Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: IBHvfKkAMDisRbmC0HSAmvNyiY+qG1GSXZAlhciOmDs=
Subject key identifier: DF:F5:C9:99:F8:F4:CA:48:1E:86:EF:B2:D8:34:E8:D3:74:EA:52:7F
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 01962E6181DB71CFD3FF562BB9667E2E5EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 0160
Signing time: Sun 13 Apr 2025 09:01:04 +0000
Manifest this update: Sun 13 Apr 2025 09:01:04 +0000
Manifest next update: Mon 14 Apr 2025 09:01:04 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: 6rCh9BAL6qrKzUO/y6HDvnb9T6cF6lmQJPf1AbM4zsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:81:db:71:cf:d3:ff:56:2b:b9:66:7e:2e:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Apr 13 09:01:04 2025 GMT
Not After : Apr 14 09:01:04 2025 GMT
Subject: CN=dff5c999f8f4ca481e86efb2d834e8d374ea527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:f7:7f:41:2f:b2:8b:12:99:ec:da:6c:7a:
e8:c6:4a:34:4b:2e:ad:38:65:ba:ff:89:26:b4:aa:
6e:4b:75:db:cf:2e:37:68:d1:a6:07:8f:b4:e8:db:
56:09:02:23:aa:65:69:52:9e:a7:ac:56:c6:4a:07:
be:48:a0:10:2e:dd:1d:cc:1d:38:ea:e5:d8:fe:81:
45:6d:3a:c9:65:1a:0f:50:93:99:db:7b:af:3c:56:
6c:49:bf:c2:96:2e:ac:4a:ae:ff:3d:d4:93:07:53:
31:2d:a3:d6:91:ce:74:a1:d5:21:25:54:47:ae:c8:
05:fa:14:dc:b7:dc:a3:e5:09:df:74:f8:a6:d9:e3:
2c:ec:5e:2d:9f:55:5c:0c:33:7c:d7:44:17:79:cc:
60:f8:44:49:90:ae:45:51:8f:bd:f4:d0:2a:e8:cb:
08:66:75:49:09:4e:20:06:c3:ff:be:6f:ad:5e:50:
a5:ab:9c:a5:1a:33:a0:fe:a7:45:5f:21:c1:dc:db:
13:1e:b3:18:09:ba:4f:38:5e:33:7e:a2:37:f0:bb:
74:42:52:17:e3:c8:e7:eb:26:fe:b8:75:ab:cb:12:
a5:30:c2:d7:98:23:62:13:80:25:34:e1:4d:d9:7b:
4b:4e:8f:b3:6c:f8:c5:c7:8f:26:5e:fe:df:41:16:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:C9:99:F8:F4:CA:48:1E:86:EF:B2:D8:34:E8:D3:74:EA:52:7F
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:0b:b5:2b:11:a6:dd:15:80:a5:33:d8:2d:f7:46:e1:84:
c5:ea:20:19:87:d2:ed:f9:77:8d:71:90:16:12:ac:33:4e:c4:
ef:59:8c:d8:c9:d7:48:2d:ea:e8:da:3c:c0:1a:aa:ad:9f:a7:
f1:a9:1a:ad:c1:5b:e5:bd:37:2f:01:29:bb:3f:39:e1:06:e4:
82:09:2e:56:cf:d9:5f:13:23:d0:7a:00:76:dd:92:ae:b1:6a:
ce:95:c5:98:80:cf:57:85:00:e7:5e:f8:02:ae:44:57:26:73:
c4:ad:df:ed:9a:95:e8:ac:86:12:a3:e4:24:52:0c:de:c4:2a:
c5:17:b1:16:b1:2e:91:24:32:35:f1:ee:19:e4:85:d8:ee:c8:
63:4d:a1:70:35:68:56:0f:21:c6:b6:f4:98:dd:5d:36:19:f6:
ec:e2:b4:38:e3:a9:85:07:e3:92:00:2c:09:39:bf:2c:e6:8f:
b9:21:4c:ef:ce:60:ba:5a:79:95:cc:8e:f7:8c:d8:3f:d4:dc:
96:63:7d:81:dc:61:65:38:29:a6:cc:28:ab:5c:1c:96:be:4c:
7f:ef:92:fa:35:3b:91:ac:a0:b8:62:3c:4f:30:3d:6a:22:29:
cf:6e:a7:4e:3b:94:08:b8:fe:d9:c0:6b:28:69:ef:7a:a4:77:
45:bd:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net