Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
File: o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft (raw, json)
Hash identifier: ONBgh03Hd/6l4639i2oQMFNSOWMq1zqdN3rwgoAcHLA=
Subject key identifier: A2:60:3B:25:56:42:A0:85:C6:46:DC:B7:7F:A9:7E:35:2D:CC:3F:28
Authority key identifier: A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
Certificate issuer: /CN=a3742347c73e7b3d500f60fb650b82a01c21f749
Certificate serial: 01948EBE2E1225D9856C27B45F396D778017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
Manifest number: 13A6
Signing time: Wed 22 Jan 2025 16:00:15 +0000
Manifest this update: Wed 22 Jan 2025 16:00:15 +0000
Manifest next update: Thu 23 Jan 2025 16:00:15 +0000
Files and hashes: 1: K3KyZfEtYbTHdXEOghKoXhk1m_8.roa (hash: dTX42V4AaNdh3/aam3z5j/mByurbzoPSaCPKTtCXu0o=)
2: o3QjR8c-ez1QD2D7ZQuCoBwh90k.crl (hash: O6PH8JJnrheIvS57PG+u+FAQFogbx+IZJGTLOV4Bljw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:be:2e:12:25:d9:85:6c:27:b4:5f:39:6d:77:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3742347c73e7b3d500f60fb650b82a01c21f749
Validity
Not Before: Jan 22 16:00:15 2025 GMT
Not After : Jan 23 16:00:15 2025 GMT
Subject: CN=a2603b255642a085c646dcb77fa97e352dcc3f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:4e:af:97:51:f7:5b:e7:9a:63:0e:0a:a8:
75:5d:fc:12:53:70:7c:c7:cb:5d:15:51:be:4e:db:
ca:72:b5:e6:a7:2e:d8:f9:b8:27:60:4f:b6:05:26:
4b:21:bb:70:41:e8:04:9c:94:50:f7:5e:18:fb:a5:
bb:2f:92:e9:47:03:40:42:32:5f:4d:08:90:0c:6e:
cd:6c:23:6a:16:40:c6:eb:9a:ad:48:16:04:1c:e8:
d7:c8:e8:b9:33:89:77:3c:b7:b3:f1:a3:28:21:bb:
7d:4f:ae:64:2f:f6:a4:c6:e3:9f:f3:e0:83:57:a1:
36:6a:2f:f4:8a:56:a4:4d:f5:42:3e:67:0a:bc:e9:
8f:6d:36:64:09:60:d1:93:c2:f3:7f:ae:38:2d:89:
2d:1d:67:ca:10:85:13:48:0f:d0:10:f9:c9:a1:ef:
fa:59:0e:fd:89:6c:9c:df:95:cc:6b:0f:a1:43:2c:
09:91:35:03:07:c9:9c:fa:34:ef:ab:01:bf:ae:29:
c4:06:d1:de:0d:30:cb:25:2c:0e:43:8d:ff:42:47:
79:a8:70:28:1f:04:dd:7c:a5:d7:32:8c:b8:2a:9e:
7d:1e:9f:d7:b3:ce:e2:3c:07:f3:ec:46:ca:83:ce:
f3:7b:f1:35:3e:b8:4a:69:27:8f:50:48:57:2c:b7:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:3B:25:56:42:A0:85:C6:46:DC:B7:7F:A9:7E:35:2D:CC:3F:28
X509v3 Authority Key Identifier:
keyid:A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:9f:4f:97:9c:2d:85:8c:e8:c2:0c:a5:5d:52:d3:e9:11:
04:67:50:d7:c0:33:6e:a5:2b:31:c8:c6:10:fc:80:6d:52:6f:
10:97:4f:ee:65:95:a1:25:35:e1:84:e6:19:9c:db:37:6c:d0:
d6:eb:fa:30:5a:fe:a6:a0:6b:6a:3b:17:5b:0a:1c:ea:43:ac:
79:19:bb:10:62:8c:26:02:86:90:40:79:41:57:d4:32:73:45:
46:bb:bb:d3:0a:8f:2f:64:fd:fa:46:a9:5d:9b:c6:ec:5b:d9:
87:4f:d0:a5:bf:86:e7:7c:93:7e:da:21:f4:07:cd:49:a9:de:
45:de:a9:78:2a:df:e5:71:b4:25:ff:2c:59:5c:9c:38:01:f6:
bd:12:5a:06:f5:19:8f:fd:71:b6:9b:d3:17:a8:72:a7:b9:97:
c2:a2:ea:93:98:b3:c1:9a:36:48:fb:39:66:59:73:56:1a:52:
24:7a:74:42:81:09:7b:bc:40:b6:7d:00:ca:af:25:ba:06:38:
4b:5c:09:2b:4f:62:30:3d:9f:bc:62:fb:70:f9:d8:6e:25:81:
75:1e:1a:03:3c:44:26:f5:0e:2e:0f:5e:58:e8:be:02:9b:18:
e6:32:76:bb:49:41:f6:25:28:1d:83:6b:d7:43:f2:78:23:14:
23:1d:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:46 2025 by rpki-client on console.sobornost.net