Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: ArRunidKJ6FoXcosPUA4qWE9nMG7kdDujNg1uTPbZLY=
Subject key identifier: B2:6E:58:7F:AB:20:2F:62:86:10:03:DA:09:26:F0:57:2C:18:E0:85
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 01962E2B39DDDE7C361B41594FF0041EA228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0DBA
Signing time: Sun 13 Apr 2025 08:01:46 +0000
Manifest this update: Sun 13 Apr 2025 08:01:46 +0000
Manifest next update: Mon 14 Apr 2025 08:01:46 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: TpZoTS5reXk1OfsKiswBy761djqeyTfONDX2B74KtKc=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:39:dd:de:7c:36:1b:41:59:4f:f0:04:1e:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Apr 13 08:01:46 2025 GMT
Not After : Apr 14 08:01:46 2025 GMT
Subject: CN=b26e587fab202f62861003da0926f0572c18e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:ea:00:8b:36:b1:00:92:ef:24:18:30:f3:
57:75:ce:18:76:52:4f:3d:9a:82:20:cc:d3:7d:54:
c3:ff:93:b5:06:e6:c4:66:92:3e:f6:4e:70:59:6e:
48:88:4a:93:20:ea:86:53:68:2d:17:d8:56:4d:3b:
94:fa:41:30:23:c6:09:50:3e:6e:b6:e0:73:81:d1:
6e:2f:a0:73:b0:46:62:9f:df:7f:c7:08:90:c3:44:
46:1b:47:84:4f:c4:36:1d:4a:3a:d5:74:ce:c3:44:
f1:d5:8a:06:3f:68:f9:0b:4d:06:4b:e9:81:47:f1:
7d:9a:70:e8:a5:0a:49:9d:f8:5d:88:ec:b0:42:de:
e6:23:57:92:08:84:68:de:fe:48:3b:4f:cc:80:42:
c7:ee:3f:66:42:fa:3b:8a:95:64:24:4b:09:72:06:
60:32:51:87:91:54:4e:50:66:10:58:c4:2a:8d:7f:
17:10:e6:7b:65:4f:6d:02:d2:7d:95:76:a0:9a:90:
d6:da:3e:e1:20:39:e5:ba:5b:56:5a:91:31:88:43:
63:98:63:78:c6:de:fa:a0:4d:53:15:82:30:cd:cc:
69:a2:b8:04:db:76:8f:d8:50:b8:42:a8:4c:33:72:
60:0a:64:ee:5f:42:3e:9d:06:05:68:b9:ef:9e:30:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:58:7F:AB:20:2F:62:86:10:03:DA:09:26:F0:57:2C:18:E0:85
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:9a:ec:2c:54:ee:b5:33:ed:85:28:cb:9f:df:d3:b5:70:
bc:e0:c7:73:08:b7:83:ac:9e:e4:d3:9a:eb:a5:ee:72:50:19:
86:a7:88:bb:ce:d6:bb:cd:83:38:6d:7f:bd:a2:43:28:4c:87:
df:02:3d:cf:e0:2a:1b:67:d6:92:ac:84:e5:8c:b5:ad:99:b4:
e0:1f:e1:3b:40:bf:fb:a2:33:80:48:4e:38:1f:66:60:4f:5b:
15:0a:94:39:a0:e5:32:28:d8:b0:5a:51:d3:74:5b:ad:dd:66:
10:cf:6a:42:73:27:0e:a7:40:90:5d:a2:7d:b5:e6:d1:bb:cb:
a9:8b:fe:b7:85:eb:2a:ce:c3:0f:0b:bc:07:d9:0a:63:f4:b8:
b7:47:78:4b:62:14:1a:26:58:cc:f8:a0:4c:83:27:d8:4d:a0:
19:85:83:2f:e4:36:98:ea:ae:83:44:39:51:1c:6b:f2:6f:f1:
f5:b4:43:b4:b3:03:b4:a0:b7:c9:8c:6b:9a:90:21:0f:8b:ec:
ea:72:fc:c4:08:f6:dd:a2:f0:67:cf:b1:40:a2:a3:d6:9f:8a:
f3:93:2d:81:40:6d:a6:e0:4e:34:be:b2:c3:30:fd:f5:3e:06:
1f:d8:e0:d0:42:42:63:3a:80:39:f9:2e:aa:3a:89:af:0e:34:
e0:20:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net