Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: RPjyK28VdhsW17TH8bOBFDn1738784EzELq0eDlK7ys=
Subject key identifier: 38:FC:4E:29:30:25:7B:AC:BB:03:A4:CD:D4:25:E2:4F:1A:6C:9D:33
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 0194BC3C6D1017DEAEFF48F070396CF66872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0C19
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: AFekLWkdQVvoF1K3q22I2zHAiUV8Y4TSfeyKJKIsuiY=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6d:10:17:de:ae:ff:48:f0:70:39:6c:f6:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=38fc4e2930257bacbb03a4cdd425e24f1a6c9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:94:51:e4:e4:0b:a0:aa:5f:d5:67:ce:85:
d8:f7:e6:88:11:b1:56:55:26:94:95:df:2e:c3:f4:
2c:cf:4d:70:db:ac:75:74:ba:d6:2d:50:29:98:ce:
c6:5a:47:4c:c3:56:a8:c8:f0:2c:ed:0c:8f:db:d0:
23:7c:7e:d2:af:b8:f0:a8:55:a2:61:f6:39:c0:37:
50:6a:e7:ac:40:9f:36:f3:d6:09:cf:a3:02:d2:b2:
d4:80:6a:8d:86:c0:ea:82:c1:eb:ff:11:94:09:34:
dd:6d:6a:36:85:c3:52:6a:65:9f:65:ed:0f:07:dc:
a2:a5:1a:4c:96:a9:04:fa:9c:21:8a:81:c7:75:7d:
a0:f8:19:b1:44:95:fb:84:31:5b:68:26:36:f5:0e:
0c:cd:b2:07:26:fb:0a:62:85:52:4f:89:63:63:77:
b3:db:f4:a0:40:88:df:5e:69:be:4d:5d:dd:fd:4a:
fe:1e:44:1c:f5:2e:49:ec:ee:a9:4b:6e:2e:6a:3e:
0b:83:13:8d:96:a0:92:68:19:21:92:6c:d2:3c:f7:
3e:4e:ff:48:10:f4:4c:a2:ba:20:73:3f:3d:c2:05:
e1:25:77:08:6c:4e:90:6c:ec:86:e9:6c:f6:cf:0e:
f8:ef:17:a2:ee:c1:2d:54:ff:c2:64:f1:84:47:cd:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:4E:29:30:25:7B:AC:BB:03:A4:CD:D4:25:E2:4F:1A:6C:9D:33
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:68:2e:b4:99:86:2b:37:9d:68:c7:78:20:b3:84:73:ff:
9d:1b:05:dd:9e:06:fd:94:0d:d9:1f:02:5d:2b:29:55:0e:35:
b4:bf:c7:e6:aa:60:28:26:c5:b1:31:e9:1f:35:a5:6e:6f:f4:
a1:0e:17:61:78:ca:d0:dc:ce:db:6d:a3:45:8a:b6:f5:00:8e:
4f:eb:5d:e8:95:f1:a3:bf:b3:6e:16:e1:bf:a8:25:e0:ec:e2:
b3:22:9c:14:52:c8:39:d6:89:6e:0b:db:72:70:40:a7:c3:69:
83:54:94:a1:05:6b:2a:3d:ce:ad:34:c9:f7:00:d5:66:d5:3f:
fd:cd:1a:ab:05:d5:70:fa:5a:af:7f:12:f5:f8:ad:cd:95:df:
5a:1a:58:86:73:14:74:61:5f:ad:2a:75:2a:c9:a9:a0:f8:ea:
37:aa:70:2a:8b:b4:7e:c8:6b:56:20:31:fe:83:61:30:9c:a3:
8b:6b:2c:5f:10:22:b9:81:22:93:56:6a:4e:6e:32:ac:4c:5f:
79:1d:5e:71:f8:e1:af:88:b3:f9:b4:51:28:7f:fc:0b:ff:a5:
70:74:6c:e5:a2:fb:6c:48:68:4b:fa:5a:e7:04:4c:1f:96:d6:
d7:79:2d:30:a2:cb:d2:56:61:14:b5:44:49:f5:95:b6:ca:a9:
a7:56:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:27 2025 by rpki-client