Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: bDD0btGhwhH5eltzBnGvi5U1DvKIRUDpW7CBYNFQh10=
Subject key identifier: 34:D4:30:4D:51:B5:87:D7:E5:E7:9F:49:60:BF:F7:84:DB:73:BD:A4
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 0194BD17549280F1EB6462F0F0BD30AECB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 112F
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: yAfd5gqSZdabbRqZM4y4jteYqNsVThtrA5uNzFwxV80=)
2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:92:80:f1:eb:64:62:f0:f0:bd:30:ae:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=34d4304d51b587d7e5e79f4960bff784db73bda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:62:3e:6a:97:a0:f1:ab:2a:7e:47:56:e7:
58:08:1e:5a:9e:3b:d5:5a:53:4a:8b:c1:51:48:fd:
25:22:e2:c0:f9:46:9b:02:6c:93:26:7e:99:db:db:
d8:91:25:51:7f:cf:57:cc:bb:89:3f:a4:f9:0e:2e:
b6:6a:e8:fb:b5:9e:f6:9c:92:a6:a4:61:39:77:8e:
f7:a8:65:a1:2a:6b:24:73:96:54:66:6e:4b:3a:dc:
39:f5:5b:2e:06:0b:d6:da:82:e8:35:72:69:d4:f1:
aa:fb:e2:11:37:dd:9f:b5:72:e8:2e:5f:21:41:88:
c8:ce:b1:89:ea:8a:bd:1e:d6:e7:68:27:7c:1e:ff:
b4:51:8b:86:42:14:59:38:ee:da:b0:19:60:10:5c:
b9:31:35:e3:3e:31:62:2b:46:53:d0:c6:d8:7b:cb:
56:6b:24:41:05:23:85:84:c4:1e:9d:a0:20:1b:68:
f3:ca:11:ea:3b:b3:92:1e:51:03:34:de:51:bf:44:
92:c8:44:eb:18:63:07:d5:30:2a:88:81:0a:d8:e3:
ff:68:fd:0f:90:aa:4c:a8:87:d4:2c:14:0e:ff:ca:
3f:d9:b3:c2:90:e5:be:c6:98:ee:a0:7f:3f:4f:77:
59:74:ee:a1:ad:51:a0:f4:8e:7e:2b:c5:0b:7c:a5:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:30:4D:51:B5:87:D7:E5:E7:9F:49:60:BF:F7:84:DB:73:BD:A4
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:15:8f:81:f0:ce:37:af:d3:1d:fc:cd:f5:ba:ab:1c:57:ec:
98:af:17:53:03:94:26:af:a5:77:1d:9a:86:83:ae:d0:c0:b8:
cc:2d:b6:b0:80:8b:81:5b:8a:c1:1e:df:63:38:4d:ea:d3:73:
0a:1d:51:a1:5d:b0:f2:ee:e8:ba:44:13:f3:6d:0e:b2:ab:3d:
f9:30:dc:8a:38:fa:14:f9:21:9d:15:a9:a7:3f:08:94:37:10:
59:5d:e7:67:45:3d:25:0e:1d:43:73:54:4d:71:ef:23:59:60:
84:46:22:44:0f:f3:37:d8:04:3c:ad:17:32:41:24:63:fb:70:
1a:59:71:cd:4c:b8:82:2d:68:7f:a9:0a:85:5b:25:d5:3a:ad:
fe:50:94:65:ad:1b:59:47:17:f4:04:d2:be:9a:c9:fd:fb:ca:
91:84:c8:ff:81:19:d5:63:42:8c:8b:be:4d:a1:b9:1d:d5:6b:
55:49:dd:77:a3:d8:14:12:1b:5b:79:32:70:f5:a3:d6:9a:77:
4c:3d:28:3b:5d:bf:00:64:19:76:c8:f0:99:f1:fd:a1:2b:66:
86:ee:6d:35:f7:cb:7e:8f:53:b9:86:61:e2:cf:be:5d:70:c3:
9b:b5:4f:45:d7:ce:c4:0a:38:e3:ff:f2:c4:ee:80:ff:4c:56:
49:b5:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:50 2025 by rpki-client