Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: 6Mzvt75tnohaAPKogZ1OFWWTzARM8Buc7cm/IpT+jDw=
Subject key identifier: 86:1E:0E:C0:AA:FC:CF:0B:A4:82:32:AB:3C:C7:6F:01:24:2B:AF:A7
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 01962E98792A2DF628EAA63FFE6D54D96838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 10:01:06 +0000
Manifest this update: Sun 13 Apr 2025 10:01:06 +0000
Manifest next update: Mon 14 Apr 2025 10:01:06 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: pM5OVKAnxvcHQzbuz8Rb5QzTsUa4DRdZaIhOgJcgYXs=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:79:2a:2d:f6:28:ea:a6:3f:fe:6d:54:d9:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Apr 13 10:01:06 2025 GMT
Not After : Apr 14 10:01:06 2025 GMT
Subject: CN=861e0ec0aafccf0ba48232ab3cc76f01242bafa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:e0:0e:32:30:68:d1:f2:49:25:4e:a5:8a:
09:44:f0:82:19:9a:2b:7c:d9:2a:13:ed:56:f9:69:
62:06:ad:e2:9a:93:06:73:f0:66:aa:80:12:93:1c:
7e:69:8d:d7:1a:15:44:3e:d4:3c:49:13:b9:f0:13:
70:1a:3c:32:a0:a2:25:a5:98:ce:64:0f:64:e6:9a:
58:f6:a8:ce:d8:5c:a0:26:14:b0:9e:ec:44:1f:57:
e6:67:d6:6c:0b:39:24:98:2b:ef:4e:24:32:f0:2d:
98:d4:56:9a:af:50:5c:09:20:a0:c7:78:e3:58:f6:
85:1d:b5:e6:6f:12:fc:7c:b6:25:8b:bb:88:40:16:
cd:5c:2a:a0:8e:33:d4:8d:55:d9:2f:0d:b5:19:38:
81:9e:c4:93:05:b1:cc:4f:1b:c7:b0:c3:86:d3:cd:
87:53:4e:d7:a6:20:db:07:ef:50:a8:54:f0:f9:40:
50:be:a2:c4:d2:28:f7:73:68:46:f9:71:6b:54:02:
3b:4f:dd:ef:fc:28:c1:da:6e:cd:03:ce:30:0f:29:
38:78:62:fe:40:62:5c:a0:d0:f5:00:8d:cf:b2:2d:
41:2b:bc:ab:26:25:74:c2:82:bc:1e:97:40:71:9a:
28:a1:46:4e:20:19:bd:96:56:26:48:01:f2:47:9e:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:0E:C0:AA:FC:CF:0B:A4:82:32:AB:3C:C7:6F:01:24:2B:AF:A7
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:23:a6:20:b4:7e:d5:d3:2d:ab:ed:5d:7d:31:94:8a:13:
3f:22:8e:29:b3:66:8b:6a:31:1f:d2:36:8e:2e:09:a4:cf:f5:
ba:38:fe:c1:f5:95:bd:8c:4f:45:0d:66:fd:9b:34:d5:0f:29:
cc:dd:06:7c:70:f9:23:49:e6:bc:d5:40:08:8b:61:a9:d1:82:
bb:74:51:cf:8b:5c:b2:59:79:db:b7:da:1a:48:f9:03:67:d9:
56:14:32:9c:91:36:fc:f2:ad:53:b7:c9:3e:c9:ef:43:0c:f9:
8d:2b:b9:de:0e:34:f5:e8:af:f2:6e:77:c0:c5:d2:c0:3b:4a:
ba:8c:f0:73:b5:9c:89:c2:b4:ad:7e:7d:1b:0e:d4:2a:f4:a4:
78:a9:ab:09:17:bb:f4:9b:50:9a:ab:a0:d8:12:99:b2:68:a7:
9c:92:1b:c5:f9:8b:05:ef:94:ef:a6:b6:6f:10:f3:7e:e3:eb:
06:63:27:f7:46:ae:70:5a:dc:5b:a6:88:cb:d7:ad:fc:58:0d:
5a:df:8e:cd:53:14:d0:1a:51:c7:e6:74:be:f9:fa:08:82:6f:
f8:d5:62:ac:be:3d:67:0f:d5:3f:95:d2:ef:45:e8:78:9d:31:
0a:29:76:27:05:db:88:2f:17:54:06:51:c8:f8:bf:b6:b2:01:
24:b1:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net