Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
File: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft (raw, json)
Hash identifier: bCaB5HZfK5KEsv2/dIIRJGkhf2dWyX6dvCzkEYTH6cM=
Subject key identifier: 9E:78:3C:A4:CC:C7:5C:AD:45:0A:B4:4D:3C:A0:3F:4B:84:13:A0:6F
Authority key identifier: 38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
Certificate issuer: /CN=385e4d3a6709740dd91b98f5590687b5d596d806
Certificate serial: 019547EC9342DA6BCE0D959101AE7E660C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
Manifest number: 07B3
Signing time: Thu 27 Feb 2025 15:00:41 +0000
Manifest this update: Thu 27 Feb 2025 15:00:41 +0000
Manifest next update: Fri 28 Feb 2025 15:00:41 +0000
Files and hashes: 1: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl (hash: LZxBI+wSwy9H5k7JJfLw1ddze+7+BmVmscO3YcOmMgo=)
2: TVBkLaoLTbZvpjLbalS7glwR5v0.roa (hash: NyRdJ1RerGLrv+6c6D9h46guT6HckjnV+W2YgJhma+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:ec:93:42:da:6b:ce:0d:95:91:01:ae:7e:66:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385e4d3a6709740dd91b98f5590687b5d596d806
Validity
Not Before: Feb 27 15:00:41 2025 GMT
Not After : Feb 28 15:00:41 2025 GMT
Subject: CN=9e783ca4ccc75cad450ab44d3ca03f4b8413a06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:47:fc:84:92:7d:81:cd:d6:06:a4:ba:a8:
e4:7b:0b:5d:02:f2:76:a9:f9:77:47:e8:a9:d5:0e:
7d:f2:1b:9d:ce:d9:ce:03:c9:3a:7d:18:d9:fc:d2:
3d:1d:d8:79:21:fc:77:69:4a:d8:ab:18:85:bf:31:
73:53:b2:f5:2c:25:48:19:57:5e:42:79:3f:f5:6e:
40:db:a8:3d:14:bd:1a:16:fb:b2:45:91:28:2c:b5:
36:c7:c6:70:1b:08:e4:ff:98:c6:9a:10:2d:a8:cd:
f9:d4:91:1d:42:24:61:82:15:e6:75:8a:db:c6:25:
9d:30:fc:fa:23:75:a2:bc:5d:51:ae:9f:ac:ad:2a:
58:bf:73:f8:9c:dd:a1:41:2c:8b:b5:09:76:16:e7:
96:dd:f2:ba:e6:a1:cf:de:28:06:f9:58:70:4c:ba:
00:3c:ac:21:ac:2f:04:17:db:f7:c6:fd:e2:98:68:
30:16:8e:5c:68:4e:2c:f8:59:64:ce:38:6e:f1:b0:
90:03:00:6f:be:d8:03:85:4e:e7:e9:d4:59:e0:1f:
75:96:08:da:f7:e9:f4:5e:08:04:e5:4b:7b:fa:a9:
e6:a0:f1:df:ae:31:1a:bb:24:28:c4:6e:66:a0:9c:
d9:f3:39:80:67:68:0c:8b:b1:5e:f0:e5:db:3c:c8:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:3C:A4:CC:C7:5C:AD:45:0A:B4:4D:3C:A0:3F:4B:84:13:A0:6F
X509v3 Authority Key Identifier:
keyid:38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:ea:a0:0e:57:86:9a:f2:e0:2a:d4:8f:41:6c:35:e3:f3:
96:56:8c:8e:24:1e:f1:fa:8e:1d:97:09:92:53:6d:ee:d0:c0:
9e:fc:9c:e6:17:82:28:d0:69:4a:04:8e:e9:92:3c:7d:85:79:
34:fd:1f:47:c6:c0:cb:b3:21:20:a5:da:c2:0b:a3:23:1d:ee:
c2:9e:2f:b7:da:be:5b:43:e4:4e:c5:04:cb:a4:31:81:27:39:
9c:37:16:26:f4:a8:7b:9e:de:d9:f8:d4:e4:64:c4:83:ce:05:
50:c8:6f:c7:d2:50:09:aa:b5:3a:f4:a9:70:b0:d4:88:58:d8:
2a:7c:94:22:8a:d9:c8:8c:31:5d:06:32:cc:31:a8:33:2e:fa:
1a:82:b1:da:80:10:b0:05:7e:68:d4:52:8c:b4:2f:64:3f:e0:
1d:c6:32:80:ec:d8:79:40:88:55:36:e0:d5:f6:43:1c:6a:3c:
4e:75:ff:67:e1:ba:1f:09:5d:5f:ff:b9:74:f4:d6:67:71:55:
4f:84:b7:1d:63:38:87:d9:02:65:ee:81:94:bd:09:f5:82:ca:
fa:f2:10:b7:b2:08:7b:47:1f:d0:d2:35:54:26:23:f5:75:b8:
55:60:b9:d7:ca:72:ce:06:d6:b4:b0:f4:51:3f:3b:73:8d:58:
ad:f8:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:47 2025 by rpki-client on console.sobornost.net