Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: By83MIRnoalEkiagn82/OwLf/dXhAZZlbw892LILiI8=
Subject key identifier: 25:C5:78:29:34:C5:80:09:7B:71:A7:B9:EB:F1:C2:7C:A1:13:E2:A0
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01962FAB9BC679530A93EEB0D8485D78392C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0653
Signing time: Sun 13 Apr 2025 15:01:37 +0000
Manifest this update: Sun 13 Apr 2025 15:01:37 +0000
Manifest next update: Mon 14 Apr 2025 15:01:37 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: 1njbSjoQeJ9a6oRmV7LxDvthxUED7yhi1tusn1fPtFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:9b:c6:79:53:0a:93:ee:b0:d8:48:5d:78:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Apr 13 15:01:37 2025 GMT
Not After : Apr 14 15:01:37 2025 GMT
Subject: CN=25c5782934c580097b71a7b9ebf1c27ca113e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:88:39:2f:f2:5f:1d:4b:8a:7f:c9:1a:b1:
41:95:f1:3f:bc:59:24:44:7c:f6:90:17:27:49:cf:
ea:62:d3:e7:c9:31:f9:53:f9:19:8a:9b:a7:90:07:
3c:b5:76:88:f2:de:74:e7:65:ed:7e:6b:a1:20:7b:
f6:76:26:3f:11:01:73:7c:bf:50:cf:07:6b:a3:2f:
bf:67:d0:74:e6:d4:f9:0a:02:9f:13:11:33:7c:54:
89:27:62:99:94:fa:76:f4:ce:4c:33:be:8a:32:af:
7c:e7:59:78:bd:5a:c2:dc:aa:e0:a5:d9:45:07:66:
74:7e:41:50:32:e2:3d:ea:9a:e9:e5:e7:dc:3b:d3:
48:2c:3a:7a:a3:5d:71:4c:da:34:4c:09:9a:7f:6a:
7e:31:aa:8c:11:db:80:89:ac:3f:53:9e:1f:60:9c:
f3:f7:ba:73:73:50:a7:2e:dd:d6:1d:89:55:34:47:
53:11:ca:98:21:eb:18:aa:7b:f1:b1:ff:39:f8:18:
5e:a0:6c:6f:dd:d7:00:fe:55:9c:cf:df:ee:e2:61:
59:dd:df:08:fb:f4:cb:90:68:3c:1e:24:71:ef:3a:
6b:c2:16:b1:12:14:3e:0f:c8:a3:7b:00:63:10:d1:
ec:bf:05:7e:a1:ef:39:ab:04:60:95:92:b4:9c:39:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:78:29:34:C5:80:09:7B:71:A7:B9:EB:F1:C2:7C:A1:13:E2:A0
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e4:c3:93:a2:81:e6:9e:21:fb:a2:a7:cd:1d:c4:cd:a6:ec:
d6:a9:b8:3a:57:8b:8a:7a:95:a9:78:d3:96:a5:de:4c:52:9e:
e4:07:e2:4c:7d:6f:dc:4c:f3:5c:01:fb:02:b6:5f:6f:7e:f7:
fa:b5:e2:27:74:d3:af:e1:c7:a1:24:db:e4:93:84:2e:32:ce:
a4:2c:7e:c5:70:f9:a5:92:67:93:70:e2:f3:bd:eb:03:a1:5a:
34:92:c8:ff:77:ed:22:9d:6f:ac:92:c4:c9:11:0d:2d:a3:fb:
6e:d3:0a:74:a2:e1:46:3a:c0:82:08:4b:6e:42:fb:82:94:67:
1b:6a:aa:f0:d6:21:1f:8f:7a:fe:00:b6:48:27:e6:e1:69:0f:
bd:db:4a:1b:2f:f4:c4:29:f9:13:9e:82:eb:9d:8a:ce:ca:d8:
82:8f:8f:8d:4b:6e:65:1e:3e:07:92:85:18:05:76:68:b7:03:
70:6f:de:c4:77:9c:29:22:09:b2:b0:36:61:3d:d0:93:0e:90:
c4:1a:f9:25:76:15:d6:d5:d0:4a:01:9e:b3:97:db:e2:bd:4c:
7c:90:19:0e:ff:9d:73:9e:6c:f4:dd:22:e0:8c:7c:fc:bb:03:
c9:c8:73:9f:c7:7e:00:59:ad:b3:23:3e:91:00:d8:d3:ce:9b:
34:d0:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net