Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: V5xPfBdxRdbeX4KMlVKMeZn25wz0t6pZnNyZVXI0jII=
Subject key identifier: 20:FD:45:9C:B6:F8:5F:4E:D0:A4:B7:0F:87:0A:94:FF:E6:E8:E2:4E
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 0194BBCE5198446677F99F7CE56E4A8A2626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: LNgpPRcL7jnUOR6aaCb9Vq9QycSEUqAzNTHYPnWqrpk=)
2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:98:44:66:77:f9:9f:7c:e5:6e:4a:8a:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=20fd459cb6f85f4ed0a4b70f870a94ffe6e8e24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:4c:a3:b7:91:c9:71:e7:fc:41:4e:6f:68:
7b:c0:05:f1:17:0b:1f:f3:7e:3c:83:52:5f:0f:f6:
68:72:84:54:b8:80:9f:c5:96:ba:7c:55:5b:a4:d4:
7d:d6:e1:43:d3:6c:d0:60:3a:f2:9a:9a:fe:ad:6d:
52:64:01:2a:a0:b4:7a:30:80:d1:a6:87:e7:5b:6a:
8b:ee:57:4e:56:69:a1:0e:a9:f8:32:7d:ea:54:3b:
f9:8f:8a:fd:ec:62:ab:2d:ef:89:78:45:da:d3:22:
5d:77:38:50:65:8f:44:0d:9f:99:e6:50:ee:a7:1a:
67:c8:92:f9:1f:41:55:a0:dd:66:20:c5:53:d1:78:
1b:e2:e2:01:dc:2a:6d:09:94:7f:d2:e2:f4:1a:06:
1c:9a:f7:77:22:6a:ec:f8:d2:7e:e8:54:3f:45:83:
4a:7b:3f:73:31:59:d6:54:4b:82:e0:8a:10:26:a2:
38:bb:e0:fe:96:98:17:3f:7a:0b:29:32:99:51:da:
1c:8c:ff:9d:11:67:f3:a0:a9:9e:14:7c:6f:39:e3:
70:df:ec:38:52:e9:67:4a:74:31:b7:35:4f:eb:65:
f6:86:8a:b0:6e:b7:c7:fb:9a:ff:36:6c:ad:10:55:
e5:d4:4b:fb:7d:7d:31:55:a0:bc:92:4e:76:37:af:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:45:9C:B6:F8:5F:4E:D0:A4:B7:0F:87:0A:94:FF:E6:E8:E2:4E
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9b:57:d5:69:83:01:18:2a:be:24:ba:38:72:a9:03:ec:bd:
41:12:bd:45:ec:02:32:d4:29:b5:57:fe:af:db:ad:cc:7c:a3:
d8:84:81:9c:27:7d:ce:e8:d5:cc:a8:4b:1f:83:5f:dd:a9:7f:
c3:5d:c8:ec:5b:3f:e6:18:43:70:d2:d6:af:0b:ce:33:89:9e:
7f:46:33:4e:28:19:1e:cb:fa:d1:86:ab:2a:03:3b:27:0a:0d:
fb:52:b7:5f:b7:1a:2a:c4:a2:2c:6d:39:90:28:ed:cd:b1:7f:
af:98:e5:e2:37:61:9c:9a:bb:3d:d9:a1:95:2f:00:f1:7b:c7:
ef:bf:d6:c6:6a:2b:90:46:8d:a3:0a:d1:de:f7:70:27:10:70:
de:19:6c:7e:44:bc:8b:1c:9c:6a:ab:1c:c8:3e:c2:2c:a6:83:
f4:b1:e2:b9:79:a1:69:3b:1e:35:7d:34:bc:5d:78:1f:b8:50:
e9:8e:31:05:e0:3a:3c:8b:7e:35:e0:fc:5a:ef:3c:62:d1:74:
62:e5:ae:5b:e8:78:82:9f:06:e9:89:e3:c4:2a:b6:1a:68:81:
a2:fe:18:c8:fe:5e:33:e0:9a:8a:3c:d5:39:b7:c2:68:6b:4c:
d0:35:27:5a:64:a6:29:9b:f0:ed:9a:e5:f4:36:b1:1c:a6:44:
ce:ac:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:18 2025 by rpki-client