Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: iuLKk6Iq7IW38Jgc35z9tlh9ibIsiipv6AssDfdGx6M=
Subject key identifier: 55:56:4D:55:01:EA:FE:1B:F1:BF:CA:4A:8C:8F:D8:96:90:8D:B2:B1
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01962DF3B8771DF824588C5960382300CB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 053A
Signing time: Sun 13 Apr 2025 07:01:09 +0000
Manifest this update: Sun 13 Apr 2025 07:01:09 +0000
Manifest next update: Mon 14 Apr 2025 07:01:09 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: l6jwxEiOrzUzdMve5FBLjjV54BMlGgABUTCxrqWsfh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:b8:77:1d:f8:24:58:8c:59:60:38:23:00:cb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Apr 13 07:01:09 2025 GMT
Not After : Apr 14 07:01:09 2025 GMT
Subject: CN=55564d5501eafe1bf1bfca4a8c8fd896908db2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:fd:a3:68:9c:18:2b:58:f2:a5:0f:01:8b:
aa:7d:68:6b:99:d5:ca:fa:48:af:e8:dd:ee:66:9a:
b9:7f:1f:74:d8:48:4a:bd:de:0f:67:91:e8:6e:dd:
52:31:f7:bc:4f:6e:6f:ad:91:19:de:4d:52:c8:b8:
45:7b:f2:be:64:b9:56:0c:03:a5:66:d8:71:9c:c7:
ef:68:92:0f:64:ee:d0:83:7f:a3:67:b8:38:04:b9:
16:2e:07:08:f4:04:6f:e7:ea:d8:9f:da:2c:03:f6:
6b:71:c1:6f:02:c2:50:8e:11:33:1e:06:c4:61:e1:
b7:8e:6d:c5:55:a9:da:ca:fd:0c:4b:3b:b3:f4:19:
f2:db:83:48:7f:61:7e:1f:6f:87:e9:53:5e:48:6d:
7d:31:ee:76:fe:56:e9:d1:0d:02:d9:08:1c:fb:d1:
a1:a7:7c:7c:ae:f5:2a:4b:55:ac:ae:77:ba:a0:13:
66:b7:a2:78:88:cc:67:52:d4:b7:10:d4:22:47:2d:
bb:b9:10:7c:72:2e:a0:c0:ac:06:85:46:33:8f:06:
f4:17:e1:f6:b1:de:25:5d:40:c8:d6:a1:03:b8:48:
b6:03:9b:37:1c:f2:ef:0b:b7:30:e7:d5:d6:d6:68:
64:3f:fa:93:d2:85:3f:a2:8f:26:ac:ee:93:6f:e9:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:4D:55:01:EA:FE:1B:F1:BF:CA:4A:8C:8F:D8:96:90:8D:B2:B1
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:54:a3:60:fe:1b:bf:cd:00:93:35:a1:3b:ae:bf:df:65:
46:d1:5e:0c:9c:4b:16:80:2c:0d:da:78:2a:07:f8:94:99:dd:
81:2e:3b:37:a4:bb:7b:04:0d:92:d1:e1:72:5e:5c:4e:a5:18:
9b:db:e8:42:d5:da:94:10:c1:bb:75:a6:86:5a:9d:56:f2:d9:
63:ed:3f:f9:dc:b1:09:95:6b:fc:7b:9f:e4:01:30:d9:2d:15:
cc:3b:ca:94:f8:3f:0c:04:12:01:9b:27:28:c5:4b:fd:ea:27:
5a:4e:25:19:6e:d0:b5:0b:31:91:4a:77:ed:29:ee:fc:26:48:
2d:09:d0:54:b2:68:21:83:15:f8:a9:ba:40:6b:b2:f3:b8:b6:
74:c9:a5:f3:79:ba:37:81:06:67:0b:05:fb:bc:d2:27:3d:c3:
00:62:d2:5a:d0:65:77:34:66:ed:6b:99:f8:71:df:25:dc:0b:
68:a9:f2:e6:d3:fc:ae:67:8d:36:8a:c6:e6:bd:4f:5a:6b:f1:
0c:19:45:59:fc:8b:0b:d6:22:7b:6a:11:7c:90:b6:49:08:ed:
81:b9:6c:95:78:20:b4:53:2d:6d:12:fa:24:de:f3:3d:9c:12:
d6:90:96:fe:25:fa:14:36:a7:13:f0:eb:16:4b:85:0f:26:51:
6e:36:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net