Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier: fxkhbzeD937X407oedwcrIMTWy62VO6eYW7uxMjYSqM=
Subject key identifier: 27:38:F6:F8:65:E8:A1:E1:D2:02:67:FC:46:1A:62:09:07:14:1C:B5
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 0194BCA98EFE2A46D4E5DCB4FE460DD0125A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number: 0F47
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: AmLrnFBBUwarj708-brt5mXEs6c.roa (hash: rrDod4wiM6+h8On16PiqN3FEJpayPPTDmJ6oUSkO4ZE=)
2: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: mvLcWX3EX7HPmoyPf0IMB+WYt177ezN6NDgQzHr4Q14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:fe:2a:46:d4:e5:dc:b4:fe:46:0d:d0:12:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=2738f6f865e8a1e1d20267fc461a620907141cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:03:b1:80:cc:7a:c0:d2:85:f6:cf:43:32:
e8:b8:2a:6d:84:10:85:1f:ff:d5:a4:de:9f:67:4d:
88:6a:90:f7:ad:22:14:96:e1:66:f1:0b:d8:54:89:
00:e3:87:cb:b8:20:9a:be:81:1a:53:37:de:cd:ff:
28:ba:0a:81:7b:f4:cf:c8:49:f7:0d:66:9e:0a:da:
1a:e7:4d:ce:d1:87:70:89:09:28:38:5a:c9:ac:e3:
33:e9:84:74:a1:57:f5:0d:bc:4f:69:20:e3:ed:c3:
c2:cf:8e:7c:f5:0d:77:6d:f7:66:86:0a:db:b7:cb:
1c:91:7c:2c:bc:e0:66:51:bc:ef:e8:36:e9:2e:78:
8b:18:b1:a8:87:b9:fb:c8:90:66:1c:67:ba:40:0d:
05:2d:0c:a4:27:07:54:c6:5b:71:40:38:04:f7:a8:
fd:66:36:2c:55:9a:43:d6:ff:b5:a8:4f:4b:25:24:
71:1e:af:db:c7:f5:96:68:f6:50:cc:c7:1b:82:02:
a1:55:84:d8:1d:43:a3:f9:f1:4c:0c:d7:d4:09:02:
de:f5:68:b5:4c:89:df:74:46:e4:01:d3:f2:86:bd:
5f:ec:19:8d:db:0a:51:45:d0:0a:12:4f:b5:d2:fa:
f1:10:f4:15:fc:99:58:f2:24:6b:f2:8b:7f:db:5a:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:F6:F8:65:E8:A1:E1:D2:02:67:FC:46:1A:62:09:07:14:1C:B5
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b2:1f:da:e2:3d:8a:c7:d6:05:72:78:fc:3d:e4:46:a4:d8:
fd:8e:66:1f:37:bb:be:5d:0f:33:cf:3b:d2:f5:37:ef:e1:80:
c2:ee:39:21:a1:a7:b7:4d:8a:63:bf:47:ee:3d:d7:50:23:73:
c3:59:06:d6:e9:ff:49:4e:95:d8:14:6d:4b:1d:d2:6e:97:c3:
36:b3:36:e6:37:c4:4c:c5:70:99:7c:5b:a4:c6:08:c5:8f:10:
6f:fb:cc:57:02:8c:e3:bf:eb:31:bb:d2:8d:00:ac:cc:57:f8:
43:a7:c1:54:22:d6:ef:5b:42:44:4e:dd:19:03:0a:72:9e:e1:
e5:68:b0:4a:f2:36:75:84:b2:36:a5:84:d0:c1:b8:05:e4:3b:
95:f5:a1:94:fa:ce:23:d4:66:5d:76:51:15:65:95:76:f8:01:
f2:40:d4:fa:bf:bd:42:3c:aa:bc:d2:2c:16:c1:80:3e:2a:a1:
cc:0e:db:4e:e8:5b:3e:cd:9f:b4:b3:4c:15:76:3a:04:53:61:
13:57:71:be:8f:11:a8:9f:e3:5e:0b:b3:a3:ac:20:40:ba:7b:
8c:9a:68:55:f9:66:3f:5a:2e:56:c0:91:0d:c8:0c:65:07:00:
1c:a6:4a:d8:b7:f3:ff:4e:c6:e0:1a:f6:e5:6c:00:66:81:ac:
01:9c:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:23 2025 by rpki-client