Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: HSwR0Sz9OcwZGTGJfGNQ6lkJOeqd4HwXkBr8BxnVEuI=
Subject key identifier: C4:0C:6A:EF:40:73:E7:47:C1:56:C5:B5:1E:1F:93:FA:41:96:82:81
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 0195EDCB232BE276C05A8CB3E356BB6AA0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 1199
Signing time: Mon 31 Mar 2025 20:01:07 +0000
Manifest this update: Mon 31 Mar 2025 20:01:07 +0000
Manifest next update: Tue 01 Apr 2025 20:01:07 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: 4r9k5335KmjT3wkJAfg72L9RYKpsd9jz3RMwbyCDxYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:cb:23:2b:e2:76:c0:5a:8c:b3:e3:56:bb:6a:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: Mar 31 20:01:07 2025 GMT
Not After : Apr 1 20:01:07 2025 GMT
Subject: CN=c40c6aef4073e747c156c5b51e1f93fa41968281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:1f:fa:c3:b1:4a:d1:7f:80:eb:53:56:d8:
1d:dd:a2:de:f0:49:7f:0f:99:ff:44:be:ba:d2:1a:
e8:e2:05:d5:a2:b2:e8:fa:40:38:de:5c:d6:8d:a1:
19:96:e8:a6:d3:9b:2a:f2:59:20:d4:bf:e4:8c:2e:
2f:cd:74:30:2c:9e:81:0f:c6:25:f3:2c:c1:89:7c:
8d:fb:ad:29:2c:15:91:85:08:4b:b6:96:1d:13:c4:
0d:df:81:b3:16:93:49:13:af:78:93:2e:a1:a9:ba:
5a:44:7a:68:a3:fa:87:5b:37:2d:28:5e:48:b9:2b:
a0:90:2b:76:82:ae:25:14:69:e5:38:1c:2d:81:78:
d9:c1:69:2d:9a:1e:ed:54:a2:b7:4e:b0:14:d5:a6:
b9:6b:47:e7:e1:0f:51:c7:a9:2c:8e:06:31:6d:f5:
64:c0:a4:f2:83:f8:fb:86:4d:ee:23:36:04:0f:dc:
8c:75:4d:97:89:56:57:50:a1:2c:2a:5a:ae:b7:23:
a8:83:9e:fe:b5:15:c1:46:dc:a1:c3:a4:83:2b:d3:
b5:60:84:c8:3f:c4:11:b0:65:43:1e:82:b4:e7:5c:
dc:91:de:8f:d9:73:48:7d:25:c9:99:b8:2c:ba:ac:
12:9e:ac:90:5e:c6:f4:fe:79:a5:6e:fa:ce:7e:c6:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:6A:EF:40:73:E7:47:C1:56:C5:B5:1E:1F:93:FA:41:96:82:81
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:eb:e7:b5:4c:4d:d7:5c:87:e7:e7:30:0b:2b:9a:4e:34:
e5:8d:eb:b7:95:33:ad:a7:ae:f7:1f:e8:59:50:12:59:a9:85:
b8:79:ec:b8:f9:dd:da:af:f8:0e:2b:90:db:61:07:b8:1d:d6:
83:4e:6e:5a:27:1c:e1:c1:8a:55:b1:08:fa:27:91:34:24:cf:
f4:5b:c0:e3:ad:0e:97:78:58:d3:99:7e:40:a4:22:50:b0:aa:
a1:27:e2:cd:2c:33:04:b2:75:ce:19:d1:50:77:3e:95:1d:d9:
fd:7c:93:6d:06:fa:1f:f7:21:5b:42:c4:5e:08:e8:9f:82:1b:
1d:99:8e:04:9c:47:73:dc:16:ee:4e:05:7e:dd:a7:f9:7a:8a:
d7:1e:9a:3a:03:ac:1b:e6:cf:39:bb:c6:d7:23:1e:18:26:8c:
92:16:21:1c:c1:1c:6e:65:8a:17:f4:df:99:51:61:70:d5:71:
0d:9a:5f:51:d3:f5:8f:74:3b:d2:2e:ea:fa:80:2d:73:53:64:
12:a1:1d:d2:30:6c:16:3c:21:7e:91:c7:6a:9e:06:30:9e:70:
34:13:d4:9b:78:58:9e:e5:fe:6a:20:3c:69:01:ea:b7:87:0c:
cd:72:fb:86:67:cb:57:13:48:a1:ef:a5:16:23:5e:a1:8f:0f:
c9:d1:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:56:18 2025 by rpki-client on console.sobornost.net