Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: Mi6nrJsR9UXpmgfrLgCln6w+KrypyK4MNmQWIjhwWIQ=
Subject key identifier: FA:1B:74:7F:D9:C9:D4:52:5C:E8:E5:70:86:79:BD:A6:C6:BF:39:D0
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 01962F745DEAA9BB0DD2651779FCB7B60BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0C26
Signing time: Sun 13 Apr 2025 14:01:17 +0000
Manifest this update: Sun 13 Apr 2025 14:01:17 +0000
Manifest next update: Mon 14 Apr 2025 14:01:17 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: aQfQqhiuhiiypc4apiVyvTauIu+9ysTGpnTjyNKOBFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:5d:ea:a9:bb:0d:d2:65:17:79:fc:b7:b6:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Apr 13 14:01:17 2025 GMT
Not After : Apr 14 14:01:17 2025 GMT
Subject: CN=fa1b747fd9c9d4525ce8e5708679bda6c6bf39d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:f2:9d:c2:bc:b0:de:bd:d7:39:2a:42:76:
1f:4b:a0:4d:22:d2:b0:d9:4a:fd:2b:14:29:05:04:
17:c9:f9:ea:43:c6:e8:5d:ae:05:f2:27:72:1d:1f:
8b:a6:5c:e3:41:db:c0:14:d2:7e:49:f9:19:27:71:
8b:4b:d8:d2:43:a6:a9:16:ad:94:67:79:8b:f3:c7:
76:c0:5e:e2:81:85:4a:33:ca:b8:0e:e7:6f:5b:d2:
c6:2f:0a:ba:06:c2:15:a3:03:61:e7:d5:da:dd:87:
84:78:b4:ae:2c:00:e7:1e:e8:ad:c2:ec:cd:ab:74:
4b:7a:bb:7c:d7:da:c0:1a:82:2f:e4:1c:4a:59:63:
41:85:05:54:ab:dc:09:e2:36:19:df:e7:05:88:e7:
ed:8b:c0:f8:e6:a1:34:c2:b8:30:9d:6a:5c:6d:88:
66:e7:ef:c3:48:9c:6b:99:2a:47:2d:46:a7:11:78:
2f:df:86:23:60:63:bc:3c:e4:35:7a:7e:c6:ce:cd:
79:9a:1c:97:0e:7d:36:4f:58:e9:bc:ab:1f:12:3e:
6d:c9:bd:68:2f:ee:b2:9a:37:69:ca:8e:a6:d6:1e:
12:0b:8a:8e:b4:ed:a6:e1:4e:00:a5:85:04:c9:fd:
81:98:2d:3b:a3:73:fa:8e:ad:fe:3a:c2:b0:8f:55:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:74:7F:D9:C9:D4:52:5C:E8:E5:70:86:79:BD:A6:C6:BF:39:D0
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:50:39:00:4e:4b:75:79:82:c5:28:e1:bf:ab:95:1b:f9:
b3:f6:51:eb:6a:b1:28:76:8c:e8:f0:cc:0a:ea:a9:6b:f7:d7:
78:ae:28:64:17:9d:c1:6c:36:92:a6:84:05:ca:87:c7:3c:7d:
26:12:f8:93:97:12:63:e7:ba:c1:53:a6:66:f1:58:03:c6:19:
3f:da:7c:6a:87:8d:18:df:1b:55:51:2e:3e:8e:98:46:02:99:
3b:3b:0d:5f:76:5d:fc:a9:63:db:4b:85:3b:3f:18:1b:ad:1a:
2c:4f:1e:42:42:80:87:4b:7f:fc:45:8b:6a:87:58:67:d2:b6:
f6:da:d6:db:2b:4a:f4:ad:ce:76:3d:a0:64:11:fb:cf:03:d8:
d7:98:98:8d:b8:73:08:0f:5c:38:cc:44:ae:80:da:f0:f9:23:
56:30:b4:c3:8b:d0:ba:aa:69:26:38:5d:7d:9e:e4:5e:f6:86:
09:2f:6a:21:9a:eb:4b:9d:e5:4f:1d:96:c2:6b:fc:d5:52:3b:
75:72:e0:44:54:3c:fd:a1:32:dd:eb:03:83:fa:40:bb:25:b6:
08:16:9f:ed:9e:01:e3:8d:68:dd:f8:9c:a1:03:08:41:9f:a7:
0b:d5:9f:d3:fc:49:28:67:67:d3:a0:7c:e0:7d:12:11:d8:61:
9b:01:dc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdF3qqbsN0mUXefy3tgv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjA4NmNhNjIxMWJiOTVkMDY0MzA4OWM3ZGE1NzZmZTY3
YzIxNTIwHhcNMjUwNDEzMTQwMTE3WhcNMjUwNDE0MTQwMTE3WjAzMTEwLwYDVQQD
EyhmYTFiNzQ3ZmQ5YzlkNDUyNWNlOGU1NzA4Njc5YmRhNmM2YmYzOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JryncK8sN691zkqQnYfS6BNItKw
2Ur9KxQpBQQXyfnqQ8boXa4F8idyHR+LplzjQdvAFNJ+SfkZJ3GLS9jSQ6apFq2U
Z3mL88d2wF7igYVKM8q4DudvW9LGLwq6BsIVowNh59Xa3YeEeLSuLADnHuitwuzN
q3RLert819rAGoIv5BxKWWNBhQVUq9wJ4jYZ3+cFiOfti8D45qE0wrgwnWpcbYhm
5+/DSJxrmSpHLUanEXgv34YjYGO8POQ1en7Gzs15mhyXDn02T1jpvKsfEj5tyb1o
L+6ymjdpyo6m1h4SC4qOtO2m4U4ApYUEyf2BmC07o3P6jq3+OsKwj1V0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPobdH/ZydRSXOjlcIZ5vabGvznQMB8GA1UdIwQY
MBaAFDnwhspiEbuV0GQwicfaV2/mfCFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZDR3ltSVJ1NVhRWkRDSng5cFhiLVo4SVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wZDY0ZTItZTJkYS00NjhhLThmN2Qt
N2ZlMzI4NTcxOTM4LzEvT2ZDR3ltSVJ1NVhRWkRDSng5cFhiLVo4SVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wZDY0ZTItZTJkYS00NjhhLThmN2QtN2ZlMzI4NTcxOTM4
LzEvT2ZDR3ltSVJ1NVhRWkRDSng5cFhiLVo4SVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGNQOQBO
S3V5gsUo4b+rlRv5s/ZR62qxKHaM6PDMCuqpa/fXeK4oZBedwWw2kqaEBcqHxzx9
JhL4k5cSY+e6wVOmZvFYA8YZP9p8aoeNGN8bVVEuPo6YRgKZOzsNX3Zd/Klj20uF
Oz8YG60aLE8eQkKAh0t//EWLaodYZ9K29trW2ytK9K3Odj2gZBH7zwPY15iYjbhz
CA9cOMxEroDa8PkjVjC0w4vQuqppJjhdfZ7kXvaGCS9qIZrrS53lTx2Wwmv81VI7
dXLgRFQ8/aEy3esDg/pAuyW2CBaf7Z4B441o3ficoQMIQZ+nC9Wf0/xJKGdn06B8
4H0SEdhhmwHcog==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net