Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: iBzd79si55z38RyayKvYXWZUfTVG51EvSBMYrDJc4hU=
Subject key identifier: 38:A6:DD:3F:A7:C5:E1:E7:65:9A:66:07:99:7B:4D:8A:92:7A:D7:F4
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01962E2B028AA43EE2F1C09AF78834E6E40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 14ED
Signing time: Sun 13 Apr 2025 08:01:32 +0000
Manifest this update: Sun 13 Apr 2025 08:01:32 +0000
Manifest next update: Mon 14 Apr 2025 08:01:32 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: 3pr/gJvF8+5RXx04CF8xAnT1zPIXFSgpy/MYld2PooM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:02:8a:a4:3e:e2:f1:c0:9a:f7:88:34:e6:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Apr 13 08:01:32 2025 GMT
Not After : Apr 14 08:01:32 2025 GMT
Subject: CN=38a6dd3fa7c5e1e7659a6607997b4d8a927ad7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:b9:78:28:93:af:4a:4e:c6:18:8e:69:51:
51:b1:8b:74:e6:33:09:ed:70:fd:04:24:7e:20:19:
bf:2f:cf:27:86:c6:5b:33:be:13:49:49:10:ae:36:
24:68:11:a1:05:53:c3:87:60:c1:f5:52:39:d2:87:
be:a9:6a:a8:2b:92:fe:86:8c:09:b3:2c:89:63:45:
2c:ac:1a:15:30:34:f7:6c:ee:44:9e:2c:2f:8d:0d:
ce:51:79:84:37:57:88:89:b4:ce:a0:5d:10:9b:47:
17:db:11:64:37:6e:37:0a:9d:ba:7f:aa:b0:00:b2:
26:3f:b2:63:f8:bc:81:e4:cd:6e:96:47:54:f7:53:
d6:4c:a3:2d:c1:b3:16:f2:9a:ea:a7:ba:7a:85:30:
0e:66:5b:4d:56:11:86:05:35:fb:24:2d:a0:40:37:
73:8e:3a:f3:71:38:a9:49:af:84:45:27:83:2a:5b:
b2:b6:83:f6:ce:c6:3f:d3:c4:e1:31:12:ca:74:f8:
b3:6b:fa:3f:cc:1e:9d:0a:93:51:cc:c5:65:dc:31:
bc:d2:82:93:d4:c6:7a:e5:30:14:9d:ff:55:35:a5:
4a:2a:ea:69:16:ce:17:e5:4c:9d:09:ee:43:e3:dc:
80:53:b4:f2:4f:af:b3:e8:20:61:5f:ab:34:de:c3:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:DD:3F:A7:C5:E1:E7:65:9A:66:07:99:7B:4D:8A:92:7A:D7:F4
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5e:0c:93:11:7e:76:29:06:e5:e6:0b:b6:7b:4d:e7:db:70:
f7:d6:a0:00:86:9e:da:34:e0:03:f9:1c:1b:9f:a6:d2:96:0c:
7e:c6:fd:86:66:57:7f:ad:80:b0:5b:cf:47:9f:5e:49:c7:12:
99:17:6c:77:50:7a:8e:69:24:3d:d4:73:08:1e:fd:65:20:93:
1e:04:82:6d:43:ab:eb:37:cf:bd:33:19:ed:bd:6e:6a:46:00:
32:f2:34:94:89:c1:dc:6e:2c:5b:b0:48:bd:ae:a7:9a:7b:26:
47:e7:4f:30:f5:ed:93:fe:e3:12:93:95:56:7d:eb:6a:7a:ee:
f2:68:56:a9:30:70:f5:0e:da:9a:fd:3a:a9:b0:fa:bd:a8:21:
96:e4:25:ea:75:cc:30:a9:92:5c:26:cb:af:4a:c2:16:93:b8:
96:6b:e4:b1:b1:31:a5:90:87:44:d6:ed:4b:42:13:e2:ba:80:
f8:aa:63:07:41:b9:aa:70:1f:15:de:60:85:bc:0c:b0:14:8b:
4d:34:ca:86:89:77:a7:ac:0c:ca:b0:e5:b6:2e:91:25:24:a7:
de:43:50:ca:0a:56:3f:b3:21:dc:0f:a8:6f:72:f0:a8:6d:5c:
da:fb:69:2f:ac:ab:e7:d5:64:6a:e9:5e:fe:01:ab:08:f7:b2:
6e:03:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net