Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: wUBIiVUqI4lVjMBSLfgt53EkzRJOCK3WyO88Ck0TmeA=
Subject key identifier: 3F:C9:ED:71:14:28:DE:E9:79:5C:0C:E8:48:80:B8:6D:71:E6:31:B8
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 01962F74CE91891AF30708FE63D8E1A5C894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0C47
Signing time: Sun 13 Apr 2025 14:01:46 +0000
Manifest this update: Sun 13 Apr 2025 14:01:46 +0000
Manifest next update: Mon 14 Apr 2025 14:01:46 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: sSQehimaq29wd+lT9dMrXcTvDa4oUSGqHIfVwE5KQvQ=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:ce:91:89:1a:f3:07:08:fe:63:d8:e1:a5:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Apr 13 14:01:46 2025 GMT
Not After : Apr 14 14:01:46 2025 GMT
Subject: CN=3fc9ed711428dee9795c0ce84880b86d71e631b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:8e:a6:8a:ec:f0:a5:81:16:6c:4b:9a:b1:
68:0c:eb:1d:0d:40:40:a3:12:a9:34:c3:db:bd:84:
60:e8:11:8d:a9:a2:f3:2b:31:c4:b2:57:ec:b5:0b:
ec:74:d4:8e:a5:01:1a:25:65:64:93:92:65:e3:31:
4f:aa:fe:b9:dc:46:e3:85:4f:8b:f4:6a:f9:a6:60:
1e:9b:de:86:fb:d0:14:39:04:8f:6b:e8:c1:3b:66:
7b:7f:38:eb:4b:e3:59:7a:bf:31:6c:d0:56:e0:02:
f2:84:21:a3:fc:bd:7c:95:79:7b:e1:5d:24:a2:86:
75:a9:4c:db:b4:3c:c1:89:42:f8:6f:62:06:5d:37:
c7:2f:c9:51:9e:e9:72:1a:f6:60:ee:85:06:27:63:
26:1b:47:a6:16:18:b0:7d:1a:a4:99:12:c9:36:0a:
10:11:d0:a9:da:2a:ee:81:cb:3e:f6:01:e8:be:27:
eb:cb:cc:f1:91:41:5f:f6:e0:4b:cf:d4:a6:76:a9:
98:72:c1:61:2a:83:d3:08:21:ff:c7:c9:41:73:de:
45:31:5c:40:83:91:41:b3:e9:36:2e:e2:f9:32:b1:
36:3d:b8:b5:56:38:2b:e4:85:fc:c1:38:20:a0:49:
0d:03:b1:b0:4e:12:21:60:56:28:4e:11:9f:e3:ab:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:ED:71:14:28:DE:E9:79:5C:0C:E8:48:80:B8:6D:71:E6:31:B8
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6f:85:9b:77:c6:b0:e2:54:f7:44:32:44:6d:d0:00:4b:f4:
e3:a7:e7:09:37:ba:61:de:2a:c9:b6:ed:22:36:61:44:a5:8d:
d9:bd:76:8f:20:14:de:66:75:07:80:42:37:2c:63:d3:a6:e4:
4b:c1:70:52:22:30:ae:96:e0:71:8b:1f:4d:c4:e2:d1:ef:48:
d1:93:8a:d3:93:0b:d5:1d:9e:15:7a:e2:3c:a9:70:b3:62:b1:
64:0d:74:11:70:c6:bf:93:1f:a8:6d:3a:e0:93:16:bf:66:2f:
0e:dc:3f:75:da:d9:bf:35:5c:55:3e:da:ff:61:38:51:38:81:
52:8a:c4:1a:78:fb:36:6d:a8:42:6d:eb:4a:17:ae:95:2e:50:
2c:53:6b:80:28:dd:87:04:5c:eb:33:c1:b7:6c:ea:62:b7:fd:
96:2f:19:3f:03:97:72:72:b7:7f:3f:e0:ef:c4:27:d4:22:71:
c9:28:35:1b:d9:d7:69:c0:96:f7:9a:af:42:e3:53:19:eb:97:
2b:14:78:dd:f8:f6:26:fb:bb:5d:6a:b5:ac:59:0d:7a:88:bf:
05:74:37:a4:12:ef:20:18:3e:b1:68:e6:3e:47:57:7e:4e:e1:
58:94:20:27:7e:83:67:f6:06:4a:cc:69:07:19:d8:e1:c0:3f:
ea:dd:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net