Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: XybaSCbEuHAwecfc5BluFjMEZD8tFyF6wSfvmyMICbg=
Subject key identifier: 06:EF:14:73:17:CE:C3:35:46:4E:80:1B:BF:CE:7F:32:8F:63:24:84
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01962E989F0E7AA26B8722E6DCA5E5BE0DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 03AD
Signing time: Sun 13 Apr 2025 10:01:16 +0000
Manifest this update: Sun 13 Apr 2025 10:01:16 +0000
Manifest next update: Mon 14 Apr 2025 10:01:16 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: yKNwDPJkZMXxzDNK7JvDaa3SKv1TfdekUcLxeHMaeTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:9f:0e:7a:a2:6b:87:22:e6:dc:a5:e5:be:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Apr 13 10:01:16 2025 GMT
Not After : Apr 14 10:01:16 2025 GMT
Subject: CN=06ef147317cec335464e801bbfce7f328f632484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:9b:59:fa:ee:8d:84:75:de:de:e3:34:b6:
76:45:f1:8d:04:8b:88:bf:85:ed:f1:c0:b8:3c:cc:
04:51:b0:1b:8e:98:08:8a:68:13:da:31:b9:d0:d0:
01:29:45:59:36:1d:24:70:cc:a8:89:32:fb:4c:0b:
6d:58:70:96:e5:f0:c7:b1:f1:d7:69:8b:7d:52:5e:
53:5f:46:6c:53:b7:ba:78:cd:08:64:ab:65:ef:fa:
81:b1:88:20:7f:31:2d:4d:cf:f7:c6:d7:a5:45:e8:
c3:b9:19:95:7d:c3:7f:75:b1:77:ca:2a:51:59:2f:
58:b3:34:26:f2:2f:3e:c5:3d:4f:bb:9f:3d:f3:9f:
23:62:88:b7:60:96:3e:a2:70:14:9d:c0:c4:e2:d0:
6b:93:3d:4c:08:0f:7f:92:4c:58:eb:20:98:e7:1b:
09:61:f3:fa:8e:72:aa:3b:44:3f:ae:d7:7f:04:cd:
6a:8c:47:8d:ad:8c:84:77:b0:9f:79:c1:51:3d:0e:
59:1d:0c:d7:ec:9c:5f:ca:c8:64:4d:38:f6:44:56:
45:a5:a7:48:00:90:d3:a0:65:02:89:c3:62:bd:64:
8f:99:1f:12:1d:82:f7:54:3d:21:7a:2c:03:00:de:
7b:45:36:d9:24:78:6e:b9:a6:1d:e8:13:a3:72:7f:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:14:73:17:CE:C3:35:46:4E:80:1B:BF:CE:7F:32:8F:63:24:84
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:85:08:43:cd:7e:19:6f:b6:ef:d4:d8:8e:6c:41:15:33:
f0:39:b4:a2:6f:a1:ee:e1:17:83:e1:1f:7a:13:ca:5b:dc:3f:
81:db:e8:fc:f6:75:99:61:23:dc:46:11:b5:e4:26:c7:4f:ef:
89:8b:6a:5a:70:b2:9a:9c:ec:ef:de:02:8d:8f:ce:97:d8:ba:
1b:66:0b:e8:ee:b4:64:ce:29:fc:e5:b0:35:19:bc:6f:cc:22:
5b:d2:e1:14:4f:f0:3d:9a:38:50:98:be:48:14:9e:8c:ac:d0:
17:87:82:a8:4e:e3:72:d0:a2:a8:26:f7:02:0e:c5:4f:09:2d:
28:cf:b9:60:a3:4f:5a:76:55:a0:cc:2c:49:ca:79:dc:b1:27:
36:d5:8f:f6:3e:2b:7b:eb:4d:b5:a7:ed:00:95:d5:53:41:58:
7a:8d:6e:dd:76:b1:72:b4:18:f2:ac:80:17:d6:7e:42:a4:cf:
7a:9b:6e:f1:20:f1:82:84:7a:6e:a8:22:fa:07:2e:d3:92:f1:
78:a7:f1:58:d2:12:9a:08:fa:09:ec:85:5c:7e:7b:90:c2:45:
36:29:3b:b1:95:23:8f:b0:5c:e9:01:83:64:ac:7c:3d:6e:b2:
22:84:fb:3a:74:90:fa:01:e1:2a:dc:99:31:51:b0:61:fa:b6:
bb:84:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net