Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: rlKIQ4Ey1KXGFsyI+/A5bgzL8d6srqDJ9v0bVeY8Pu4=
Subject key identifier: 4D:7E:49:D9:B5:43:55:78:FB:15:8A:CE:C1:A8:78:D4:FF:84:BD:BE
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 01962E61CD184DF5F7F8D826E0497798EDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 076E
Signing time: Sun 13 Apr 2025 09:01:23 +0000
Manifest this update: Sun 13 Apr 2025 09:01:23 +0000
Manifest next update: Mon 14 Apr 2025 09:01:23 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: IQhAXvI06oJcU2IGqQxiLYzxlcGflrwP6q22yMa1/Rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:cd:18:4d:f5:f7:f8:d8:26:e0:49:77:98:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Apr 13 09:01:23 2025 GMT
Not After : Apr 14 09:01:23 2025 GMT
Subject: CN=4d7e49d9b5435578fb158acec1a878d4ff84bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:2c:35:2a:94:a6:0b:8e:42:bb:ef:e6:20:
f3:56:e2:3a:65:5f:cd:08:2f:f9:6d:c4:1d:87:df:
79:bf:21:4a:6a:76:8f:05:8a:b8:9f:a2:d5:f4:2f:
53:38:07:11:9c:2b:82:cb:94:c1:49:70:e2:9c:90:
ef:d9:33:cc:68:ff:cd:1d:14:52:7a:3e:ef:2e:6b:
4b:7e:3b:83:2e:a1:f2:1d:f4:e8:f4:25:cd:6a:df:
8b:87:69:27:86:db:b3:44:1a:ce:f1:d5:db:c7:d4:
3b:05:04:24:71:34:ce:17:a3:34:82:87:fe:95:fa:
ce:1f:aa:48:f5:df:d1:aa:67:84:cd:03:ca:16:f2:
27:35:1c:ae:12:6d:be:19:e7:63:ed:29:56:a6:15:
ef:f6:fb:16:25:9b:07:21:85:55:fc:b3:00:ff:e4:
66:cf:e8:f4:33:aa:8d:ea:b0:24:7b:94:f2:08:83:
46:f8:4a:0a:63:4d:8c:2d:f0:9e:3e:a5:7c:81:3e:
df:62:90:50:55:31:ce:0a:8a:15:de:32:36:f5:24:
62:24:68:b1:8a:50:cd:39:e8:76:93:b3:f1:23:60:
25:76:0b:43:72:38:ac:98:2a:d6:1f:72:b5:5b:bc:
fa:c5:df:a0:e9:65:72:29:08:0a:a1:fd:da:65:72:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:49:D9:B5:43:55:78:FB:15:8A:CE:C1:A8:78:D4:FF:84:BD:BE
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:2a:da:12:d9:a5:1c:52:a8:19:fb:b9:da:1a:56:ed:d1:
31:71:98:0e:62:55:b4:aa:e8:bb:27:66:2d:83:ba:e3:e2:04:
24:af:26:10:56:66:66:d6:d8:58:06:f1:49:cc:05:c1:80:cd:
36:5d:71:75:80:6b:4a:af:c0:af:33:a1:b7:5f:15:f5:03:21:
f1:9e:0a:d1:87:3c:5d:0c:12:69:fe:32:34:66:c1:b8:a0:ff:
fe:c7:87:09:3d:22:e7:eb:66:a3:40:e4:50:b8:4f:4a:fa:63:
c5:3f:8b:c2:56:d5:06:c7:e6:66:24:b2:e9:74:c1:8c:58:0c:
ef:f1:41:d7:33:b9:96:07:55:7f:f1:10:eb:b5:c4:5c:22:53:
67:22:ed:b1:79:b0:1b:74:1a:e5:98:f8:62:2b:24:10:ae:01:
16:36:fb:99:fd:fa:89:4d:e0:34:bc:bf:60:3d:b3:f8:2a:2e:
e3:1c:52:02:1b:a2:31:15:ad:b9:4e:f4:52:53:72:5c:bc:42:
c2:0c:4c:9f:75:25:e1:b4:a1:41:85:a3:ad:7b:34:a2:b4:6f:
e6:db:bc:e6:c5:69:0b:96:0a:dc:50:87:19:3a:36:ed:97:c2:
93:dc:17:f2:6b:ab:19:57:ff:73:49:0d:d3:61:47:33:aa:c5:
73:5a:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net