Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: FtnRhnUM6zTx2aqdLYeb18udIkMqXc136Z4Ha6x6MDY=
Subject key identifier: D7:6D:2A:52:B2:10:33:AF:6D:52:94:C4:B7:F8:7B:2F:E7:9B:5F:E3
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 0194BD4E665F98BF2CB4CA5814DC82DD2819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: qj35Nb/VfvxPiBRnovJgykZXVe4Hy0QiTO3Drb1B0pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:5f:98:bf:2c:b4:ca:58:14:dc:82:dd:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=d76d2a52b21033af6d5294c4b7f87b2fe79b5fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:45:c1:e4:7d:7e:b4:9b:78:2e:86:9a:c3:
7e:53:49:53:57:3f:b3:61:f9:93:41:7b:aa:d3:c2:
09:ce:82:94:f5:a4:82:4f:c9:ec:3e:87:4b:87:7c:
de:ae:44:46:e5:6f:2f:53:8b:e7:98:f8:dc:ae:92:
e5:0d:b5:80:ff:dd:28:0d:3f:e0:7f:d9:b0:ec:a4:
ba:56:4f:6e:3e:3f:45:97:a6:93:38:6c:e3:ea:4c:
7c:c8:b6:59:5c:6e:2b:f3:c0:ad:83:76:87:54:d9:
b3:a7:7d:ee:3a:8a:0c:fa:06:77:37:64:1e:ba:50:
dd:02:60:a8:94:2c:fb:0d:c0:9e:47:1b:33:54:5e:
a2:f3:12:c8:f1:3e:6b:7f:61:3d:3c:ee:f0:dc:e4:
28:54:eb:ba:5e:11:62:b8:59:7e:49:1d:7b:73:11:
cd:ae:6e:ec:c3:70:93:6f:1b:7e:51:9c:9d:13:e2:
52:f8:db:9a:e7:3d:e2:c7:7e:f2:95:46:ae:3f:92:
06:05:d7:da:78:80:f2:e3:d1:8f:2a:c8:63:ef:d2:
d4:23:db:e4:ba:0c:a8:c2:ae:32:fc:e5:a8:63:a9:
29:7f:e7:e1:97:3e:25:c3:89:e7:13:d2:56:07:bf:
89:1d:52:47:30:93:01:3e:bc:c8:c0:4e:2c:69:3e:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:2A:52:B2:10:33:AF:6D:52:94:C4:B7:F8:7B:2F:E7:9B:5F:E3
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:2e:78:af:82:5d:33:21:10:d3:7a:a0:fc:52:6b:6d:eb:
d0:d2:33:00:fe:b2:f1:a4:60:8e:a2:52:10:94:30:7f:6e:8d:
98:c2:6c:59:f2:39:fc:36:d9:04:01:9f:37:55:c6:0d:60:f0:
47:0e:9d:c9:fc:d4:3e:42:65:46:52:95:9c:2e:24:cd:2a:65:
6b:70:a7:c6:65:d3:07:a3:87:b4:cb:c6:9a:45:e0:a6:42:c2:
36:f5:93:5c:60:9a:07:ec:8f:e1:9d:71:04:6d:95:aa:d5:66:
36:e9:ed:7d:f3:45:19:5e:ef:d6:25:36:6b:e6:dc:79:f5:c6:
87:aa:31:6b:62:70:32:81:df:61:e3:22:e9:64:34:99:c4:0e:
3c:f2:44:25:c9:ca:4b:6e:ce:b2:ab:cb:79:eb:cd:fd:e7:e5:
05:ee:e2:7b:07:c3:78:6a:d6:92:d6:59:40:22:a3:35:83:05:
ce:e1:1c:b6:d7:b4:c1:67:4d:96:ba:ad:28:dc:5a:72:cf:ca:
24:a7:ac:2a:ed:45:6d:25:63:24:24:15:59:a4:59:66:da:61:
ed:69:fc:cf:e2:a7:65:ba:96:8d:ff:5d:5e:0d:44:01:d1:f1:
b4:b4:4d:de:63:5c:1c:03:4e:01:e8:42:dd:4a:ec:11:98:5a:
8d:eb:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client