Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: rwFewFB2clDNXJs7g1rmVTD7YkDOFyAPoBW1L0WUvGk=
Subject key identifier: 58:BF:7C:82:A9:FB:57:D4:2C:49:D6:29:CD:D2:D2:97:46:04:85:B1
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01962E997E0403F9AB011128F903EBC9C9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 09A8
Signing time: Sun 13 Apr 2025 10:02:13 +0000
Manifest this update: Sun 13 Apr 2025 10:02:13 +0000
Manifest next update: Mon 14 Apr 2025 10:02:13 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: H8UuPXF9v2w84dDXaYIP9DOiQJKASfJVm1ElVYnGqYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:7e:04:03:f9:ab:01:11:28:f9:03:eb:c9:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Apr 13 10:02:13 2025 GMT
Not After : Apr 14 10:02:13 2025 GMT
Subject: CN=58bf7c82a9fb57d42c49d629cdd2d297460485b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:cd:41:0f:80:cd:4d:fb:7c:d7:52:5b:53:
a9:70:8e:40:bf:ee:23:c5:25:f4:ad:c2:aa:68:56:
21:fa:1d:a7:df:98:37:dd:df:66:02:e8:8f:89:02:
09:b0:50:a1:74:c7:a8:65:56:88:b1:bd:c5:5d:43:
25:8e:3a:00:94:3a:f1:3a:2c:00:87:d6:35:6b:bd:
bc:38:2c:52:33:16:10:38:89:06:2a:82:2f:43:a2:
9b:67:7e:fa:b9:9e:6b:b9:e2:de:75:a2:5a:9f:6c:
10:3c:70:ca:64:65:39:e3:92:a1:66:30:ca:61:20:
be:96:2f:3d:2b:87:ae:ae:23:40:8b:16:73:f0:f4:
b3:e0:24:f9:44:ec:75:fd:d8:28:95:d9:3b:97:40:
57:eb:a0:69:74:d0:75:5e:bd:18:8f:4f:36:d0:c3:
af:9d:d5:3c:52:2a:f8:be:55:c9:8b:f2:71:2e:1e:
57:1b:0a:58:f5:29:e6:61:c7:46:8e:be:7b:9c:39:
b8:55:6c:17:95:be:4b:5f:12:08:13:ed:27:8a:f4:
67:52:5a:f9:c5:54:f6:93:2a:11:41:db:de:1f:bb:
c9:9e:af:8e:f6:13:15:51:a0:07:bd:40:3d:4b:7e:
53:5f:cb:94:53:34:48:27:45:bb:12:5a:7d:8d:bf:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:7C:82:A9:FB:57:D4:2C:49:D6:29:CD:D2:D2:97:46:04:85:B1
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c5:9b:05:3a:3b:28:6b:be:8e:3d:31:a6:bc:fc:64:85:0f:
b4:80:96:99:a7:7e:ce:76:4a:b0:5c:6c:bc:d7:d9:5a:6d:cb:
ca:a0:8d:d1:d2:5c:31:8a:80:26:10:4c:74:8a:3b:e0:89:bb:
d2:e1:74:59:f0:b1:8e:78:89:4b:c9:2d:8d:15:3c:66:b7:42:
96:5f:5b:28:a1:42:78:35:e1:99:34:11:88:6b:6e:cb:8b:c5:
96:0c:74:7d:85:66:88:91:cc:1d:de:54:04:25:6a:21:ab:11:
a6:4f:33:02:39:a4:fd:ac:70:35:32:91:47:cd:a2:95:25:96:
42:21:4c:d7:4b:45:44:71:f1:a0:1b:fe:33:89:ea:bb:26:6a:
63:d1:1a:78:57:32:32:83:51:1f:4e:53:6f:46:3e:52:d7:26:
15:42:5f:ea:05:cb:78:b4:bb:df:37:71:54:a2:4c:e2:ec:e0:
b7:9e:d7:bc:78:c6:18:6d:90:81:85:d5:f2:0a:29:f4:fd:e1:
00:74:ba:75:16:fd:24:1d:13:d4:09:74:18:cb:98:e5:25:66:
f2:b8:7a:de:02:fe:5b:da:0d:17:32:fb:07:10:b8:b6:b4:26:
6b:ea:e1:85:28:6d:df:97:27:f3:e7:f4:55:2a:b9:a0:f6:3d:
d5:1c:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net