Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: sOuZ4Yy5+4IsF6o5mNDFVXTv2xkP+0qsW2hAaVmmkx4=
Subject key identifier: 24:F5:1B:EB:AE:D8:4F:6D:CA:84:AB:3A:7E:C4:12:79:9F:98:46:15
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01962E988AEF32F6B93D27704953E9F2F2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0C5C
Signing time: Sun 13 Apr 2025 10:01:10 +0000
Manifest this update: Sun 13 Apr 2025 10:01:10 +0000
Manifest next update: Mon 14 Apr 2025 10:01:10 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: 8G1yvhT5lJ7HOnGSR48eGNJH7ElXJDXRl1uj9LYZkaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:8a:ef:32:f6:b9:3d:27:70:49:53:e9:f2:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Apr 13 10:01:10 2025 GMT
Not After : Apr 14 10:01:10 2025 GMT
Subject: CN=24f51bebaed84f6dca84ab3a7ec412799f984615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:6d:d6:6e:4c:01:00:ea:01:f7:15:0e:6b:
4f:af:3d:85:83:2c:e8:62:ca:65:a1:2f:8f:c3:c0:
08:29:f0:11:63:b6:e5:14:30:c3:1c:4d:c4:62:99:
1f:14:c8:e1:6a:7a:9d:d3:6f:f9:ca:d8:41:1d:e1:
89:9d:fd:97:ca:2d:a2:2f:4e:e8:c7:91:df:67:98:
3d:d3:ed:17:fc:d9:2d:9e:e8:46:e4:29:9d:4e:4a:
ed:68:86:61:2b:6b:e9:6a:ae:2b:74:31:df:92:85:
14:14:e5:3d:fa:fe:fc:fd:2d:33:5c:e0:e4:15:d3:
30:19:93:c1:fb:af:98:25:ad:5c:09:f1:84:33:98:
06:19:0f:f8:4c:00:f2:1b:2e:82:98:b5:40:bd:70:
b8:1e:eb:d2:6e:de:10:01:71:fb:59:09:4d:cd:bf:
79:02:45:e0:ef:a9:74:3d:0c:de:b1:58:5c:95:2d:
4b:bf:45:90:82:3c:1d:1d:01:b2:9d:b1:23:18:66:
1d:a3:d1:5d:1b:90:34:de:c1:5b:b7:46:3b:b7:93:
b6:54:68:bf:e9:0a:59:f5:64:4e:78:69:27:8c:27:
40:42:54:42:eb:20:9a:3b:f8:86:6b:5e:22:fe:b4:
7d:88:c0:5b:d7:fa:89:86:4f:e6:96:b7:c1:bc:bd:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:1B:EB:AE:D8:4F:6D:CA:84:AB:3A:7E:C4:12:79:9F:98:46:15
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:4e:90:fa:93:80:61:70:cf:e9:d7:a8:f6:87:39:5c:f0:
8e:25:77:2a:00:a5:3d:71:e3:f3:a2:18:b4:ec:14:7f:d4:65:
58:12:4b:7b:98:7e:20:1a:5a:47:ca:ca:3c:a9:07:16:f0:d3:
1d:4f:ae:ba:d5:76:0f:ad:59:c7:04:2b:cf:06:38:07:f7:73:
b1:5e:68:aa:ed:48:52:48:ba:6f:4e:11:bd:89:1c:fc:0c:fa:
75:4e:04:e8:3c:d6:f1:b5:00:d7:88:b4:bb:b8:00:b1:d9:ec:
6d:52:70:af:f6:29:f0:5c:a5:63:1d:d9:c5:51:ba:0b:0b:2a:
d9:97:9c:75:94:db:73:83:a3:b9:f4:f4:99:c2:95:57:fc:67:
f0:bc:48:52:05:f7:ee:74:cb:55:88:1e:10:a7:7b:27:f1:f6:
c5:f2:ce:92:1f:7f:0a:16:87:37:41:8a:e8:65:4b:b2:7d:28:
32:c5:ad:a1:ea:f0:5f:e8:63:af:6d:69:17:7a:e0:49:8f:72:
ef:ff:46:8d:ed:3f:83:88:7b:02:4d:7f:98:bb:11:e9:e8:20:
10:7d:64:95:15:3e:6e:8f:d4:32:1c:cb:7f:d6:99:e0:1f:76:
68:06:87:12:26:59:c8:ac:b7:85:56:5f:55:db:c6:dc:99:ba:
3b:b2:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net