Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: +k47IJHO13oKwYEWOJun9PUx1PKsqmobfeRDBdU4EIM=
Subject key identifier: 08:B6:8F:5D:F9:D0:D4:9A:23:E8:AC:5C:04:86:1D:4E:86:46:AA:09
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 01962E997D70DC106CB71D8E94D512BF1A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 089E
Signing time: Sun 13 Apr 2025 10:02:12 +0000
Manifest this update: Sun 13 Apr 2025 10:02:12 +0000
Manifest next update: Mon 14 Apr 2025 10:02:12 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: X4fgBL+b8+YKUPFqEn6RfhG7X9NnkEznz8eFljV4d/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:7d:70:dc:10:6c:b7:1d:8e:94:d5:12:bf:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Apr 13 10:02:12 2025 GMT
Not After : Apr 14 10:02:12 2025 GMT
Subject: CN=08b68f5df9d0d49a23e8ac5c04861d4e8646aa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:a6:95:bd:5b:a0:3c:60:27:c2:25:1e:5a:
fe:dd:1f:1a:f5:21:3c:83:d6:50:76:4c:a4:b0:a4:
7c:72:37:e2:d2:11:27:22:a5:6d:63:dc:80:a6:5c:
42:bc:3b:fd:39:46:0e:8e:26:55:68:50:22:1d:94:
9a:80:0f:4f:a4:09:a5:19:5d:03:31:90:3d:cf:b8:
aa:30:07:9a:0c:80:5a:84:4a:01:5f:71:2d:cc:45:
c8:d8:8f:af:4b:31:8f:e5:34:91:c8:91:c0:97:2f:
25:d9:d9:dd:64:92:66:9f:22:83:31:d7:a2:d7:1f:
ca:36:de:9d:bb:64:06:ca:48:7f:3b:8b:e3:fb:4f:
61:75:48:70:83:dc:89:a7:4d:20:74:80:1e:e5:31:
18:ce:35:9b:ef:76:2e:29:a7:b2:57:bf:ce:7a:bb:
2c:17:ed:38:60:fb:5e:6f:7a:8b:cf:82:7e:e9:d9:
91:b2:0c:6b:d6:83:40:d7:b5:08:4b:55:cb:b6:cb:
52:5b:89:65:b0:81:ee:fe:9f:ba:56:65:23:0a:c9:
77:c6:5e:2b:76:47:5d:11:c0:96:7d:4d:0a:ee:bf:
e1:7a:d0:f7:3d:53:96:71:8b:f9:3b:7a:ea:be:0d:
a3:20:20:b2:18:24:5e:03:a3:b0:5c:bf:a1:43:62:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:8F:5D:F9:D0:D4:9A:23:E8:AC:5C:04:86:1D:4E:86:46:AA:09
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f5:84:c6:6b:e9:e1:17:48:f8:b5:72:d5:cb:46:69:19:78:
0a:ce:5b:8b:be:68:a5:d7:ce:68:f0:7e:85:f0:d2:cd:e2:bc:
cd:9c:52:de:33:e3:0c:05:f4:53:1f:6c:54:2d:6e:15:b3:8c:
fd:8e:41:8e:d1:fa:92:bb:da:27:44:74:ac:be:a9:74:0d:33:
c4:50:28:97:6e:12:30:ef:77:db:38:40:a4:c9:f8:0d:36:c9:
6d:ad:34:4d:9e:0e:5b:85:e8:75:2e:f4:d9:fb:86:22:97:8d:
08:90:22:99:d5:75:cf:cf:81:9d:69:64:a0:b5:a7:e8:80:22:
81:f9:5c:23:9b:07:03:5f:25:24:30:7c:54:a9:36:36:d9:fd:
69:1a:91:b6:20:4e:b9:11:af:28:d0:d8:31:af:bc:46:d6:4f:
3b:5a:60:0d:6e:32:d1:95:df:c0:a4:c5:57:a4:f4:c8:f2:d3:
bc:ff:0b:55:fa:20:c7:37:90:15:a0:c2:28:8b:45:02:dc:c2:
74:d4:4a:9f:c5:82:71:b8:d8:93:92:a7:57:ce:fb:b3:0d:64:
3a:99:29:47:d9:b8:ce:94:91:ba:f3:38:44:82:e9:dc:0b:e7:
60:0f:03:bb:ac:db:12:9b:a2:58:83:19:80:71:2d:67:36:3a:
2f:d0:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net