Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier: Xs1agsTY6n3OKA8a8npiegT13ksbsKiGTpCY7Vs337U=
Subject key identifier: 9F:FE:A7:E5:59:54:15:CA:9A:0D:72:5A:A5:6A:17:6E:79:0C:C0:BE
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 01962DF3DB4FAA6715850D12A87798EBFB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number: 14E7
Signing time: Sun 13 Apr 2025 07:01:18 +0000
Manifest this update: Sun 13 Apr 2025 07:01:18 +0000
Manifest next update: Mon 14 Apr 2025 07:01:18 +0000
Files and hashes: 1: RW4un6mRBfPzHloV5RnOReMxV4M.roa (hash: 6KtCB53EZaTt4rkvk3WW5xLU60zG4n/pYxl9BtxsfPs=)
2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: IyIuP+X/Y4c+qfF/mDvKWyWpGpVkq7mQ4FJZqHzTSEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:db:4f:aa:67:15:85:0d:12:a8:77:98:eb:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: Apr 13 07:01:18 2025 GMT
Not After : Apr 14 07:01:18 2025 GMT
Subject: CN=9ffea7e5595415ca9a0d725aa56a176e790cc0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:97:0c:0e:35:de:a1:a4:a5:87:0c:51:cb:
5e:04:8b:06:35:64:96:12:d1:53:04:47:88:8d:e8:
b8:5d:09:83:40:f7:99:a0:ec:14:fb:5d:f5:30:5b:
cd:1f:82:fa:53:5a:1e:a2:99:dd:0d:93:b6:83:2c:
56:9f:ba:40:df:ce:6c:56:73:34:b3:8b:28:b7:9e:
a2:fa:7b:ca:17:70:0b:9c:57:64:20:9c:68:9a:75:
9a:f2:88:a6:32:4f:ba:21:74:94:fd:e6:10:5c:49:
2c:09:5c:c3:dc:0f:92:78:d5:f2:94:e5:3c:4e:81:
30:b3:ea:7a:c7:f3:ef:d9:a2:a3:0c:d6:3e:99:bd:
c6:a0:50:cc:a2:6f:69:5f:10:8f:3a:6d:1e:ad:23:
1c:39:79:b4:e4:2e:e8:36:f5:50:19:8e:71:ff:68:
b2:9e:7d:50:a2:82:3a:f7:12:24:d7:98:d5:3a:71:
71:6a:7a:28:66:48:2c:6b:c7:98:1e:23:de:31:5c:
63:41:eb:84:1e:fb:d0:96:2a:cb:88:65:9b:1c:4f:
32:3c:6f:15:08:93:d1:a9:32:2e:fc:56:5a:7a:46:
9a:fd:70:0d:91:c2:cb:4a:85:93:15:a3:fb:8a:b3:
73:20:d7:4a:03:da:43:27:ed:3c:1f:e6:2d:03:ce:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FE:A7:E5:59:54:15:CA:9A:0D:72:5A:A5:6A:17:6E:79:0C:C0:BE
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:c1:68:8e:ba:3e:9c:65:51:6a:32:41:35:b1:7f:2c:51:
56:78:33:35:98:40:02:38:34:b7:f3:13:df:92:c4:0f:26:70:
d4:8b:3b:09:4a:69:7c:a5:2a:52:14:e2:e7:c0:e3:a6:2e:c0:
53:f4:0f:da:9a:5b:8d:a0:4d:0d:12:f7:8d:d0:a8:f6:c0:29:
b4:26:21:37:cc:11:2a:02:1c:bc:da:18:69:8d:51:eb:67:b2:
fd:63:bd:f7:9a:1f:1e:76:cc:72:04:18:c1:62:33:6d:00:12:
42:9e:fa:30:50:a0:64:f3:e3:3d:e4:17:0b:5b:b2:b9:bb:87:
f8:22:6d:7e:f9:0b:ff:fa:89:35:71:fc:1c:b1:73:3b:27:8c:
d9:9d:35:38:bc:3e:e7:9a:18:b7:2e:c9:63:b5:81:d1:cf:79:
35:40:db:60:2c:d4:dd:59:30:20:04:81:77:2e:c4:c8:a3:60:
77:52:79:48:3c:22:b3:ab:67:be:b9:b8:bb:07:1f:59:5b:60:
aa:f1:0f:4d:c1:38:df:a4:82:4c:c3:87:22:e2:70:be:3d:a7:
5c:00:d9:6d:8c:8e:5c:b0:03:7b:d8:36:23:c1:e2:1f:a0:b1:
59:f3:b4:90:5f:cb:17:77:b8:66:00:d3:6d:91:1b:b4:35:71:
6f:63:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net