Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: Kq0pqKkdrOHsJUwWytt8i2emQ9Ko7uShyXFmIrG5Nso=
Subject key identifier: E3:B7:DD:27:EE:9B:8B:03:00:CA:44:11:CA:B9:0F:0B:30:47:B7:29
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 0194BD4EAF4F78A0F4D5673963AE5A298C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 01BC
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: G+jJAY1mbsibRc/CBGP9I19tIp6Cy607VISqTWiKtUk=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:4f:78:a0:f4:d5:67:39:63:ae:5a:29:8c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=e3b7dd27ee9b8b0300ca4411cab90f0b3047b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:d1:44:16:37:f4:b8:73:36:ad:df:46:07:
3e:91:22:2a:3a:fc:e3:6d:a3:8b:15:bb:6a:26:fb:
00:e7:86:a5:be:c9:c4:0d:b4:c5:50:e4:36:86:49:
38:27:e2:36:d3:69:dc:9a:98:7d:39:43:ce:c6:cd:
91:f4:d6:e6:17:89:9d:26:26:67:da:a4:f9:8c:00:
b9:3d:56:69:b8:bb:ea:1a:3e:73:d6:f6:9a:00:a2:
54:08:80:ec:cb:6f:01:c5:21:4c:4b:fc:bd:a2:d3:
77:27:f5:13:fc:92:19:cd:ce:ea:67:8f:21:2b:a0:
b9:11:89:14:a7:06:70:ad:fa:e7:ae:f3:25:c3:59:
60:74:d8:a3:20:0e:0c:f4:de:c6:69:f6:5f:fb:04:
f8:1f:78:f2:26:7d:31:72:2d:2d:05:96:ab:ec:68:
80:ca:ce:1e:f8:d1:57:ea:9e:00:60:06:73:22:6e:
72:03:37:0d:6d:87:6d:f3:58:6a:de:f2:98:d8:0d:
93:56:f1:eb:6c:09:4d:31:ea:cb:33:5d:c4:16:dc:
0a:6a:eb:48:c9:56:eb:1f:c7:0a:d8:c2:8d:4c:4c:
34:fe:b8:97:e4:63:67:52:c7:3f:7c:56:c3:9a:f1:
73:d7:71:d8:38:86:c7:09:29:2c:14:8c:9c:8a:3b:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:DD:27:EE:9B:8B:03:00:CA:44:11:CA:B9:0F:0B:30:47:B7:29
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:e8:42:a3:5d:92:52:b7:8d:a4:f0:08:1e:ce:c4:d3:3e:
18:a0:a6:b6:fc:ff:6f:41:72:bf:46:1e:4f:75:ae:27:86:7b:
1e:86:6a:40:07:e2:d6:d5:92:81:cf:68:66:75:ba:1d:5e:b0:
b7:a6:00:fc:ce:7b:67:e5:c5:db:e0:84:51:68:66:ca:1f:1d:
e6:8a:0e:da:b7:71:e3:36:ca:30:21:10:66:ee:0e:e6:90:d3:
e0:42:5e:b8:7e:65:cc:54:83:d4:09:c5:e5:3b:d4:00:39:23:
34:f6:0b:67:af:c8:af:4d:af:77:2f:ef:b2:56:ff:8d:93:60:
ba:2e:7b:bd:af:e4:3b:82:f2:c9:71:ca:ee:93:fc:9e:36:f2:
0f:68:df:0d:2e:ee:1d:63:09:ac:06:68:20:cc:09:e4:74:46:
76:03:a2:06:47:b5:61:03:84:76:6c:f8:68:e3:1d:3e:82:cf:
45:0c:97:9c:61:98:05:87:25:c9:b5:42:ed:d1:b2:5b:1d:d2:
be:b6:1b:2d:2b:52:9b:5d:08:14:b8:ac:11:fa:16:54:47:9e:
ad:7f:07:aa:99:8e:fe:ba:c5:01:e4:ec:d5:87:b9:77:a3:35:
3b:dc:5f:30:f7:2d:b5:e9:11:c7:a8:91:7c:ed:25:9d:cd:80:
57:f3:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:52 2025 by rpki-client