Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: bfix6rKlqE8EJqmUEWt5fnUhC9EGhbWA1P5DnjGNt8Y=
Subject key identifier: 0B:37:15:13:2C:26:C4:BC:F7:05:3F:DD:2D:DC:33:CF:D2:91:44:E9
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 01962E61CD9FE24279845F625416B3C8069A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 09:01:23 +0000
Manifest this update: Sun 13 Apr 2025 09:01:23 +0000
Manifest next update: Mon 14 Apr 2025 09:01:23 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: qm3EZTT8xV19r5zHFa9ZNIdpJhCJ4R+Uij8nQpFltL4=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:cd:9f:e2:42:79:84:5f:62:54:16:b3:c8:06:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Apr 13 09:01:23 2025 GMT
Not After : Apr 14 09:01:23 2025 GMT
Subject: CN=0b3715132c26c4bcf7053fdd2ddc33cfd29144e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:b4:b4:94:d9:25:b8:8a:5f:00:eb:c6:f4:
a6:c4:91:fb:cf:a6:d3:53:bf:cc:3f:43:3f:42:7a:
ea:26:8a:26:02:99:6c:bf:ff:d7:58:89:fb:af:4c:
37:2e:76:00:a3:1f:a3:49:be:e8:e5:53:8c:7d:0c:
00:ae:49:bc:67:40:cc:d3:2e:af:d0:aa:b4:b3:a9:
5a:db:2b:58:63:7d:cc:08:ac:f5:4a:46:a9:3e:86:
ea:e1:e4:8f:32:1f:5c:ed:1e:57:c3:f3:f0:ff:1b:
29:72:b2:b2:71:f5:96:fd:ea:95:52:af:30:ff:5c:
32:c4:96:37:db:89:9a:43:23:1b:0c:02:e1:24:16:
f6:c7:e7:32:f9:70:66:7f:14:f5:60:20:58:6f:ad:
4b:5e:14:79:55:f7:08:19:e0:3c:e8:11:7a:c9:2d:
cb:e3:cd:71:10:3e:b4:d0:99:71:1e:82:ab:5c:1b:
44:28:1d:30:e8:2f:2f:57:91:9e:72:89:95:58:0d:
cd:68:26:91:e7:90:f3:b0:ed:c5:21:2b:ed:5e:7c:
2e:26:20:bc:39:4b:11:b0:8c:a9:25:1a:40:ea:f2:
e3:64:3a:70:e7:39:4f:a2:cb:69:80:6a:97:d0:a9:
e8:95:a1:f1:7b:77:41:49:63:4b:de:36:6b:ff:73:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:37:15:13:2C:26:C4:BC:F7:05:3F:DD:2D:DC:33:CF:D2:91:44:E9
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:1b:3e:e0:de:4e:a7:f9:a9:5e:ec:4c:6b:62:1c:21:65:
bd:da:61:f4:f7:90:5b:ac:60:29:21:85:8c:d9:ae:cf:05:02:
79:57:e1:88:ed:bc:9b:35:6a:a9:27:52:b2:d2:a1:2f:86:08:
25:fd:9e:80:b2:c5:58:5d:6c:23:59:22:63:99:a8:0e:70:89:
c0:8b:95:27:a0:61:4c:81:dc:b4:13:5a:40:5f:d0:92:61:43:
ed:57:81:5e:4d:44:f8:56:47:fb:a3:5d:c7:9a:47:c7:22:f5:
b5:ae:ec:75:77:da:fb:af:c9:9c:52:6f:ea:eb:c5:2f:55:69:
dc:bc:11:3d:ca:2c:9d:2f:76:2c:92:f0:7b:2e:46:0a:af:d6:
d7:49:cd:47:f3:e0:e2:c1:55:ea:ea:bf:70:3d:84:2f:da:4e:
f2:35:bc:04:c3:e0:59:07:fd:26:99:4a:aa:85:05:bc:7f:25:
b1:1a:d5:5f:c8:c2:7f:63:35:47:be:01:cf:b2:46:65:7c:c4:
a7:16:c4:44:4b:0c:fa:10:19:86:9d:a2:7b:c9:7a:3d:d4:6c:
4c:36:02:43:65:8d:e4:25:0c:19:22:ba:ed:19:7f:8f:9d:22:
db:03:12:77:47:31:af:ca:d2:8e:bc:53:87:75:71:80:5e:52:
56:1f:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net