Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: QLCoZ6SPJD/Q/2TF5aSlV8FOLeWdEJaG2ypbUQzom1U=
Subject key identifier: F3:70:42:75:91:26:58:B0:3F:44:C5:90:9C:EC:8A:59:58:BC:60:EB
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 01962E99B9E4E61A0AF5BEA109C8C35D1C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0E5B
Signing time: Sun 13 Apr 2025 10:02:28 +0000
Manifest this update: Sun 13 Apr 2025 10:02:28 +0000
Manifest next update: Mon 14 Apr 2025 10:02:28 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: ZAztVMWHwOlrrZ9t5SYOmsEQ01r7KtnF9ryF8TIDom0=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:b9:e4:e6:1a:0a:f5:be:a1:09:c8:c3:5d:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Apr 13 10:02:28 2025 GMT
Not After : Apr 14 10:02:28 2025 GMT
Subject: CN=f3704275912658b03f44c5909cec8a5958bc60eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:54:09:a4:53:47:22:26:93:f0:24:2c:f3:
66:61:de:2b:6e:3f:77:8f:66:de:88:62:1f:16:12:
da:7a:53:cd:6f:1b:bc:20:e8:b0:ab:17:82:15:b0:
a0:2b:a1:ba:9d:0a:8b:36:9e:07:64:fc:a3:0a:19:
44:a3:2a:4d:60:3c:84:72:cc:04:86:00:be:fc:d5:
a2:1a:3b:5d:46:f7:56:13:be:58:0c:10:f5:16:3b:
6e:95:b8:91:5a:15:10:62:9e:e2:0e:cd:b2:19:5d:
26:45:40:2c:68:96:3a:62:d6:79:44:ec:b8:a3:f5:
38:5d:7f:ea:41:ac:6d:b3:97:d6:10:8f:48:88:31:
b0:85:d2:66:b6:49:74:24:e4:0a:bc:0a:85:66:22:
11:3b:7b:ae:5c:8f:82:e1:a5:f2:21:4a:94:ec:a8:
82:e0:a4:32:99:90:e4:9c:a7:06:eb:2b:45:ac:ec:
bc:80:60:6e:cf:68:07:68:26:c3:46:7d:bf:30:b2:
a6:07:1d:de:2c:eb:5f:ef:bb:db:7c:32:00:5a:04:
c7:5c:5b:1a:99:9b:e3:af:6a:6a:e5:f3:cf:38:9e:
ad:64:03:91:ea:6e:4f:b3:51:68:6d:36:2a:d2:ba:
5e:e5:80:c6:f7:af:95:47:a6:a6:72:69:9a:59:95:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:42:75:91:26:58:B0:3F:44:C5:90:9C:EC:8A:59:58:BC:60:EB
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:32:01:6d:64:8a:cd:f7:70:28:ab:23:98:f0:10:d9:79:92:
78:3d:33:7d:44:d2:0a:e7:31:33:b7:0e:13:8d:b9:56:49:24:
00:93:94:df:7c:be:88:11:a0:4b:ee:05:a2:97:2e:5f:ba:1b:
98:c5:4f:e0:7e:48:ce:d8:98:15:2e:65:9e:55:1d:0a:71:ec:
ce:e5:8d:ef:a0:a7:23:d9:8d:0e:0c:87:75:51:e0:83:97:16:
db:ce:17:43:ab:43:e7:61:d3:3f:c0:f6:fd:69:a8:50:30:ab:
9e:6a:ba:4a:ef:07:2c:79:cf:68:4a:7a:d0:2a:69:c1:c0:b5:
2c:e4:4d:47:a5:52:65:c5:3a:7e:3a:2b:25:77:60:ad:10:09:
ee:8d:a1:20:4d:f8:45:96:14:fa:1e:6e:29:2e:68:36:f8:65:
70:dc:ff:6a:29:8e:75:47:54:96:a1:f7:90:cf:c4:97:90:eb:
bf:f9:8b:b9:e0:c3:45:af:6c:98:bf:1e:9a:b1:9c:21:0d:3f:
f1:b3:33:fd:fc:0c:11:f1:73:ff:70:44:d1:1a:75:dc:f2:ed:
d6:98:b6:18:cd:7a:d6:b5:35:69:d2:d6:9a:b5:02:15:61:67:
c4:05:65:ef:0a:b1:9d:9a:d8:75:6e:34:20:8c:e6:2b:5d:bc:
c3:2d:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net