Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: 832GYc37AHnhUsGQRQ1BfS8NyeTtOwifo9SRXsZjCqk=
Subject key identifier: 14:96:A6:4B:1F:D7:B6:DB:20:9C:99:88:29:A0:B3:0F:E9:96:E9:C0
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01962E2B458EE440AEB7467B96999E133489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0778
Signing time: Sun 13 Apr 2025 08:01:49 +0000
Manifest this update: Sun 13 Apr 2025 08:01:49 +0000
Manifest next update: Mon 14 Apr 2025 08:01:49 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: UdPsxpuJnWk1xybmoojjfzi+C6lSlBGJ5GypUJOaiCE=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:45:8e:e4:40:ae:b7:46:7b:96:99:9e:13:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Apr 13 08:01:49 2025 GMT
Not After : Apr 14 08:01:49 2025 GMT
Subject: CN=1496a64b1fd7b6db209c998829a0b30fe996e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:7c:b4:f8:37:98:65:60:1e:e3:f2:73:5e:
e6:0a:ef:d6:7e:29:48:e7:68:43:a7:aa:6b:a3:01:
f6:82:41:b3:41:6b:d7:55:13:f5:8f:d3:51:ec:21:
60:09:9b:aa:07:0f:91:b9:12:e9:7d:df:3e:b1:96:
55:dc:5e:dc:91:69:79:81:9a:76:de:bd:30:64:ae:
74:49:02:a5:00:0a:d3:46:7f:72:c8:f7:b7:b3:f3:
4f:42:f1:f0:fd:5a:9b:41:d0:cd:e6:0a:8f:9e:6a:
df:38:89:af:c2:dd:69:b5:9d:fe:0f:0d:14:d8:29:
3d:dc:03:70:c5:77:dd:18:0d:ce:4a:d3:89:84:01:
ca:55:90:35:37:75:c3:95:77:be:3f:35:af:15:fa:
cc:7d:8d:5d:ed:56:4e:b8:78:a2:75:84:8a:9d:06:
d5:40:9e:9b:68:40:f0:4c:a2:63:d3:bd:d5:7d:a5:
3b:c4:bb:01:ea:7f:8f:fe:8d:fa:2a:36:5e:37:0d:
98:80:ec:03:a2:8a:ec:80:56:51:22:f4:7a:d1:98:
99:62:65:fb:89:36:51:0a:3e:b2:ff:1f:0a:19:02:
4e:0c:c3:9b:b7:0d:b9:fa:87:05:03:bf:55:f4:28:
93:64:0a:f0:8c:46:ff:42:ae:d4:12:7f:08:ee:12:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:A6:4B:1F:D7:B6:DB:20:9C:99:88:29:A0:B3:0F:E9:96:E9:C0
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:df:d1:89:b7:30:42:3f:8d:c8:33:d2:20:a0:5d:43:8b:
44:b5:3e:1e:18:4a:a1:59:3e:51:6d:34:72:9e:57:85:19:a0:
01:a0:ba:05:10:7b:54:90:df:a9:37:e8:41:19:f0:a7:2e:07:
29:97:09:a8:9a:73:9a:2a:ec:8a:89:e7:df:fd:4d:7c:aa:1c:
e5:ee:71:69:d4:8a:40:c9:f7:12:66:0c:1f:b8:47:f3:21:c5:
35:29:87:fc:68:1b:a3:7d:5e:6a:e2:37:7d:bc:7a:b5:d9:53:
0c:1e:b6:fb:5e:d2:3c:08:cb:9c:b9:dd:f1:aa:e8:da:6c:60:
f1:1a:4d:8d:7f:6b:76:a6:72:bc:b5:75:90:53:66:ab:5e:57:
18:8d:e8:ed:12:b5:f3:3d:38:79:96:af:2c:6b:08:f1:91:9a:
d5:c1:50:6e:5a:84:b9:ee:c8:02:02:e4:85:fb:d8:88:04:aa:
e4:bc:08:2f:04:e0:0c:2a:34:ef:f9:52:fa:47:2c:33:b3:13:
e1:4c:8e:66:13:6c:c1:72:88:f2:d4:2e:61:8d:3c:18:48:d8:
58:cb:76:f0:05:f2:8b:ff:07:39:28:8b:14:35:fa:cc:bb:2b:
d4:e3:ff:f7:2e:12:98:f0:70:f1:3b:b9:9b:44:36:2a:24:4e:
93:b9:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:39 2025 by rpki-client on console.sobornost.net