Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
File: OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft (raw, json)
Hash identifier: rmLA66HSTqGTBLW7QHoqNW8dzc3Rc0/kilLwA0Pfy6s=
Subject key identifier: 76:78:30:8E:E2:88:7D:19:F2:40:79:CE:85:A2:30:01:F1:67:B4:09
Authority key identifier: 38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
Certificate issuer: /CN=38f4c25e1df26317cef9e3ca72005f1f7bd1daf6
Certificate serial: 0195EDCB1020DCF7E828E22F550A8514D59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
Manifest number: 14C4
Signing time: Mon 31 Mar 2025 20:01:02 +0000
Manifest this update: Mon 31 Mar 2025 20:01:02 +0000
Manifest next update: Tue 01 Apr 2025 20:01:02 +0000
Files and hashes: 1: OPTCXh3yYxfO-ePKcgBfH3vR2vY.crl (hash: kC01oc1He4EmfjCtZMPQRt7lcNpMsAzVgVHrQlrYTM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:cb:10:20:dc:f7:e8:28:e2:2f:55:0a:85:14:d5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f4c25e1df26317cef9e3ca72005f1f7bd1daf6
Validity
Not Before: Mar 31 20:01:02 2025 GMT
Not After : Apr 1 20:01:02 2025 GMT
Subject: CN=7678308ee2887d19f24079ce85a23001f167b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:55:05:80:ae:af:bc:9e:da:7f:12:7b:fa:
aa:64:5c:4e:6c:f2:ce:ff:c6:1e:f7:c7:e3:64:e1:
c8:a0:a7:23:ef:99:48:50:4b:e9:1c:04:51:e2:ea:
75:af:fa:2e:21:ca:0c:ad:2e:13:ca:e8:40:33:48:
64:dc:6f:ab:ee:e4:48:3d:eb:a0:d1:e0:56:95:b6:
24:db:e8:fd:92:4c:b1:cf:c6:51:d7:c7:d0:17:7b:
a8:6b:c3:06:13:74:a7:b9:d9:eb:4e:1b:d2:11:74:
4a:e0:1d:f4:d6:3d:4a:d4:48:9d:1a:ef:c5:5c:fc:
c4:3f:9e:d3:b8:7b:94:58:65:5f:4a:b9:1e:bb:ca:
b7:09:fd:6d:af:51:15:d2:a1:e8:62:fd:7d:3d:4b:
99:bf:50:3d:e0:e7:a8:e8:3b:ca:37:03:ee:bf:51:
ec:e7:38:8c:60:75:ea:fa:e4:b1:65:21:6b:e3:d1:
f1:6e:9f:9a:41:60:0c:89:b7:78:ae:dc:46:3d:2d:
5f:b9:b1:eb:45:10:af:3a:41:4e:49:c5:02:dc:25:
4b:7d:71:a0:dd:0e:b5:8b:6a:20:55:b7:32:c9:e7:
6e:04:45:b2:66:6f:12:21:97:8c:e5:fd:05:05:33:
4f:40:d1:64:80:09:6b:93:75:aa:41:98:75:ca:42:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:30:8E:E2:88:7D:19:F2:40:79:CE:85:A2:30:01:F1:67:B4:09
X509v3 Authority Key Identifier:
keyid:38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:76:a7:a4:85:6c:c8:93:23:c8:19:ab:15:d3:55:ed:be:6e:
f4:b9:e5:59:2b:0d:02:21:d5:68:d0:27:81:dc:53:8c:45:e3:
2e:3b:ba:3d:8a:48:ec:7d:a3:08:00:cc:cd:69:32:58:b2:fb:
ab:da:f7:62:26:48:cc:74:3b:3d:c7:49:48:0e:b0:39:f1:12:
9b:63:f9:be:20:63:e4:69:bb:d7:ab:1a:a6:46:50:a8:8b:d0:
db:f4:d3:4d:2e:c8:60:c8:88:f4:4a:2e:ea:b0:b0:50:86:a0:
97:55:e1:a2:85:b0:5f:99:40:19:89:78:ed:8c:e6:60:ae:0e:
58:1b:c3:e6:d3:78:e8:19:9a:4d:d2:0b:2a:36:00:22:63:f3:
ba:67:2e:3e:32:5b:86:d1:60:f2:29:3c:eb:a8:b2:49:b5:d7:
fd:a5:be:e7:43:5f:45:c8:56:cf:21:f3:a5:8e:48:13:46:fa:
c6:2a:13:ef:05:66:7b:10:75:b0:1a:cc:c0:ab:47:89:ef:43:
78:83:21:13:46:cb:b5:bf:8d:2c:97:24:f1:05:57:6c:d9:74:
90:0b:08:71:7d:10:93:d9:1d:86:db:6e:35:b1:6f:37:97:0c:
76:c0:f1:6c:13:3c:51:95:b5:b1:e2:f7:46:0a:80:f7:c7:c3:
d5:4b:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:19:50 2025 by rpki-client on console.sobornost.net