
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: 41ap9o6kGdW8hlTh71sQZqvrbYpQNxOwyo6JXhT+OPE=
Subject key identifier: F2:37:0B:23:45:06:75:D9:0B:D5:E6:CC:D7:84:10:6E:CE:B7:7B:5B
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 0194BD179057BF6EEF35E2864C8C2AFAF677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: 7iQ7F+tPo277NaYKAS54bEb6XbkmYFMLbFrjCzmtBao=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:57:bf:6e:ef:35:e2:86:4c:8c:2a:fa:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=f2370b23450675d90bd5e6ccd784106eceb77b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:4e:05:d8:20:f6:f7:68:d2:87:b9:6d:d9:
3a:48:80:62:32:bb:b5:81:0d:0d:5e:92:94:64:91:
2f:4b:38:b8:05:4f:90:46:89:28:71:cf:e3:6e:42:
d2:eb:41:0b:98:ec:20:e8:9c:e2:54:a2:24:73:db:
71:c5:4d:5b:fc:f3:2e:e0:29:f3:d5:6b:f5:22:7b:
7f:29:1b:0a:46:0e:d7:41:bc:a4:11:18:8f:48:61:
67:ca:56:47:f9:ae:81:44:33:9b:49:e4:3b:3e:5c:
08:ca:6d:d0:db:76:a6:c5:46:93:a8:91:a5:48:72:
1c:fc:88:93:40:d3:8d:4d:5f:89:22:84:c2:f4:47:
46:c2:ad:ed:4c:01:c0:0d:fd:f3:90:5f:58:2f:55:
2f:ee:08:2a:4e:b1:80:9e:ba:0a:fd:ee:bf:8e:29:
5b:69:f8:78:f0:8b:7f:95:07:52:e5:54:79:01:9b:
a1:21:ca:79:ba:55:44:83:96:d9:2a:b8:c2:2b:9e:
8e:bd:cd:7c:cc:a3:16:60:f8:37:f1:c0:10:44:f1:
c6:f3:e4:69:e6:54:43:fd:9a:28:1d:96:f4:55:54:
8f:1f:c6:8d:70:7a:8b:f9:2b:36:dd:b0:8c:68:b4:
18:2b:d8:71:3f:cc:3f:44:c8:bd:88:43:13:75:d5:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:0B:23:45:06:75:D9:0B:D5:E6:CC:D7:84:10:6E:CE:B7:7B:5B
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a4:6b:de:d6:2e:d3:cc:12:86:a8:cb:c9:85:2f:6e:24:da:
0c:74:41:ef:74:b5:a8:93:df:37:d2:1f:6c:41:0b:aa:41:f5:
f1:ec:0b:5a:d3:7f:b9:cb:6c:4b:f4:19:43:cf:13:f2:53:51:
24:06:44:ee:ee:84:b0:af:71:7d:00:df:66:65:18:dc:1a:32:
47:a8:da:24:62:34:14:89:62:b6:c0:e0:1c:c7:61:aa:e6:e7:
2f:db:b3:d6:7a:46:ad:af:3c:67:52:92:b6:be:94:50:20:4c:
79:fb:64:8a:91:09:ad:62:49:c6:68:4d:c4:73:98:40:c7:27:
0c:bd:14:f4:ec:80:e1:08:cd:08:8d:a2:db:21:59:e4:54:10:
91:a1:3e:a6:7e:f9:d3:35:bb:a3:be:9f:6d:01:3d:c1:79:9d:
1b:fd:ab:bc:ff:7a:48:fc:2b:41:e3:8d:a5:5a:56:58:63:72:
7b:af:79:72:07:66:ed:e5:b8:1e:75:40:eb:05:e3:23:a8:59:
07:88:72:22:26:b3:41:c1:95:76:8c:66:cc:3c:0b:ef:e0:95:
23:ec:27:25:a7:0a:fa:a9:dc:48:d0:e3:3b:0e:de:72:1d:84:
0e:ef:1a:6a:6c:10:be:03:2a:e8:ed:b2:81:ec:20:0e:bd:a1:
13:5e:ec:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client