Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: 9kOkFgMXo/Q6yy/7KCJIWdxOMzIvE7DnxWvQHUAO+DE=
Subject key identifier: 52:84:1E:CD:14:A1:70:31:38:3F:A0:B8:3C:85:E6:2D:E5:32:1A:16
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 01962E9903E966F6E79C6F879C0714A3676D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 1388
Signing time: Sun 13 Apr 2025 10:01:41 +0000
Manifest this update: Sun 13 Apr 2025 10:01:41 +0000
Manifest next update: Mon 14 Apr 2025 10:01:41 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: hhphy2tR21FkRhZdPLuM30o+Xk+Yc8N2qeAocI49dqU=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:03:e9:66:f6:e7:9c:6f:87:9c:07:14:a3:67:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Apr 13 10:01:41 2025 GMT
Not After : Apr 14 10:01:41 2025 GMT
Subject: CN=52841ecd14a17031383fa0b83c85e62de5321a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:d2:73:08:7b:41:7f:88:a1:1a:d9:f8:c5:
6a:9e:85:bf:85:bd:f2:5c:3d:0b:fc:61:f2:9e:87:
c1:e5:f4:4e:7c:17:40:de:08:8a:56:24:19:48:0b:
5a:29:ea:4a:ce:00:57:79:ad:e4:12:a2:5c:36:81:
b5:87:6f:cb:9d:ef:98:98:53:25:c9:48:6b:e3:94:
29:06:28:8d:d0:15:fe:49:11:28:16:7f:b6:7f:2c:
97:c4:67:3b:55:30:e6:cb:8e:13:d8:47:76:d8:0f:
4c:90:a2:c4:72:f2:7e:ca:ca:2d:ca:c1:3d:c2:6f:
ad:78:68:77:03:35:e6:52:4f:0a:33:01:f5:6b:b7:
7b:33:dc:6d:0c:56:1d:d2:83:ab:bb:7d:d9:5d:cb:
13:4a:7b:39:13:40:61:17:71:93:0a:d1:61:42:29:
03:ac:98:3b:5c:2c:eb:dd:cf:6e:52:ea:66:7b:cb:
8b:3b:49:af:e1:35:e1:1f:4b:3c:db:a8:13:7a:94:
1f:4c:6e:21:63:e1:24:70:cb:14:3c:aa:bc:7f:1f:
fc:4c:96:02:e8:af:10:0d:18:1e:11:39:93:5d:4d:
72:ae:4f:bf:8a:a7:63:03:f6:17:37:48:ef:1e:e8:
9f:f3:f8:ae:87:e7:5b:94:db:bd:4b:80:c9:15:6b:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:1E:CD:14:A1:70:31:38:3F:A0:B8:3C:85:E6:2D:E5:32:1A:16
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:82:cd:0a:21:53:dc:c5:53:76:e1:5d:52:fb:b7:ba:0d:
16:a6:49:84:8d:fb:3d:ab:3a:16:34:b9:a9:1d:21:e6:c7:ba:
da:b2:a0:57:a7:e4:a5:68:d9:a2:2c:b2:1f:27:8a:89:40:67:
a7:08:6c:a4:05:ac:96:ae:71:82:9e:b7:f4:fe:e1:19:54:16:
b3:55:a5:19:89:c1:20:25:69:65:9c:8f:f9:2f:f1:5b:9d:59:
72:a2:b8:4b:e4:87:5b:d5:e2:0c:89:cf:33:7e:6e:13:f6:89:
72:b7:d2:c2:f0:d1:73:cd:d5:64:79:e7:27:2f:dd:7e:4b:d5:
ed:6f:ce:1d:af:e7:9c:b4:0e:61:f7:07:4a:67:e4:79:79:05:
70:72:da:f7:c7:ca:89:66:92:f8:ca:e6:08:7a:23:0e:11:30:
69:93:7b:f5:86:c6:10:13:78:c3:6d:ca:e8:ef:50:5c:45:e1:
d9:c4:66:72:67:32:5c:69:1c:82:ca:88:36:8b:d0:dc:dc:ea:
51:0f:cb:7c:d9:2b:98:50:53:92:3f:70:ce:ff:f9:1e:ae:69:
22:bb:9c:09:ef:58:ea:ee:3b:b9:22:e0:51:09:86:28:44:f6:
ae:6d:4a:37:6e:fc:d1:0c:c3:16:95:a0:bb:ed:cc:08:5d:e1:
7c:35:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net