Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: wwY1s9rBrvX7fKMISrr42xrg3WTZqMuIyXQXYZ2xsjY=
Subject key identifier: 5C:EE:46:AB:3C:84:89:A8:5C:2F:B8:8D:D4:68:D4:47:64:83:1E:B1
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 01962E993CC3F7BD9F5BE94B36281B493328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 10:01:56 +0000
Manifest this update: Sun 13 Apr 2025 10:01:56 +0000
Manifest next update: Mon 14 Apr 2025 10:01:56 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: lMXLEvBj9B45+VJM27IQcsO1+JpOCyGqLJ+ErqOMWos=)
2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:3c:c3:f7:bd:9f:5b:e9:4b:36:28:1b:49:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Apr 13 10:01:56 2025 GMT
Not After : Apr 14 10:01:56 2025 GMT
Subject: CN=5cee46ab3c8489a85c2fb88dd468d44764831eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:e7:42:c3:bd:2a:ef:27:5c:7a:0f:38:54:
cb:77:3a:83:a7:58:3d:c3:23:2a:29:7f:8c:00:30:
07:7d:ab:d5:66:28:42:e0:76:ce:86:5d:2a:4a:4e:
d9:1e:6e:c9:8a:b0:20:22:3d:16:80:ab:16:69:28:
dc:fe:6b:90:15:74:2d:ff:e6:0e:43:9c:44:c2:24:
e6:8d:78:63:9a:ba:b5:e2:d3:81:f2:89:2e:19:00:
ff:d8:ae:da:74:db:dd:64:a3:5e:41:d2:03:c9:60:
04:05:9a:25:65:4c:4a:91:62:a2:a5:0a:b6:cd:10:
ae:4d:d0:ad:d8:7a:2a:f9:e3:0f:15:04:75:2c:66:
57:b3:53:c0:96:11:bb:d6:25:2b:b0:70:f9:ee:2f:
04:41:92:be:4c:f9:23:6e:c5:92:eb:2a:07:39:f7:
b9:87:34:76:dc:04:23:31:0e:da:8e:43:5b:9a:da:
39:2a:f6:57:26:47:2e:0f:56:e0:28:3c:29:4f:59:
5c:56:c1:06:6d:28:b8:b2:86:e5:9b:32:fe:bd:1d:
a5:59:78:9a:ab:d6:a5:90:bc:69:35:6c:48:19:ee:
f5:6d:5d:f1:b9:f8:ea:de:98:23:61:a0:94:13:da:
31:3a:77:d7:84:92:cd:1d:c1:d5:72:71:16:ae:0b:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:46:AB:3C:84:89:A8:5C:2F:B8:8D:D4:68:D4:47:64:83:1E:B1
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:15:f1:63:89:d2:6c:8f:5d:3f:2d:23:64:38:35:aa:5a:
52:23:bb:75:c2:d1:b6:7f:9f:81:91:8d:62:e1:4f:6b:02:33:
8c:a2:00:63:41:f6:c2:d7:cf:6d:ae:28:b0:88:4f:9a:3f:52:
4b:32:af:52:dc:21:1d:05:84:02:fd:ee:19:31:89:32:16:07:
2c:b9:2a:ac:dc:38:78:f0:df:6e:d3:2c:2c:5f:75:e1:0d:42:
b6:3f:c8:7c:7d:bb:e1:d7:39:dd:48:29:b4:8f:ce:dd:9f:c9:
c7:78:b7:ce:7e:df:40:8e:c0:a8:2a:d5:dd:2b:c3:4f:28:0b:
0f:9a:39:6e:39:65:24:66:e7:ce:d2:3c:f6:c4:d1:d2:e2:1f:
eb:d7:d7:47:c1:8d:a9:47:e8:4a:eb:48:fa:d2:ae:41:05:56:
20:e7:50:ce:d5:be:b1:39:f9:e3:6d:2a:b0:e1:39:71:e7:ba:
87:72:c9:4d:9f:f8:a9:7f:be:42:d8:82:9f:53:b6:da:73:9c:
63:9e:c9:8f:03:54:cc:85:7a:5b:91:c7:cb:71:00:ae:78:b1:
08:86:36:14:d1:93:34:01:e0:f2:51:23:e1:a1:83:e0:f1:d7:
3c:dd:9e:c7:81:23:d1:ce:e9:16:26:d5:2c:8a:cc:04:51:b9:
6d:b5:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net