Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: vcbmntaF9SvLFUcTGlNLFvVNXkTUAuWMZCTiaoMk9yo=
Subject key identifier: C7:01:A7:02:BC:61:F6:B3:93:17:CC:49:83:21:AC:C3:25:B2:98:E7
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0194BCE0D46FAB31CE6BEFBAEE32099AD883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0B93
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: 2CYYXTaLoMkvjBAZbnBBoy/v2x0Q/mxAIti9QGvT/kM=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:6f:ab:31:ce:6b:ef:ba:ee:32:09:9a:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=c701a702bc61f6b39317cc498321acc325b298e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:4d:39:4f:38:63:8e:05:dc:e3:16:e5:56:
ec:dd:37:d3:00:89:a2:80:72:c7:58:da:a1:26:48:
f0:2c:9a:97:cf:9d:bb:16:43:ff:1b:9b:85:d1:cc:
a7:7d:74:ae:3e:73:71:46:c3:9a:f2:f6:cd:8d:2a:
81:eb:e6:25:f2:41:1f:d2:ba:a2:bc:57:14:e7:88:
af:b7:59:96:57:3b:ae:25:ae:e7:00:b6:c1:53:14:
30:01:fc:4a:14:36:03:8a:17:ef:ae:84:51:0a:e9:
37:03:c8:ad:b1:1c:c2:26:ad:ee:62:2c:1b:be:02:
5e:93:54:ad:c0:ff:91:55:a9:30:fd:0a:45:65:96:
9d:e9:f5:97:2d:ec:9d:0a:f0:06:99:d6:65:68:c8:
1e:a5:33:53:39:8b:89:33:0b:31:21:ed:cf:ca:7b:
1e:b1:0d:5c:df:8e:71:4c:2f:73:94:ca:ea:bf:f3:
a9:dc:b9:2c:16:d7:4f:dd:56:40:97:0a:ef:35:7b:
91:8b:f9:fa:51:e1:da:a0:46:20:93:74:d8:e1:e0:
b3:9e:39:1f:5d:b2:c7:05:7f:7e:d4:8a:5d:e0:31:
72:1f:bc:17:7b:a9:92:0f:8a:b0:b2:bd:7e:96:9f:
55:52:b6:13:e3:da:95:4d:a4:00:9f:67:6f:58:03:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:A7:02:BC:61:F6:B3:93:17:CC:49:83:21:AC:C3:25:B2:98:E7
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fa:96:e7:46:c1:bf:32:a0:d3:40:c3:92:05:b6:50:4b:c2:
e7:6d:b8:f2:f4:bc:66:54:10:d8:a2:ca:3d:04:95:74:e3:04:
12:28:e5:b8:62:e5:ac:48:94:5e:d8:75:4a:c0:5a:5b:75:c6:
70:ed:27:a0:cd:2f:e5:c7:a5:1e:74:71:9b:56:a4:df:6f:a5:
b4:87:c3:cf:a1:c9:9c:95:6b:81:1f:83:00:6e:64:64:b7:b0:
e7:b0:5b:5c:c7:ad:85:90:b2:3d:b8:2a:b6:c4:d6:75:56:b7:
e9:17:f3:07:01:c8:13:63:f2:c9:ae:3a:e5:78:5c:bb:02:30:
db:c5:08:d0:d7:c5:9c:3e:e3:ba:7e:35:4a:0f:99:51:a7:02:
49:0f:d2:da:36:8b:53:b1:24:36:5a:f1:27:64:3d:d4:7c:5c:
bb:75:cc:73:92:0e:b8:a5:a4:45:32:0b:d8:7d:07:e2:15:e6:
da:59:ec:5c:b2:3c:ed:f6:06:b3:d1:15:53:87:9c:3c:9b:b8:
5f:6d:5e:37:5f:9f:73:75:ac:cd:c3:06:1a:35:bb:0c:f1:5d:
ac:01:cd:04:24:df:56:80:78:a2:73:35:69:47:76:7f:fd:2d:
a4:10:a7:02:21:6c:f5:c7:93:d1:25:0d:b6:88:6c:6c:22:01:
16:ed:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:53 2025 by rpki-client