95:63:61:28:bf:b3:fc:ed:74:d1:22:78:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Apr 13 15:01:36 2025 GMT
Not After : Apr 14 15:01:36 2025 GMT
Subject: CN=8c15b3305a529630a5f9cd801228d6f1e83449b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:12:1b:2b:39:e6:2f:fa:75:fd:be:77:51:
91:a7:9a:0e:ef:5e:e9:dd:32:9e:96:ca:d5:58:2e:
fd:ac:cd:28:ac:74:e6:a2:ff:a7:d8:da:fa:ea:f8:
69:75:bb:48:b9:d2:2e:6f:83:55:0c:b2:69:37:6f:
b6:56:95:d7:5e:88:f3:96:bc:c2:ab:52:86:85:86:
31:a6:75:3f:1e:b2:3d:48:c6:ad:0e:42:9d:b1:c7:
15:a7:a4:63:62:f9:0d:74:22:6b:22:2f:83:71:33:
db:1b:bf:59:b6:be:55:fc:4a:e0:2d:4d:9a:f5:59:
15:76:dd:3b:cf:41:b7:1e:3a:94:9f:1c:21:d7:39:
03:a4:1e:c8:63:3d:b1:29:98:40:9f:5f:d9:c0:92:
c7:d9:c5:24:1a:07:51:dd:8b:8c:39:12:71:ea:a7:
24:1b:90:7c:17:20:09:45:e9:d9:3d:f0:f3:00:1b:
fc:1b:55:8d:d5:2c:ab:41:93:87:7b:58:c4:92:76:
f6:ed:ba:94:a2:f4:34:50:53:3e:e3:f0:b9:65:45:
a8:4d:a2:26:05:0b:a1:6f:a3:8c:56:78:54:26:bd:
39:91:70:00:6e:32:45:ce:cc:68:e2:c3:ba:21:3a:
c9:14:97:11:19:07:25:ba:2f:77:e5:8c:6a:13:b1:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:B3:30:5A:52:96:30:A5:F9:CD:80:12:28:D6:F1:E8:34:49:B0
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:b9:7e:f2:f2:6b:4c:ce:bd:74:f2:cd:e1:48:04:f0:6f:
e1:dd:ee:7c:0a:8f:2b:8f:a8:07:2c:40:ae:1b:60:bd:00:47:
69:c1:c8:70:6f:73:06:07:34:91:ef:be:2f:d3:5c:2e:bb:72:
c6:30:e5:9e:ca:02:fc:02:c7:a1:65:fb:7c:14:3f:f2:a0:65:
89:89:ac:83:7d:6c:99:f2:ce:4e:df:c8:ed:30:74:02:ba:0b:
90:9a:cf:78:a3:ae:8a:49:ed:92:5d:76:f4:6b:47:3a:ff:9e:
97:9d:c0:55:a5:92:75:47:fc:6b:d6:50:6d:13:31:30:d2:97:
05:c6:97:fa:07:2d:d4:5f:c8:20:b7:3c:e9:17:c4:9b:08:4a:
8f:08:f9:89:c2:e1:3f:65:9d:dc:9e:15:d4:58:41:d5:b9:2d:
ef:02:4b:1a:3d:70:f9:cc:64:aa:66:8d:a9:e6:4b:f5:4b:68:
b8:9a:e3:e4:64:5a:41:b3:6f:f8:af:52:a5:16:e6:46:94:cb:
42:2a:b9:fe:51:fa:c6:63:0b:81:c1:9a:87:79:75:b6:f7:18:
cc:4b:5a:e1:c0:6a:34:25:5b:5c:fc:51:72:d6:b2:b0:7c:90:
62:75:df:76:67:5f:10:42:ee:db:77:51:98:b0:5e:af:11:cb:
f0:50:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net