Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: HJvt7ZZgG2gaHZvhO9sSgeEX4WPM/5sUVeaTbi8v+I4=
Subject key identifier: 09:15:F8:33:63:9B:4C:CE:2B:69:CC:50:D3:E8:15:A1:2E:6D:82:4F
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 0194BC3CB4351FFBE8DCF2870BFE2FA1B969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 1355
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: DKwYHs6TIWV0o0qgFMy2hcWErjzNkx5OWXoCLZeEp3s=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b4:35:1f:fb:e8:dc:f2:87:0b:fe:2f:a1:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=0915f833639b4cce2b69cc50d3e815a12e6d824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:85:d7:61:3a:76:fe:a3:50:e7:3f:ea:9a:
26:81:df:0a:0a:d5:cb:f7:21:ab:ab:7c:0e:1a:8f:
f0:77:dc:52:40:2c:fc:c3:be:55:57:4a:31:b1:1b:
71:f2:a8:65:ea:92:cb:bb:1a:06:4f:7e:df:9b:0b:
0c:ca:10:05:41:5d:18:f4:4a:da:3c:d0:19:7a:fa:
b2:28:4c:3f:d2:b0:15:0f:cc:2f:a6:a3:1f:64:3d:
2e:5b:70:3e:1e:fc:4e:44:06:43:64:13:22:02:93:
1f:5f:e9:3a:a7:19:c6:03:f4:59:4f:02:f7:3f:58:
13:03:33:8c:ef:37:30:ce:6d:70:5b:f3:5d:c4:29:
ce:82:8b:b0:2f:ac:34:f7:64:08:db:1e:85:c3:ce:
be:2f:27:fb:17:ab:cb:9e:1e:bf:e7:3b:1a:54:01:
44:2d:80:c8:23:63:87:a0:ab:3e:dd:ec:57:0c:09:
d3:4e:cf:46:c5:ea:93:f9:fe:45:4a:98:cb:8a:ea:
89:af:79:bc:63:27:49:ec:08:bf:32:57:a0:09:fc:
27:84:8e:4a:e3:91:4a:0f:41:d9:93:24:0f:69:75:
47:dd:b9:71:c6:f7:25:54:31:5a:14:08:ff:a1:af:
c1:4e:72:82:e2:9d:47:00:d5:dc:90:f4:99:04:a4:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:F8:33:63:9B:4C:CE:2B:69:CC:50:D3:E8:15:A1:2E:6D:82:4F
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2f:0c:7c:69:53:73:a0:03:0c:bd:f7:30:a7:d5:62:95:d2:
04:9e:d6:b5:e1:6f:c4:5e:8c:ca:b7:2f:4a:1f:eb:80:2f:01:
61:d0:a9:49:04:07:aa:f3:0b:39:cf:2c:d0:1a:1a:19:bc:ca:
25:23:f1:11:ef:85:89:bb:fd:44:c5:53:f7:92:ab:03:78:e7:
6b:ca:e5:27:90:f7:00:d9:13:25:1e:06:ba:eb:ef:fe:80:63:
0d:44:38:71:52:92:b1:55:94:98:f5:95:73:59:1e:b2:ba:16:
26:b5:f8:9a:cf:d0:de:61:e9:b8:e9:5d:d9:56:19:69:c5:61:
4a:0d:15:c2:b7:91:8f:0c:4a:0d:ef:c0:4f:f5:99:f6:72:8e:
c5:46:5e:02:8a:78:7c:f2:06:d5:d4:74:4a:aa:ad:87:47:d8:
ea:4a:f8:b5:7c:79:15:c0:a5:d7:cb:96:9b:b2:a6:9b:06:f8:
bb:8e:dc:f4:5e:8c:07:69:5e:c1:a5:b8:c9:90:4f:56:d6:a4:
02:83:9a:bb:5d:ea:bb:28:25:0c:65:a1:af:5b:22:79:48:ee:
f1:53:b6:89:f1:a2:4e:41:f3:20:ed:7a:56:6c:09:21:e2:44:
47:4e:4b:bb:77:8a:2c:d2:c0:e2:91:a3:e5:7f:44:6a:01:15:
6b:d0:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:50 2025 by rpki-client