Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: Ip8xOcviZUObrmXxGjBYLUc0bX2GTCCMBoTn2hANwqY=
Subject key identifier: 8C:52:0C:9F:16:93:40:FD:AC:F2:0D:FD:1B:E9:5A:08:35:73:2A:C3
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 01962F063DB0D84342863910E92C36BB0817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0CD9
Signing time: Sun 13 Apr 2025 12:01:00 +0000
Manifest this update: Sun 13 Apr 2025 12:01:00 +0000
Manifest next update: Mon 14 Apr 2025 12:01:00 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: jk2ZoUjKYR/B24hvGjtil14U4qHKal3vhAubwG10ay4=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:3d:b0:d8:43:42:86:39:10:e9:2c:36:bb:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Apr 13 12:01:00 2025 GMT
Not After : Apr 14 12:01:00 2025 GMT
Subject: CN=8c520c9f169340fdacf20dfd1be95a0835732ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:18:a6:f1:82:d7:ea:27:fd:19:35:1b:52:
5e:e3:85:fa:8e:c6:8e:39:55:dc:43:91:ac:18:9e:
54:1c:53:e7:e6:47:8b:1e:c5:4a:a7:07:97:61:56:
16:00:87:57:1a:0b:22:36:62:00:44:e0:31:6b:a3:
5a:a7:6c:cb:45:e1:5a:af:1b:c9:fd:99:62:19:d5:
5e:4e:8e:86:ae:e1:ea:bb:31:71:ac:d6:66:c2:bb:
a0:35:3f:47:d6:ec:b5:3c:73:48:17:84:d7:f3:a7:
88:a9:83:1f:d9:40:7a:d8:52:dd:a7:ec:02:4a:4d:
56:4c:41:18:c3:95:22:a6:00:38:c4:24:9d:3d:40:
b2:5d:59:4f:33:c0:d0:59:5a:97:58:f7:26:15:46:
80:9d:10:36:a7:e0:18:db:a9:b1:7e:19:b3:a2:aa:
44:ec:00:1b:b1:1d:c1:b0:99:31:f4:8c:81:00:2e:
f5:57:09:d2:1d:a5:a6:d4:9b:28:b7:d0:d1:ff:98:
f2:42:fd:9b:2b:64:d4:e8:5b:76:14:d3:53:3c:cb:
6b:6d:ff:11:f6:65:16:31:50:cb:c0:18:39:83:74:
d7:ea:f4:d8:7a:80:37:ad:01:7c:57:58:0c:ce:a4:
47:1c:09:43:81:c2:ec:b8:b5:c0:be:1f:4f:dc:25:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:0C:9F:16:93:40:FD:AC:F2:0D:FD:1B:E9:5A:08:35:73:2A:C3
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1a:1b:5b:35:3b:65:00:b8:c1:dc:67:93:cf:62:25:e9:14:
dd:49:75:37:19:a9:06:ba:18:e5:f9:33:cd:4a:44:6a:d6:4c:
38:6b:86:88:67:d1:79:96:df:09:e7:b4:84:7d:15:9c:94:db:
32:47:af:17:a5:c3:61:88:f4:cc:da:e2:07:1e:7b:de:6d:b3:
f3:a6:6b:06:7d:3e:39:35:66:da:7e:13:7f:53:1c:1c:21:ff:
e1:98:b2:df:0a:96:60:7c:55:10:9a:53:ac:54:b7:b7:a2:e6:
f5:39:fb:bd:f5:99:bf:3b:28:69:53:1c:1d:8d:24:8a:5e:96:
45:3a:65:2e:77:46:7d:18:f5:73:76:b8:61:aa:8b:6e:83:f3:
87:a0:2a:47:64:1a:56:c2:5e:23:51:50:d3:38:8b:c2:86:09:
7d:77:4a:e1:a7:13:59:7e:d1:7e:b4:38:93:3a:a6:3b:9a:08:
0c:14:c7:1b:7d:70:92:3d:c8:0d:d8:1e:43:2e:d0:9f:81:d0:
c4:aa:35:04:f0:c5:b4:4f:aa:bd:26:d9:46:21:2f:c5:8f:f7:
72:e9:e9:6d:ac:26:0f:4e:00:6b:07:6d:65:04:1f:13:5d:0c:
10:9c:0e:79:c4:ea:6e:f0:5c:8e:aa:2f:1d:60:f0:9b:da:17:
ac:ac:6f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBj2w2ENChjkQ6Sw2uwgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx
NTkzNzgwHhcNMjUwNDEzMTIwMTAwWhcNMjUwNDE0MTIwMTAwWjAzMTEwLwYDVQQD
Eyg4YzUyMGM5ZjE2OTM0MGZkYWNmMjBkZmQxYmU5NWEwODM1NzMyYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTUYpvGC1+on/Rk1G1Je44X6jsaO
OVXcQ5GsGJ5UHFPn5keLHsVKpweXYVYWAIdXGgsiNmIAROAxa6Nap2zLReFarxvJ
/ZliGdVeTo6GruHquzFxrNZmwrugNT9H1uy1PHNIF4TX86eIqYMf2UB62FLdp+wC
Sk1WTEEYw5UipgA4xCSdPUCyXVlPM8DQWVqXWPcmFUaAnRA2p+AY26mxfhmzoqpE
7AAbsR3BsJkx9IyBAC71VwnSHaWm1Jsot9DR/5jyQv2bK2TU6Ft2FNNTPMtrbf8R
9mUWMVDLwBg5g3TX6vTYeoA3rQF8V1gMzqRHHAlDgcLsuLXAvh9P3CWnlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxSDJ8Wk0D9rPIN/RvpWgg1cyrDMB8GA1UdIwQY
MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt
OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5
LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhobWzU7
ZQC4wdxnk89iJekU3Ul1NxmpBroY5fkzzUpEatZMOGuGiGfReZbfCee0hH0VnJTb
MkevF6XDYYj0zNriBx573m2z86ZrBn0+OTVm2n4Tf1McHCH/4Ziy3wqWYHxVEJpT
rFS3t6Lm9Tn7vfWZvzsoaVMcHY0kil6WRTplLndGfRj1c3a4YaqLboPzh6AqR2Qa
VsJeI1FQ0ziLwoYJfXdK4acTWX7RfrQ4kzqmO5oIDBTHG31wkj3IDdgeQy7Qn4HQ
xKo1BPDFtE+qvSbZRiEvxY/3cunpbawmD04AawdtZQQfE10MEJwOecTqbvBcjqov
HWDwm9oXrKxvcQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net