Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
File: oQIHcvYouPtR80dRNrd_60smmL4.mft (raw, json)
Hash identifier: XCOBxXtqxMobk1vU+FCu3mbrVkfUEL+MUrvHZDMQuOk=
Subject key identifier: 3A:1E:48:30:7F:9F:96:DF:91:AC:A4:C3:30:D3:4E:07:1D:2F:5D:92
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 01962E2B4E9CC1419B01F54B1E24CE9F8761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
Manifest number: 1132
Signing time: Sun 13 Apr 2025 08:01:52 +0000
Manifest this update: Sun 13 Apr 2025 08:01:52 +0000
Manifest next update: Mon 14 Apr 2025 08:01:52 +0000
Files and hashes: 1: Xn7HlAmazqZObEY4Svfv4ZbMChM.roa (hash: 900LVbegyuqsxm1Su/VFGub5Wi1DlW68cWbr8g1USwo=)
2: oQIHcvYouPtR80dRNrd_60smmL4.crl (hash: pXqtkuEOsMOUlqdFZiqw4gXMUbl1FQGll6Z3Qw8Ooa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:4e:9c:c1:41:9b:01:f5:4b:1e:24:ce:9f:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Apr 13 08:01:52 2025 GMT
Not After : Apr 14 08:01:52 2025 GMT
Subject: CN=3a1e48307f9f96df91aca4c330d34e071d2f5d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:62:78:4f:a0:10:87:7c:0d:b8:6f:e3:95:
37:5c:f6:99:c2:31:e2:41:a9:f0:03:d1:08:81:30:
65:05:b3:2a:30:02:b1:40:72:0e:56:ce:b4:04:86:
5e:a8:e1:e6:c3:59:af:d4:6c:ef:f8:1d:13:ac:a8:
07:78:c0:df:bf:c8:e4:54:bd:b4:3b:aa:8f:87:63:
e1:d3:54:84:65:b2:d8:b7:6e:f5:75:72:d1:c7:96:
b0:0c:8c:b6:08:5e:8a:31:06:4e:78:41:2e:f2:e0:
e3:b9:3c:d6:ce:62:77:5e:64:60:50:a8:3e:de:1c:
ae:04:d7:19:fa:d6:ff:a6:db:68:ab:47:e6:cf:b5:
19:af:a0:d2:dd:7c:7d:40:a0:2a:88:a4:9a:75:51:
65:67:60:c7:88:23:0b:37:d1:17:09:27:7c:c8:b9:
07:5c:66:30:46:1c:94:8f:a0:d7:3e:b4:7a:01:e0:
78:ff:87:6f:20:18:ff:53:66:60:69:1d:f2:df:50:
5a:f7:8c:e0:06:54:a1:fd:c0:6b:7e:04:1f:81:e4:
70:9f:80:d3:bc:6e:40:ca:bb:c7:24:06:06:60:fa:
5e:c8:e8:50:9f:be:71:f6:68:cf:53:1c:f4:0b:f3:
b4:39:12:2e:f2:73:f7:c6:95:67:a7:ef:e5:64:33:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:48:30:7F:9F:96:DF:91:AC:A4:C3:30:D3:4E:07:1D:2F:5D:92
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:aa:89:1a:f0:eb:33:65:a8:55:f9:d9:94:8e:fa:dd:46:70:
75:2b:8a:73:df:89:bf:26:94:9b:39:81:1b:89:51:1a:33:8c:
26:27:d5:a7:f1:40:6a:9f:98:d4:21:a5:92:e5:98:6f:a2:d4:
db:4c:59:58:5b:5a:65:18:d4:d0:5f:92:44:a2:f9:5e:cd:a2:
b3:dc:92:69:66:1d:c5:14:ba:30:83:13:1b:f5:a7:d3:2e:64:
20:e8:ba:7c:c9:91:56:3d:3f:ee:08:6a:fe:de:82:08:0c:30:
27:18:27:cd:3c:79:4e:55:6a:52:33:23:de:6e:bf:d5:82:07:
56:ef:dd:30:5e:54:bb:61:cd:4c:48:7c:aa:c0:5b:de:38:61:
09:cd:05:81:4e:c4:8b:52:a0:ef:57:ad:55:c0:c9:45:a6:48:
96:d9:1b:8c:bd:5b:6b:94:e7:b0:aa:3a:2f:9c:db:f1:16:0e:
93:58:08:ca:b6:be:34:81:cd:f8:55:b3:a3:f3:7b:d5:b7:bc:
72:b9:48:e4:62:3f:48:23:91:0d:39:1c:17:b0:ca:0b:a6:8d:
0f:40:1f:5e:29:b1:4d:78:39:0d:17:ec:99:09:b2:90:59:5a:
03:27:fd:fb:9c:d5:70:ec:fb:99:c1:40:25:06:84:d1:7c:b2:
26:e3:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net