Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: Xob0jYXCKPwZs9PYyJq3MtiO9wH0tkkqgrNkCGIcusM=
Subject key identifier: 72:D9:F2:93:D5:4D:5E:55:E0:0D:4C:3C:36:A9:E6:DE:8A:FA:28:10
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01962DF3BAD46DB163DEFD883B18D12B8F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 07:01:09 +0000
Manifest this update: Sun 13 Apr 2025 07:01:09 +0000
Manifest next update: Mon 14 Apr 2025 07:01:09 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: 9lNkRKrtP4k4BMuLj0eFEAgnEGw6aVRXNsx8/6by6/Y=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:ba:d4:6d:b1:63:de:fd:88:3b:18:d1:2b:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Apr 13 07:01:09 2025 GMT
Not After : Apr 14 07:01:09 2025 GMT
Subject: CN=72d9f293d54d5e55e00d4c3c36a9e6de8afa2810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:8e:78:8c:2a:53:dd:b0:e6:df:26:ff:b9:
f0:ee:c4:a6:e3:e1:f6:76:80:73:7d:8a:64:6d:2d:
85:3b:5e:f1:f4:a6:a3:d4:2c:79:7c:9e:13:6b:6b:
35:4e:55:5e:62:1b:29:e6:99:33:73:28:9a:3d:c5:
d2:24:4b:b9:bc:13:6f:b8:37:ff:d0:eb:58:d2:b9:
bb:84:d1:32:e4:48:5e:79:75:67:19:9f:90:7d:c4:
ea:c5:3d:d9:60:e8:85:ef:d7:3b:c1:3c:11:82:e5:
02:45:e9:ab:0c:b9:b4:89:96:a8:49:e7:a4:45:1f:
ef:7a:3b:a2:15:a3:89:ef:22:b2:ba:27:f3:e5:77:
22:6c:a0:bc:37:db:a0:a3:0d:b0:6f:d8:a1:2c:0b:
9d:72:42:59:6f:b9:52:37:9c:e5:d4:97:a9:86:04:
13:58:0e:ad:0d:59:d7:7b:f9:8f:a8:9d:a9:0d:94:
4f:26:1b:e2:29:c5:db:b0:81:bf:ec:77:97:67:8f:
29:86:20:0b:c3:93:01:ed:38:30:94:d0:81:b1:12:
15:3b:94:c0:37:a0:88:61:98:0c:98:ce:c8:be:1e:
c0:a4:e9:a0:37:96:1b:d3:30:aa:d8:52:c7:ec:a8:
ae:22:1f:a2:c2:9a:cc:64:a1:e2:c3:52:2d:37:a3:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:F2:93:D5:4D:5E:55:E0:0D:4C:3C:36:A9:E6:DE:8A:FA:28:10
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:10:fd:2d:ea:b8:15:71:58:94:25:7d:59:74:aa:68:34:39:
0f:b9:34:fd:8b:ab:50:4a:86:77:34:06:1e:11:fd:b4:28:b8:
ee:49:39:45:5c:eb:fc:17:be:2b:a6:88:52:55:61:c9:65:2c:
83:e9:39:f9:92:81:1e:01:df:f6:1e:3b:82:ef:36:65:b1:2a:
b7:c6:e0:61:f5:f1:f9:7c:66:8a:01:f1:5a:54:74:fb:c5:71:
f3:e2:3a:0f:5f:68:07:6e:b8:bc:c6:5c:46:59:d4:70:54:8d:
ec:5b:e3:7e:b1:5a:d5:e0:e8:f2:15:c4:61:8e:2d:8a:37:62:
9b:1a:ec:93:fd:87:0e:82:ce:99:64:0b:a1:98:53:ef:62:1d:
1c:81:d5:fe:d2:30:88:e6:c6:5a:f7:6e:d2:a0:8e:1f:cb:e4:
7e:06:71:f7:c4:e9:d6:59:54:af:64:28:65:8c:c5:61:a3:4f:
65:e1:b8:93:2e:83:8c:c0:2b:0d:0a:bc:a4:96:be:04:87:e3:
01:f2:31:6b:2a:d5:c1:b6:b3:2a:80:2e:a3:d3:db:60:04:c4:
de:95:79:09:d5:de:df:51:cd:b1:f0:bc:cc:ef:b2:57:9b:1c:
59:34:43:6b:7a:a4:c7:b0:a2:bd:8f:41:e1:cf:f8:ff:d5:ab:
84:9e:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net