Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: fH3ESe7YiUin1OAwhqCglkX25tPxBSNITOKGm6xnnYw=
Subject key identifier: A1:BB:B6:46:05:E1:4B:C7:E9:D2:84:BE:70:83:F0:52:4B:7C:B5:05
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 01962F07426AC3B607595FF1C75FA38FBA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 0FD9
Signing time: Sun 13 Apr 2025 12:02:06 +0000
Manifest this update: Sun 13 Apr 2025 12:02:06 +0000
Manifest next update: Mon 14 Apr 2025 12:02:06 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: gcRamSoPTSQx2I9jauoPvyblgBlkTJY9Z2zlhZp3XG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:42:6a:c3:b6:07:59:5f:f1:c7:5f:a3:8f:ba:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Apr 13 12:02:06 2025 GMT
Not After : Apr 14 12:02:06 2025 GMT
Subject: CN=a1bbb64605e14bc7e9d284be7083f0524b7cb505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:fb:88:f4:c3:cc:10:21:99:f0:74:d9:d9:
77:d9:9a:b0:9f:f4:46:38:77:b6:94:a4:3b:8b:fc:
95:68:83:47:27:0f:5d:74:cd:bf:43:15:c9:0e:99:
4c:47:a0:46:24:22:eb:13:61:9a:3e:98:ee:9f:43:
6a:c5:44:00:1c:a5:1c:92:86:85:aa:e0:6b:0c:2d:
35:1e:96:58:71:da:2c:cf:0d:79:b0:02:64:30:a6:
7a:18:1b:67:97:2c:10:a0:a1:ee:1a:04:31:b3:01:
60:35:e5:b3:37:f1:39:b9:05:9c:99:46:12:53:07:
4c:cf:d7:9a:9f:19:b7:10:d2:c2:0e:a3:46:b9:61:
e9:24:f1:5f:6e:aa:ff:0e:7c:c7:20:a7:ea:48:ab:
63:73:fe:90:de:43:ca:8d:78:72:9d:a0:f0:3e:78:
8c:ce:d3:0e:35:31:be:ea:9d:8e:e8:0a:4b:5e:07:
bb:68:1d:f5:72:0b:61:75:aa:17:eb:9c:87:f0:1f:
23:1a:2f:22:1c:87:2b:7f:3a:f0:5a:cf:1a:a4:e0:
37:91:45:96:14:d8:0d:57:c2:a7:d1:32:02:f6:4e:
f7:bd:b4:58:d0:7d:bf:46:70:a5:9e:73:bb:0b:4c:
bf:e6:f8:65:bf:44:61:d5:c9:e7:c0:95:86:b2:bc:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BB:B6:46:05:E1:4B:C7:E9:D2:84:BE:70:83:F0:52:4B:7C:B5:05
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:14:ee:0f:e6:ca:76:54:94:a8:2e:56:e4:e4:ad:80:bd:4b:
5f:e8:ed:a2:6e:df:c0:40:5e:00:e2:3c:b7:a6:40:f8:b1:57:
82:33:cf:66:39:a8:e3:a7:ba:a0:06:80:4a:aa:21:4b:fb:d5:
8a:85:ca:34:34:58:ff:78:07:cf:08:8e:57:69:6c:0b:58:40:
6e:e1:71:6d:1a:32:d3:66:72:54:ed:ae:32:cf:d7:95:b0:c5:
81:96:25:33:7d:e8:56:ff:dd:d4:8c:70:9b:92:5a:3a:e1:29:
b7:aa:30:b2:76:01:6c:58:46:b5:f6:95:03:ec:2e:40:8f:6e:
15:23:9e:cb:ac:e1:a6:91:c7:35:02:cd:bc:f6:cb:58:58:6e:
44:bd:86:83:bb:0e:60:13:93:ac:c7:22:30:8d:15:41:fe:3c:
80:42:12:3d:d1:bf:9c:36:6e:e2:c1:bc:0f:e0:7c:8f:f2:87:
57:51:dd:b0:34:56:d4:21:c4:1e:a9:db:92:e4:a6:74:d5:15:
98:00:cb:72:e3:24:bb:fe:de:b4:45:9c:46:c5:e9:a8:50:2c:
f4:ba:fb:63:ef:06:52:c7:26:95:dd:3c:08:a7:97:8c:3b:b0:
a7:17:92:6e:67:ad:31:9a:d2:2e:89:a9:0d:56:13:2e:a0:98:
fb:09:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net