Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: uDUrISJY5CWd5HTPvP+Sk9BnBfLYS1/NVbQeuNxicIs=
Subject key identifier: DA:F7:A5:EC:D7:C0:33:F5:C7:B7:BD:D5:97:E1:2D:36:55:67:DF:84
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01962F3DB13FDEE876F25957FCA9F16CE1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 0DAE
Signing time: Sun 13 Apr 2025 13:01:34 +0000
Manifest this update: Sun 13 Apr 2025 13:01:34 +0000
Manifest next update: Mon 14 Apr 2025 13:01:34 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: BgS73woCyePpbAedccn+UWowToSqYmIWnhZP/P1T3BM=)
2: T24Mb-6KOyII9Zj4ApmqBzXBKxg.roa (hash: l/FPlArXvYmwy1iwUTLkf9bdXt1EQpVFOKjPM76DwnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:b1:3f:de:e8:76:f2:59:57:fc:a9:f1:6c:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Apr 13 13:01:34 2025 GMT
Not After : Apr 14 13:01:34 2025 GMT
Subject: CN=daf7a5ecd7c033f5c7b7bdd597e12d365567df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:de:0e:6c:89:4c:80:da:80:25:24:34:26:
2f:20:06:20:df:6e:b2:0b:a7:af:ed:bd:c4:3e:5c:
ab:0c:8f:be:46:1b:f7:fd:d5:7d:b0:ab:47:dc:e2:
02:f8:e9:18:16:40:27:dc:7f:f0:3b:a2:5f:f9:5e:
89:63:80:ea:a5:a6:a2:f7:40:15:16:92:bc:bc:af:
1c:fd:91:00:1a:1b:18:ad:2c:6c:81:40:f5:7b:8b:
53:e8:d4:74:a9:75:33:a2:92:68:cb:39:e7:0b:fe:
71:22:be:6f:22:8e:d2:fd:89:f8:d7:e1:d2:4d:64:
75:4d:e8:ef:9f:69:97:5f:d9:52:5f:3e:26:62:68:
8c:16:10:c5:0a:67:c1:66:37:1c:94:7d:20:e4:92:
d4:6b:88:fc:3c:0a:8d:00:d7:23:0d:f6:c0:9d:d5:
cf:4a:08:dd:f4:c6:dd:20:87:0d:18:5b:b3:47:ea:
70:7d:cd:93:f5:b4:32:f2:0f:4b:6d:4c:69:52:41:
6e:9b:52:7d:63:6d:0e:74:b2:b3:d1:96:9f:cd:2f:
ef:3e:c0:51:cc:13:0a:99:67:f7:73:ba:a9:05:17:
e9:f4:a6:69:6e:cc:f7:ec:1e:6c:e2:2b:ed:55:09:
ec:15:15:b8:e8:27:7e:ac:73:42:60:26:7d:a1:31:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:A5:EC:D7:C0:33:F5:C7:B7:BD:D5:97:E1:2D:36:55:67:DF:84
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3f:cb:5a:e3:37:bf:2e:ed:6a:e5:e6:90:f5:fb:0c:1c:fe:
ae:9d:5a:3d:5e:25:0b:10:cb:2a:85:f4:4f:a1:f4:ed:92:1a:
21:43:58:b2:cd:00:12:1e:14:93:68:bf:b5:0a:21:74:84:ba:
f7:26:ca:c3:ae:aa:87:2d:cc:f8:5d:e9:9f:85:26:ac:d6:d1:
db:b7:47:26:24:19:e5:ce:71:53:5f:a1:4c:26:2b:17:4c:e6:
57:90:e4:55:4b:ae:89:a8:74:32:03:96:37:e2:72:85:28:c4:
d1:8f:d4:3f:2c:98:83:64:99:bb:90:e4:6a:7e:6e:ed:cb:2a:
48:3b:c6:87:79:c2:e4:35:d9:77:5a:2e:5c:a7:19:1a:d2:41:
96:93:c1:bb:d8:c6:42:a8:dd:b3:ef:99:5a:08:99:52:60:cf:
64:6f:49:37:af:d7:f7:39:59:05:de:1d:d6:6b:59:f2:55:d0:
44:f6:30:31:42:49:d1:a6:24:8d:3d:43:a2:f9:24:70:7b:41:
e1:c4:48:85:13:d6:fe:56:78:fb:39:b1:90:d3:56:0b:66:c7:
08:58:21:25:5e:46:db:9c:63:b1:f5:b3:62:3f:35:bf:e8:d4:
2b:7b:aa:c7:64:79:d8:20:92:84:b9:e4:92:bf:97:c0:c3:f2:
50:5a:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net