Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: SCpZFqKadRk29WARGtXfbK9f7Mpyj7PiXYrvb6nMbTY=
Subject key identifier: 56:0D:18:E5:2E:FA:21:51:4A:6B:91:11:19:8B:21:36:18:2F:62:A6
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 01962F070B381A0AAF3925CCDA084F0614F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 12:01:52 +0000
Manifest this update: Sun 13 Apr 2025 12:01:52 +0000
Manifest next update: Mon 14 Apr 2025 12:01:52 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: i9shpIbWRgSw9ey1GRRi0orgxZQKma9iD4ZfpnQnybY=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:0b:38:1a:0a:af:39:25:cc:da:08:4f:06:14:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 13 12:01:52 2025 GMT
Not After : Apr 14 12:01:52 2025 GMT
Subject: CN=560d18e52efa21514a6b9111198b2136182f62a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:6c:ad:fa:55:e5:3e:db:b6:3e:f1:14:39:
32:13:3d:3e:89:ce:77:a7:0d:40:45:8c:de:66:88:
da:ff:17:3c:2e:5c:ca:ec:e8:bd:aa:78:f4:7c:3d:
78:8d:30:6c:c1:6a:d5:3b:f5:b2:df:3c:36:0b:4e:
c4:47:90:cd:3a:83:c5:20:1c:a2:57:96:9e:7d:0c:
75:08:06:ee:a0:13:7c:51:1f:41:08:19:a0:94:5e:
47:75:f8:4d:2b:7f:a9:62:62:2e:f1:f6:9d:a0:65:
fc:53:28:15:29:a8:16:03:90:59:52:f7:87:69:1a:
3c:1b:ba:e2:e1:d0:86:d5:c0:e6:05:a2:bb:22:d0:
f5:60:19:c3:e3:a8:c3:a2:9f:da:34:3b:c9:67:44:
59:00:71:ff:32:b3:05:c6:03:c9:43:14:96:b0:55:
9e:a9:d3:0c:39:21:cc:32:46:cd:b3:13:41:b2:34:
47:ce:62:af:79:9a:b5:42:be:7e:8a:f3:49:e0:e1:
5b:e6:22:49:a3:96:d7:bd:1f:32:cd:38:ba:6a:8d:
72:dc:ee:5b:42:1b:c6:e7:9a:04:fe:59:0f:22:bf:
c6:e3:bc:09:5e:f2:4e:d6:2b:e2:5b:be:9a:77:d6:
27:46:73:22:32:cb:f8:3a:fb:df:7d:73:6b:15:d7:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:18:E5:2E:FA:21:51:4A:6B:91:11:19:8B:21:36:18:2F:62:A6
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:d8:60:a4:dd:b4:ab:0b:ee:57:ef:39:44:58:b9:b7:e2:
70:29:bd:53:05:87:a7:91:ac:5d:36:3e:f6:41:d2:3e:16:2c:
7e:f3:7c:88:88:9f:f4:55:f4:67:e1:ff:91:39:5b:45:42:03:
34:55:11:39:84:bb:b6:47:61:a4:d6:01:a9:b5:a5:69:c6:a8:
a0:64:07:94:86:36:fb:04:71:31:cb:bc:92:a7:d5:f8:33:28:
01:6d:f6:9a:99:d5:e2:7a:08:ef:ee:51:24:f6:37:2f:36:ea:
08:4a:7f:a1:63:d9:34:c2:a5:be:b2:f3:a2:af:8b:86:92:f4:
78:1d:5e:ef:b6:77:80:ad:a2:a1:6f:df:cc:fc:7e:9e:1c:d5:
c0:ab:67:7c:79:f7:88:51:16:f2:4a:17:3b:e4:aa:ad:23:0d:
1d:37:e3:0f:b2:2d:b1:85:3d:2b:28:e9:0b:80:17:12:a9:6b:
34:5d:ab:fc:7e:e7:67:f8:42:33:51:ba:0f:74:63:5a:0a:d0:
e2:4b:3e:e0:39:ce:5b:a5:c0:7e:69:48:3f:77:75:9a:71:c8:
32:23:11:b1:a0:1c:e4:f1:2e:2c:70:5d:6a:57:91:22:af:4f:
c8:a6:2c:72:5b:08:29:33:03:3f:a9:f9:fe:69:a0:3e:1b:79:
70:79:01:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net