Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: 9HlSzyGDY/54IDkOydOwK8Tn/weDPFgnuBe7vNKw3Yo=
Subject key identifier: F0:9C:28:C4:9D:AC:2E:BF:D2:3C:C7:70:C3:DE:A5:F2:A4:03:F0:8A
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 0194BBCEDAA42FFD54B882A2E63CE60132E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: n4At0Kvh+mkYFRqWEPs3ZT062AkJxKX+7Zv8vbs/dVU=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:a4:2f:fd:54:b8:82:a2:e6:3c:e6:01:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=f09c28c49dac2ebfd23cc770c3dea5f2a403f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:27:f6:f6:d7:23:ff:9e:87:32:da:22:ed:
c2:38:0d:7d:5b:b9:77:0a:08:92:d3:74:b8:f7:06:
2c:1a:34:d9:75:b9:0f:7a:6f:00:49:34:34:f0:d4:
8d:a8:5c:fa:db:6d:ae:cf:21:5f:4f:e5:2a:68:7f:
1e:26:1c:ea:53:c1:ff:04:cb:db:7e:8f:9b:7a:3d:
ef:4a:c4:5b:26:5d:ae:07:9a:fd:64:a5:d4:63:56:
0e:b7:3d:a1:06:f3:a9:f4:93:4c:d8:8a:d7:5e:a3:
f1:0c:9c:38:4b:b1:5a:cb:ee:6f:46:0b:a8:e3:96:
45:68:0c:e8:07:72:b5:06:3d:7e:0f:97:3d:c7:a5:
0f:5e:61:dd:e7:eb:1a:fa:45:4f:74:06:1a:e4:0e:
1c:73:f9:11:df:4f:f3:90:c8:2f:63:49:79:f3:23:
fc:9d:ae:32:23:30:dc:1f:e2:e2:55:f3:f1:e4:53:
b5:dc:1b:fd:17:79:61:a5:1a:4c:b6:79:24:cb:a1:
be:60:25:f0:f1:d2:ce:7a:8e:c8:0e:6c:c0:75:73:
47:2d:22:92:6c:f2:a8:4c:85:6e:ae:85:6a:6a:03:
72:de:8a:e6:2f:57:75:c4:21:ea:ea:b8:c5:06:4b:
2b:a8:49:1c:65:3f:8d:17:b2:2d:e0:40:2a:00:41:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:28:C4:9D:AC:2E:BF:D2:3C:C7:70:C3:DE:A5:F2:A4:03:F0:8A
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fb:8c:bc:f9:37:a7:06:04:b6:a6:16:cf:17:b4:2f:d4:76:
50:72:2a:df:32:5d:ed:9e:07:ad:42:f4:ad:ab:4e:9c:2e:65:
e9:e4:3e:ac:94:05:b8:f2:1b:70:0d:d2:21:49:cc:49:9f:a8:
43:55:6f:48:6e:42:ce:89:d9:65:d6:38:6c:a3:38:ae:b9:0c:
90:0b:5d:85:3c:89:bc:d3:7e:b6:f6:c1:ac:88:92:43:64:a3:
22:8f:cb:24:62:0f:b8:5d:04:00:6c:76:82:7b:cf:a5:c8:0d:
bb:b9:8b:74:5f:65:53:2b:b5:51:51:80:36:28:71:18:7f:de:
d6:4c:66:05:ec:23:b7:63:e4:d6:65:dc:52:39:3d:3a:c6:8a:
23:4c:2a:c0:59:b5:7b:61:1d:94:94:5e:2e:c6:f7:9b:bf:0b:
88:6d:26:0e:15:ed:6b:84:f1:ba:e2:e9:5f:5b:7d:62:d4:04:
3c:a5:d3:a3:a2:7d:23:12:b2:fd:69:7e:4e:9c:b2:00:f8:a5:
94:26:d7:b4:c7:02:8b:86:26:1e:2b:09:74:61:c8:10:06:72:
93:b3:60:76:e2:f2:58:52:25:1a:02:3a:34:41:49:1d:11:30:
82:4c:10:e8:c1:14:73:38:2d:23:ea:d5:81:03:e3:37:f4:c0:
20:a2:80:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:40 2025 by rpki-client