Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier: oCozLVh82joWqZz1l82H83YFGqNR7WQdDGO/U9rGb0U=
Subject key identifier: 1E:8F:E7:80:52:36:C6:46:20:DE:13:E0:AB:B3:46:7A:EB:26:70:C4
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 0194BD4E7A63CCED255C074439430192E2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number: 0571
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (hash: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=)
2: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: GuCILI+Q3AzWahxU9EP4u/dWoqxFwv2eh1+GAQfdJo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:63:cc:ed:25:5c:07:44:39:43:01:92:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=1e8fe7805236c64620de13e0abb3467aeb2670c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:2c:f1:c0:32:91:9c:de:b5:b8:1b:63:0e:
e6:4e:1a:5c:0e:e3:1c:6a:8f:72:9f:b3:43:2d:35:
20:8d:c1:15:1a:ce:26:79:97:41:1c:5e:cd:31:a1:
fa:59:62:1b:18:73:78:57:4c:20:96:dc:4b:a7:42:
d0:d1:78:3f:c8:41:84:fa:d7:c3:a0:3f:f2:a0:20:
82:47:b0:f8:60:5a:20:76:47:50:db:e8:62:9a:05:
22:ba:86:b6:88:3c:cd:93:08:7d:d5:27:b8:2e:06:
1b:88:a3:c2:e3:ba:8c:aa:95:74:88:74:fa:71:85:
f0:55:df:db:f5:1b:eb:84:e9:e2:fc:64:c3:bb:fd:
d2:da:30:46:ce:a1:c3:27:7e:3a:29:33:8c:e1:81:
47:5b:f3:1b:de:06:79:03:a6:fc:63:7d:5f:97:0e:
09:07:82:08:e6:0d:f3:a7:4f:3c:0e:ed:cc:fb:bd:
fc:67:91:52:09:45:db:4c:7a:22:b2:83:42:d5:63:
43:1c:53:a7:87:8c:70:3f:e7:49:fa:da:28:54:b0:
48:19:94:94:e5:bd:05:9d:21:72:b0:06:f3:4b:cd:
14:80:7a:d1:c8:8f:e4:21:78:93:61:a8:2a:92:6b:
11:38:c5:d6:6c:fa:e3:02:56:12:b3:d2:2e:26:ff:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:E7:80:52:36:C6:46:20:DE:13:E0:AB:B3:46:7A:EB:26:70:C4
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:87:5b:79:d7:c8:25:06:b7:e8:c3:55:33:c2:95:d3:68:
b2:2b:46:eb:b7:4e:92:d4:0a:29:dc:64:0f:ce:49:ca:ff:19:
83:e0:ca:8e:70:48:24:35:b5:2c:30:c2:6f:d8:b3:5d:70:cc:
e3:50:67:65:3e:4c:c8:e6:3f:11:4c:9c:35:fa:ca:d4:67:06:
fa:7b:b0:e8:ca:2a:df:59:1b:56:95:3b:76:6e:34:95:16:54:
bc:9c:ca:74:c1:0b:36:b0:e2:5b:70:85:4c:b4:59:23:67:a1:
b2:a0:0f:2f:1f:49:62:02:3d:fd:72:ee:27:f3:2b:5d:6e:1c:
13:4d:4d:b4:de:a6:94:ef:b3:d9:79:00:a6:86:24:11:ab:f7:
35:22:dc:7c:98:6e:10:ac:6c:35:dc:6e:c7:e0:d0:d7:e6:79:
0b:2f:59:53:d4:bd:d1:cf:21:22:08:b5:2d:55:88:9a:f0:64:
49:fd:24:fa:db:0b:bf:5a:0c:7a:06:81:61:b4:ad:5d:30:a9:
ed:87:c8:df:17:d9:f4:93:7e:0e:6e:0f:03:71:64:f9:34:98:
b7:3f:87:ac:96:4e:cc:e3:de:dd:3c:ea:a2:74:c0:e0:fe:4a:
42:60:5a:46:cc:32:c5:e4:2a:4a:0b:e3:38:8c:e5:1f:e2:d8:
36:be:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:24:56 2025 by rpki-client