Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: WnyrZq8zAaY1/tncmKt0dbp8kRHrI1yC11D/zSk8Uco=
Subject key identifier: 88:F4:F5:6E:A4:3B:8F:74:27:09:9D:2D:0F:0D:7C:B7:3E:BB:12:CB
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 0194BD858FE774F96A3F2A7D265FB39FB9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: 3XAxMxPF24rH093GZyzmIWCm9gyoxjwrc44q9cs7oxw=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:e7:74:f9:6a:3f:2a:7d:26:5f:b3:9f:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=88f4f56ea43b8f7427099d2d0f0d7cb73ebb12cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:25:ab:b4:98:90:8e:52:ce:96:a5:a2:03:
51:fa:85:59:e9:9a:27:e0:55:83:89:23:13:be:ea:
0c:f1:06:cf:18:a4:fb:0f:f4:71:09:15:31:24:d6:
b0:d1:f3:5d:82:50:60:d5:7a:1c:06:ae:63:54:cc:
8c:f4:82:e9:7b:03:1d:d5:d4:22:95:c8:8e:49:ff:
ea:6d:da:40:7b:10:8c:ed:49:b8:1e:c3:56:ef:d4:
75:db:aa:86:e2:df:b3:c0:e7:1f:02:1b:25:d5:c7:
e2:87:45:6b:c0:7f:cf:0c:c6:c4:8d:06:21:f9:9c:
92:6b:cd:a0:50:e1:e7:be:72:b2:4e:55:82:06:5a:
20:47:7e:48:d3:ef:c9:09:56:bd:0e:b5:32:ef:ef:
f2:0e:58:64:76:1a:15:49:b4:ce:91:84:8b:0d:14:
22:6b:22:59:e0:dd:21:e1:86:d0:02:55:17:b2:98:
de:78:07:cf:7f:2a:87:c5:fe:1a:75:c9:4a:f0:32:
dc:9e:cc:79:f7:ba:2d:ba:6e:99:69:10:3d:e2:01:
c4:26:66:2e:1e:e4:0d:bf:cc:05:8c:82:f4:d4:ce:
2e:94:0f:9d:ad:25:ba:d9:de:30:47:6b:31:61:15:
ad:0f:35:5e:71:80:28:94:e0:b6:99:e4:fc:30:7b:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:F5:6E:A4:3B:8F:74:27:09:9D:2D:0F:0D:7C:B7:3E:BB:12:CB
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a4:21:36:17:ac:de:44:55:2b:87:73:be:ea:35:ff:92:2e:
2c:0f:ae:d7:f2:99:c9:25:b3:85:ff:6a:b3:9f:fa:99:ec:dc:
74:3f:4a:ee:da:6b:5c:ab:c2:9a:a9:81:6b:89:75:64:1d:76:
7b:65:a6:66:0e:9a:fd:0a:81:57:7b:26:42:a0:85:af:5f:75:
33:6d:f7:d9:fb:6b:cc:5f:bf:96:58:8b:66:1c:e1:da:92:9c:
66:79:40:57:06:ee:11:9d:7c:14:33:24:9f:77:0a:a9:80:fe:
c2:2c:c6:ed:e5:7d:72:aa:b7:16:48:fd:02:c4:93:ea:d3:a9:
dc:0c:2e:0c:dd:3a:4f:f2:14:fd:8e:3d:18:2d:55:3b:e4:da:
f7:29:70:31:df:1a:bb:01:2b:49:0d:bc:6d:ea:60:4e:25:0c:
91:b5:92:95:06:90:26:da:da:5f:7d:e4:97:0f:79:66:a0:89:
2b:d9:39:c8:34:d1:45:63:ef:da:47:e0:d9:b2:a3:bc:76:35:
2b:01:f4:f0:f0:ce:51:f7:fe:14:30:ea:87:d8:9d:c8:0f:23:
ef:af:f0:db:62:a3:89:6f:d3:3d:f8:6d:51:9a:f8:0c:8a:85:
84:f8:60:a7:e4:85:8a:07:16:2a:5d:03:2c:e3:6a:cb:b2:67:
c9:af:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:52 2025 by rpki-client