
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: d9oapLQ2ZSQenNti31/zaImS7tM1kVg423enS+NBsgI=
Subject key identifier: 33:56:91:58:0C:8D:C6:71:1D:D8:87:A5:5C:27:88:FC:75:8E:B1:33
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01962DF44A9048867DC13FED4D9A6B4FFD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 14F1
Signing time: Sun 13 Apr 2025 07:01:46 +0000
Manifest this update: Sun 13 Apr 2025 07:01:46 +0000
Manifest next update: Mon 14 Apr 2025 07:01:46 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: DVs7tbKcLjAxxLPk/9Tz+qiDwJRpfnXOBWfIpB3pPXE=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:4a:90:48:86:7d:c1:3f:ed:4d:9a:6b:4f:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Apr 13 07:01:46 2025 GMT
Not After : Apr 14 07:01:46 2025 GMT
Subject: CN=335691580c8dc6711dd887a55c2788fc758eb133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:36:e7:1c:37:90:f6:8f:b3:e9:20:b3:4e:
de:f0:8c:74:83:dc:53:19:37:09:89:87:6f:e9:4e:
c7:11:40:41:be:55:a3:aa:d9:c6:d1:87:eb:d1:6e:
26:b0:b9:80:4b:ee:19:b2:fd:f9:94:03:02:7e:a9:
da:15:57:0e:62:62:6a:54:18:d3:68:e9:78:74:1f:
b3:eb:1e:18:67:e9:7a:e1:b3:7f:38:b8:76:54:40:
db:ed:ab:3d:9c:0d:c6:55:b7:67:a9:78:03:c7:4d:
d2:30:9f:23:90:67:b2:7e:3d:0c:dc:3b:0c:cf:45:
ee:a4:19:5c:b5:ac:ce:d8:2d:c2:45:77:69:98:e6:
38:05:6c:b2:f7:b9:c0:57:64:4a:41:87:8a:0e:4d:
23:94:83:e7:16:64:95:a7:ed:0c:d2:53:18:1d:0b:
ed:29:97:bf:5b:1d:54:44:45:bd:96:86:7a:1c:80:
1c:0f:cd:62:78:c2:f4:5e:8d:40:02:1f:dd:47:7e:
31:50:fc:fb:a3:92:71:09:55:35:25:ac:a3:31:ad:
d5:fb:e6:68:23:22:56:4c:16:cc:51:6f:1f:d2:61:
64:ad:eb:19:96:0e:90:76:40:64:5e:5f:65:9a:26:
2b:f2:72:71:42:cc:dd:dc:65:6f:f8:8b:67:05:33:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:91:58:0C:8D:C6:71:1D:D8:87:A5:5C:27:88:FC:75:8E:B1:33
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:c6:6b:65:87:c0:95:15:b9:f4:07:5a:3a:10:3a:ab:dd:
d3:40:06:ca:c4:ae:ee:3d:bb:f7:de:dd:cd:02:19:a4:21:d0:
96:58:e8:b8:18:7a:25:b5:3d:d0:b0:66:80:f5:8c:6b:d5:0e:
3c:68:94:f9:0d:45:09:24:69:14:65:69:ab:23:3e:e2:29:c3:
a4:09:6e:a9:57:ce:15:83:bb:b0:03:20:c9:5d:99:32:01:81:
3e:10:38:b8:7c:37:f0:c3:de:8b:7d:a8:a3:df:97:98:07:26:
ca:60:23:86:60:b0:a4:de:bd:9a:d5:65:27:29:11:b3:84:f7:
f4:00:c5:93:af:15:76:24:06:f5:18:d7:b6:69:bd:ba:73:59:
ff:cb:f8:1a:f8:a2:97:07:56:c4:c3:1f:9c:8b:fc:6b:16:38:
1f:61:92:c0:19:f4:39:b2:11:82:38:10:dd:0a:4f:20:95:65:
2d:1a:63:94:c0:7c:57:62:37:9a:49:85:76:c2:a8:e5:ce:e4:
4b:9d:bd:3d:77:dc:c9:07:7e:de:33:33:50:6e:0c:30:40:9d:
09:dc:ed:6d:32:d2:9a:e4:6b:27:4a:c7:74:04:28:f0:6f:65:
e9:2b:c9:88:b8:c6:7e:ed:ce:6f:1a:8a:9e:b7:85:93:8b:a2:
1a:23:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net