Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: U0NWDv6iSZRdPjda2RLpxNR77bZzPy7pfme1f55HpqI=
Subject key identifier: BF:09:BA:DE:D2:B7:E2:09:94:45:01:E6:55:C9:98:9A:C8:83:05:44
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0194BC72ECAA020BA89CB6C209450FEA079C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0507
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: NDYPQoaeUelANyAaqMfr9a4xBliNbh6hgSb49CcLfak=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:aa:02:0b:a8:9c:b6:c2:09:45:0f:ea:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=bf09baded2b7e209944501e655c9989ac8830544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:55:c8:9f:b8:a4:bb:a9:b7:09:f4:e7:23:
37:2b:c3:fe:17:e0:f1:89:40:f9:e8:64:85:c9:af:
fe:e9:bd:e6:e5:53:bf:6b:34:65:aa:93:53:80:42:
e9:45:7e:49:f5:45:ea:de:98:a6:0d:3f:2b:54:4d:
bf:d4:52:18:01:3e:45:16:2e:83:09:e0:da:5e:16:
42:f0:19:20:23:24:b4:1d:fa:08:20:ad:ea:33:b2:
9f:e6:73:28:bf:f5:6a:64:57:fb:ac:3f:d0:5e:f5:
4c:d7:c7:63:0d:82:19:f9:0f:ce:50:a1:8a:4b:b6:
27:cc:dc:3f:91:4c:4e:98:d2:72:9c:04:04:3e:fb:
b9:74:28:43:37:ee:c6:f9:4a:5c:a3:f5:b5:8d:19:
8e:54:bc:26:ae:f5:00:77:5b:05:67:61:dc:71:f3:
4f:71:11:67:27:98:be:3e:ae:33:6a:f4:75:1f:59:
4c:c5:67:f8:4a:33:c6:67:44:54:c0:fa:50:d2:f9:
99:d6:db:cc:3b:3e:8b:23:85:11:a2:62:71:fb:2f:
43:82:9f:b7:47:01:3c:db:9e:8d:73:05:18:74:13:
ba:74:4e:7f:fe:5e:92:68:86:93:8c:68:43:ad:3c:
74:d0:e4:2d:d7:7a:82:7e:76:dd:30:44:52:28:be:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:BA:DE:D2:B7:E2:09:94:45:01:E6:55:C9:98:9A:C8:83:05:44
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4b:33:81:95:55:5e:4f:d0:a9:2c:71:07:37:ce:13:ae:7d:
4f:cc:a6:ab:bd:11:34:c2:4c:d7:ad:46:cc:5d:79:3e:f3:dd:
a2:0c:d4:3c:89:d0:ca:32:40:07:14:7b:5e:df:27:4c:18:15:
fd:6d:85:d0:1c:7a:c8:dc:02:7a:27:ce:58:52:0d:81:dd:2c:
13:91:30:03:aa:87:0b:14:40:ac:46:0c:f0:de:6d:fe:d0:c3:
62:4e:3a:45:da:15:17:47:f5:7e:22:9b:8d:9e:c5:c9:28:75:
f9:df:9c:22:bb:e9:25:81:06:53:78:fb:0c:fb:1e:c1:b6:a3:
65:5b:c6:98:68:4e:be:26:c9:5d:a8:60:7e:35:53:60:d1:01:
fd:ce:3c:01:9b:b8:db:fd:99:00:d0:40:72:ad:ce:13:1c:c0:
07:f7:6e:ec:07:cb:a0:e1:4a:ef:84:5d:1c:c5:b1:ba:aa:30:
49:b7:68:30:22:e7:f2:ec:5f:c4:07:57:39:6b:8c:d9:60:b7:
68:e3:85:b8:31:7b:5f:75:bb:af:4c:3d:15:8e:4d:77:4a:07:
2e:15:b8:52:be:4b:84:b2:8b:58:8f:af:99:04:90:3c:4c:95:
d1:4a:24:53:43:44:20:fd:48:8f:c1:3f:aa:88:22:4e:cd:4b:
fe:3b:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:23 2025 by rpki-client