Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: 7ogOslpHL+RCDTRcMpz4nmna/e+73b/xt49inYuAUR8=
Subject key identifier: 1C:BD:AB:A7:BE:35:55:B6:36:FF:89:15:13:58:3C:FD:7D:05:14:73
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 0194BC732B65867BA8406B53B2C983E08846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: yzznmv3INri7U/aE/QS5mTrVlwue2UGhr268zOT6xEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2b:65:86:7b:a8:40:6b:53:b2:c9:83:e0:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=1cbdaba7be3555b636ff891513583cfd7d051473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:d9:53:ba:9b:89:8b:ec:25:79:3b:5b:6c:
e6:04:fb:e8:4f:0d:d9:c7:72:83:cb:b0:c8:ed:3f:
ee:98:9d:de:c9:a8:f4:76:36:b2:b3:08:e9:2b:84:
65:8e:0a:fa:82:6e:55:79:80:90:12:ea:87:8d:19:
89:1a:82:02:e4:6a:d0:48:0c:fb:03:25:7f:57:63:
5d:9b:17:3c:4f:12:79:42:39:ea:83:8f:dd:44:ce:
0b:a5:da:c2:fe:71:4b:e4:70:40:f9:d8:a4:cb:03:
ea:dd:42:8a:dd:01:81:81:1a:bd:3f:5b:a3:a9:75:
c4:b5:a0:c5:0f:30:ba:e7:4c:cd:b9:af:11:35:02:
c2:0d:cb:d0:db:84:ad:8a:da:c9:c0:57:f9:74:ed:
b0:fc:be:1e:96:a4:5a:8a:04:a9:ca:df:0e:53:94:
d1:f2:9d:94:3f:b6:36:11:87:94:da:0d:5d:f3:b8:
38:d8:85:9e:e3:e6:98:b2:0c:3b:4c:82:29:1e:3a:
08:93:d0:87:14:6b:aa:e2:e4:6e:a8:50:0a:ba:2a:
56:42:b7:25:33:51:0b:8f:11:d1:46:68:df:5f:06:
72:08:60:f4:43:31:94:65:af:cd:93:33:68:fd:fa:
fb:8b:a3:bc:5c:e9:66:bc:c3:82:cb:41:b7:e8:1d:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:AB:A7:BE:35:55:B6:36:FF:89:15:13:58:3C:FD:7D:05:14:73
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:d1:96:8f:bb:48:ff:0b:96:bd:1a:06:4b:3d:00:48:77:
42:e5:e4:fb:8e:4c:56:78:0b:94:0e:b6:78:76:3d:b2:f7:77:
41:aa:fa:6b:a9:12:8a:8b:e2:ce:36:5e:ce:16:85:cc:55:33:
c1:1e:f7:ee:6d:5b:40:08:ce:4a:11:5c:53:56:a7:2f:8f:58:
c6:d1:9b:17:86:73:13:72:df:8d:d1:10:de:75:66:84:22:91:
68:8c:21:ee:00:25:8f:10:6d:6a:d1:b7:44:1d:77:9b:08:13:
54:7e:33:ec:95:cc:58:f7:e2:7e:62:51:54:ba:15:5b:8b:a4:
62:37:cc:5e:49:e9:60:03:38:75:b1:51:fe:10:a2:db:2a:b7:
a6:33:88:74:45:28:04:2f:41:b6:88:4b:77:78:06:80:72:34:
30:75:55:33:3d:fa:e7:69:a8:63:fc:be:f0:53:be:09:e4:4e:
7a:5c:6d:c5:24:93:dc:03:57:eb:bb:c6:93:f7:72:af:cf:dd:
0e:61:3a:dd:8e:61:2a:09:79:29:6b:e8:1a:66:73:32:46:f7:
e2:0c:3f:6b:b5:01:f4:8d:0d:9d:c3:cb:76:a6:d2:56:70:e3:
b3:7b:a4:d8:b9:2b:8e:8a:da:e2:3b:a3:de:a7:35:91:cf:16:
c1:2f:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:55 2025 by rpki-client