Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
File: BmVsWtlzg3LVTAN-OX81vpqpJNs.mft (raw, json)
Hash identifier: GDzqN4pEMmwPRFgKQrpzMScqm3s+sUW2uxXZi+MhpWc=
Subject key identifier: 3A:CA:78:CB:79:3F:BE:E4:84:78:BE:2C:32:73:DF:45:8E:17:93:C5
Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db
Certificate serial: 01962ECF6B909246CF3B283B3FC61A47EF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
Manifest number: B8
Signing time: Sun 13 Apr 2025 11:01:07 +0000
Manifest this update: Sun 13 Apr 2025 11:01:07 +0000
Manifest next update: Mon 14 Apr 2025 11:01:07 +0000
Files and hashes: 1: BOJlFcCNxlleMHUbR9TjmHCDeZc.roa (hash: ujITDNQNM0fpryFmlYjLZ0Q/wbil/+me/IAh88EFBg8=)
2: BmVsWtlzg3LVTAN-OX81vpqpJNs.crl (hash: ksWoct8QJfnefT2g19rdR76thSw+kSUN2Fk/9wn0Pco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:6b:90:92:46:cf:3b:28:3b:3f:c6:1a:47:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db
Validity
Not Before: Apr 13 11:01:07 2025 GMT
Not After : Apr 14 11:01:07 2025 GMT
Subject: CN=3aca78cb793fbee48478be2c3273df458e1793c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:35:e9:ab:6c:fc:f3:5e:57:f7:bb:fa:2a:
bd:6f:84:ae:f1:59:29:20:db:32:0c:3b:2a:ac:1d:
69:80:f7:5b:9d:0c:91:58:ba:0f:c7:d9:50:eb:46:
09:2d:08:85:ee:96:40:57:5a:c8:9b:42:87:54:c2:
7a:de:54:bc:78:13:7d:c5:70:4f:a9:48:85:18:fd:
88:e3:4f:06:71:eb:75:46:20:fd:b4:b2:2a:a5:ad:
f6:b2:60:d3:8c:45:64:c6:86:b5:8e:c5:08:7f:98:
4f:11:be:a7:bd:68:e7:be:9e:6c:50:17:5c:93:bc:
7f:ad:44:0b:40:22:ee:17:09:0e:2e:fc:1d:fb:11:
a3:68:9a:85:77:ae:69:39:53:96:83:da:57:ed:2a:
57:b5:28:fa:22:ff:26:d5:9d:2d:cb:33:d2:08:8c:
5a:9e:78:22:51:a8:47:c6:54:5b:fd:90:73:1a:a8:
25:ae:cc:cd:c6:ed:6f:6e:25:c7:d1:ad:d0:cf:f1:
51:e7:55:c6:9b:d8:1d:93:9a:e7:49:79:7f:83:f5:
85:73:50:d7:b0:b9:7f:65:fb:53:8e:bd:af:56:39:
b3:b7:f0:bd:82:9b:4c:ce:f5:f2:3a:2f:01:26:e9:
53:02:5c:7b:3f:57:6b:58:8c:d0:a5:30:58:20:0a:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:78:CB:79:3F:BE:E4:84:78:BE:2C:32:73:DF:45:8E:17:93:C5
X509v3 Authority Key Identifier:
keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:1d:af:4c:a4:0f:e9:31:c6:69:8c:d9:c7:ca:06:62:99:
c3:1d:7b:d0:3e:72:38:29:8a:71:d8:9e:dc:c9:27:4c:31:b5:
cd:b9:e6:19:ab:b3:69:83:61:49:dc:c6:4e:9a:d0:e9:37:3e:
d1:e1:f9:e3:4b:9e:e5:e2:a0:d3:dd:04:91:9e:82:7f:4b:ef:
0d:88:50:74:1d:cd:e3:95:24:de:0d:fc:54:bc:a0:ce:25:6f:
c0:96:91:8a:0e:f2:b2:f3:ee:49:dd:92:68:fb:dc:03:38:48:
d6:45:7f:42:0e:07:34:ca:04:8f:cf:42:7e:cd:8a:ca:ee:b5:
3b:f5:d3:c8:d8:2b:64:b2:26:b3:dd:8f:a4:4b:31:e1:8f:17:
57:b8:aa:b2:7b:d3:54:d1:32:3f:a7:65:89:df:eb:78:55:39:
41:69:aa:3c:33:8e:21:38:e1:b2:d6:49:63:7b:84:5d:8a:15:
48:50:8d:a6:a2:27:76:6b:2f:b2:3b:3c:44:ce:3b:83:f9:96:
e8:9b:f0:ed:cb:a6:7e:31:ed:b1:8d:ca:df:a4:3b:70:43:7e:
ef:e2:fc:05:99:e8:b9:b9:64:0d:51:54:26:23:50:94:be:13:
ea:1f:5a:0c:07:3c:bc:01:53:e3:7a:c5:b3:8e:fb:28:41:57:
d8:32:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net