Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: iasT+/B+jibuD1FDpNZP3hZCFhnub1tZP0n46/JL8Dc=
Subject key identifier: 08:D9:06:56:93:E2:55:BE:34:1C:DA:37:FB:5D:2C:1E:6C:AC:45:37
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 01962ECF65A1152B70FBAAECBE7497DB844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0CD3
Signing time: Sun 13 Apr 2025 11:01:06 +0000
Manifest this update: Sun 13 Apr 2025 11:01:06 +0000
Manifest next update: Mon 14 Apr 2025 11:01:06 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: ulxMK6TpddS7QrOw3rsF/RiwDo+MQ0etgUckzHwf6JU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:65:a1:15:2b:70:fb:aa:ec:be:74:97:db:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Apr 13 11:01:06 2025 GMT
Not After : Apr 14 11:01:06 2025 GMT
Subject: CN=08d9065693e255be341cda37fb5d2c1e6cac4537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:b5:8c:1f:ca:00:bd:9e:cd:62:c9:1b:02:
8e:4d:c8:74:03:80:ec:a4:dd:33:b3:09:c3:6a:29:
15:79:b4:ce:22:1e:09:73:1a:a4:ae:47:9a:4f:56:
79:f3:9f:3f:0f:a1:9a:7f:9b:93:59:e1:94:9b:76:
6e:cf:b1:15:a1:bd:41:c5:ca:f1:cd:66:d5:69:23:
16:3d:49:60:eb:4f:35:97:a9:d5:18:84:4f:0b:6d:
6c:f6:ca:19:76:f1:3f:98:4f:f0:d8:22:c6:90:26:
67:5b:78:be:db:d2:6d:d7:60:18:51:c4:2a:c9:18:
17:c7:98:c5:68:b8:2f:fe:7f:5b:4e:93:65:0b:e2:
fd:39:b2:62:d3:ed:19:ef:fb:1d:e2:55:a8:db:77:
24:6f:00:4b:53:63:0b:93:28:0b:ef:81:8b:cb:83:
82:29:2a:70:76:13:a3:4b:ac:da:8e:77:d8:33:2b:
4c:b5:ca:28:ad:50:b4:d7:34:1f:18:a5:22:be:b5:
09:e1:d9:2c:ad:58:e3:88:3f:0f:50:d4:c7:db:1e:
57:a0:fe:dd:41:3f:5d:8b:b9:fe:1b:ec:21:f6:a4:
88:2c:81:34:ac:07:da:2e:2c:f3:97:20:90:80:2a:
7d:7c:44:32:0c:4d:2e:4f:e1:b0:2c:d0:bd:78:63:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:06:56:93:E2:55:BE:34:1C:DA:37:FB:5D:2C:1E:6C:AC:45:37
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b7:41:b0:d3:ef:cb:9b:69:83:c4:06:be:4b:08:cb:9f:74:
75:31:b0:48:07:df:8a:02:0b:ea:a3:df:59:a0:68:f8:e5:8a:
9c:8f:ed:f6:00:11:7e:10:45:3f:19:f5:c6:3b:fa:c1:5f:00:
bf:92:3b:eb:d9:fc:2a:09:63:39:65:63:02:22:e5:c4:e0:48:
e1:02:cb:d2:0f:83:21:83:f7:b0:52:ba:44:5d:13:f6:56:23:
a3:70:16:52:1b:2e:1c:c1:ff:81:d0:ac:ac:32:a5:be:4f:72:
59:3a:e0:47:3e:ab:53:c4:e4:cf:b8:bd:1e:1e:b8:23:0d:a4:
ca:85:96:fa:a3:46:be:53:c8:f9:a4:22:c2:10:3c:78:f7:58:
e2:81:d0:cd:76:a7:c8:2c:a0:20:03:3c:e3:a2:35:4a:6e:97:
da:f1:65:30:08:7d:9b:4f:39:dc:02:80:21:de:80:e0:27:19:
94:02:8b:ae:1f:bd:5d:e4:e5:6a:b3:44:42:61:b6:cc:5b:6e:
d1:ba:7a:5f:0b:56:5c:c4:6e:dd:2f:84:f8:7d:41:dd:b5:b1:
4b:13:84:89:b6:4c:ed:6f:20:30:52:25:73:79:b6:76:c7:41:
67:b0:a1:b2:7a:ae:70:da:94:d0:d1:92:b9:57:14:3b:ef:22:
c7:4e:4f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2WhFStw+6rsvnSX24RNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3
ZDc1NjgwHhcNMjUwNDEzMTEwMTA2WhcNMjUwNDE0MTEwMTA2WjAzMTEwLwYDVQQD
EygwOGQ5MDY1NjkzZTI1NWJlMzQxY2RhMzdmYjVkMmMxZTZjYWM0NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdK1jB/KAL2ezWLJGwKOTch0A4Ds
pN0zswnDaikVebTOIh4JcxqkrkeaT1Z5858/D6Gaf5uTWeGUm3Zuz7EVob1Bxcrx
zWbVaSMWPUlg6081l6nVGIRPC21s9soZdvE/mE/w2CLGkCZnW3i+29Jt12AYUcQq
yRgXx5jFaLgv/n9bTpNlC+L9ObJi0+0Z7/sd4lWo23ckbwBLU2MLkygL74GLy4OC
KSpwdhOjS6zajnfYMytMtcoorVC01zQfGKUivrUJ4dksrVjjiD8PUNTH2x5XoP7d
QT9di7n+G+wh9qSILIE0rAfaLizzlyCQgCp9fEQyDE0uT+GwLNC9eGPeZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjZBlaT4lW+NBzaN/tdLB5srEU3MB8GA1UdIwQY
MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt
MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk
LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbdBsNPv
y5tpg8QGvksIy590dTGwSAffigIL6qPfWaBo+OWKnI/t9gARfhBFPxn1xjv6wV8A
v5I769n8KgljOWVjAiLlxOBI4QLL0g+DIYP3sFK6RF0T9lYjo3AWUhsuHMH/gdCs
rDKlvk9yWTrgRz6rU8Tkz7i9Hh64Iw2kyoWW+qNGvlPI+aQiwhA8ePdY4oHQzXan
yCygIAM846I1Sm6X2vFlMAh9m0853AKAId6A4CcZlAKLrh+9XeTlarNEQmG2zFtu
0bp6XwtWXMRu3S+E+H1B3bWxSxOEibZM7W8gMFIlc3m2dsdBZ7ChsnqucNqU0NGS
uVcUO+8ix05PBg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:55 2025 by rpki-client on console.sobornost.net