Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: sznkZ02P9as+o2AunN/IZmNe1CDp16vwwq/Vv3lqUTs=
Subject key identifier: 43:3E:05:0E:19:AE:7F:2A:78:8C:C9:CA:7E:7E:B4:7A:F7:19:84:DA
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 0194BD4E877A66701930A9F2B1D685E2EC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: 7T1J6A2MKbny/1uO+lV1qnDSZG/CZ+B8/AoCAoIqzuA=)
3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:7a:66:70:19:30:a9:f2:b1:d6:85:e2:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=433e050e19ae7f2a788cc9ca7e7eb47af71984da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:a8:88:50:19:56:46:c1:bd:d1:0d:98:4a:
78:43:96:ba:3e:32:32:f7:3f:e1:7e:8f:14:d3:f1:
c9:8b:a9:8c:e7:a3:3d:af:09:4c:97:e4:a3:43:82:
26:f4:8e:70:7a:4e:cc:cb:4d:d4:20:a8:60:88:e6:
e5:d9:68:90:49:cb:fa:fe:a7:cb:4f:5f:d0:c4:bd:
4a:87:54:42:5d:be:e0:6d:d1:39:04:6c:f2:01:bb:
07:9e:91:14:4d:b6:34:44:53:96:42:55:8f:48:d8:
1c:9c:61:7e:d9:28:bf:02:7b:25:1b:4b:e4:04:cc:
89:27:e9:c5:2c:fc:b3:d1:26:aa:3e:77:c4:15:0c:
21:a6:c3:10:15:94:ef:17:aa:95:f4:44:b0:03:2e:
d4:fd:cb:5d:a4:0d:dd:cd:ff:23:05:4e:2e:cd:a6:
89:83:6c:62:36:20:a4:10:3b:b4:94:51:af:73:61:
c2:68:32:9b:82:6b:a9:45:68:fd:c1:bf:d2:48:b6:
18:ed:be:a2:27:65:8e:d5:b1:15:eb:b2:56:0d:67:
33:3f:ab:77:9a:c8:22:c0:74:4e:3a:cc:b6:7d:6c:
72:b8:ee:15:66:16:4a:ce:12:c6:58:83:1d:a4:e1:
0a:7d:b3:7c:d1:95:62:1a:5c:a3:6d:94:a9:94:d9:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:05:0E:19:AE:7F:2A:78:8C:C9:CA:7E:7E:B4:7A:F7:19:84:DA
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:6b:b0:ca:8e:1b:ba:c3:d8:bd:45:ff:0e:db:88:51:07:
78:77:7e:f6:3a:8c:5e:4f:48:6e:25:14:31:85:f6:78:86:bb:
76:a0:b3:71:17:10:af:6d:65:e2:9e:0f:77:0b:92:11:90:65:
6a:d3:54:1d:26:3c:03:6a:e7:6b:98:28:1f:77:f7:92:70:b8:
1f:e0:4d:ea:e8:d1:39:67:dd:82:30:db:6e:96:95:9e:be:74:
4a:69:ed:12:60:20:dd:83:8b:88:d3:e8:4e:c9:58:77:81:86:
a2:bd:c5:44:5c:90:bf:7d:08:aa:e8:8f:38:b0:74:d2:e2:87:
21:a0:fc:25:69:85:d1:22:f8:ed:bb:23:5d:d7:c1:b3:19:13:
a3:f0:aa:04:56:34:b7:d3:35:4b:22:df:71:0b:02:05:06:13:
62:a0:57:75:da:e6:fe:e0:87:8d:06:f5:dc:3b:46:86:d9:5f:
95:f5:95:e7:d2:e6:78:d2:10:28:e0:49:e0:5b:08:e4:5b:47:
df:e6:e4:cf:2a:a1:e9:a1:fb:d7:fe:54:21:4b:6e:63:9d:1c:
59:ed:aa:18:e2:92:36:46:7f:51:47:d1:4b:48:36:a7:9b:dc:
2b:1a:76:3f:d2:6a:b6:98:83:b3:ba:87:28:d5:62:af:5a:a9:
a5:cb:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:06 2025 by rpki-client