Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: JGSKZSJGgHd9vah0qBRUUQkgYEvfDwQ/PYLbL3JXXBI=
Subject key identifier: 2B:62:AC:DB:A6:71:13:C1:F0:24:80:D1:6E:C9:FA:10:1B:03:66:18
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 0194BBCE3CCD54D03344063E306571F9CDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 09EB
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: 9QoqqrqT80aWs10B719Tk/LjprQOsNHOkhAwNyj9dXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:cd:54:d0:33:44:06:3e:30:65:71:f9:cd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=2b62acdba67113c1f02480d16ec9fa101b036618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:d6:0e:64:03:f2:57:05:a7:96:c3:f8:11:
85:4a:13:86:ae:5a:bf:f4:7a:16:c7:68:2d:1a:8f:
35:5a:20:0f:88:ef:2c:cd:78:71:89:10:e2:67:71:
22:6c:99:00:74:8b:f9:e3:89:87:fb:5e:d7:c6:1b:
22:63:f1:25:93:99:3f:8c:02:be:c1:5d:52:58:cb:
c8:44:29:c7:e1:c5:c4:a9:bb:a8:79:12:f7:7f:b0:
01:76:cb:77:98:45:3c:34:ba:6c:6f:39:30:c9:e1:
8a:15:33:1a:1f:d4:14:d5:87:79:2d:0d:25:9f:8d:
92:1d:aa:02:96:f8:a0:03:d9:1d:b5:a8:0e:a0:33:
95:ae:52:03:c2:ef:9c:e9:ed:f6:02:fe:d6:66:26:
1c:17:84:3d:f9:4d:98:d6:03:4e:78:b4:0f:c8:7d:
18:06:b8:df:a2:f1:e0:3a:11:4d:bb:96:84:c5:fb:
77:2f:66:44:db:2d:14:2b:5f:bf:8c:a2:6f:08:ae:
f6:02:2e:36:9e:5e:d0:88:94:83:b3:95:46:cd:98:
dd:9c:b9:b6:76:b6:80:1e:7b:15:ae:fc:60:5a:68:
85:b8:80:03:35:df:37:6c:ba:d9:64:e8:f6:44:7d:
c3:82:45:a7:56:53:64:08:2b:b0:52:73:3f:27:4d:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:AC:DB:A6:71:13:C1:F0:24:80:D1:6E:C9:FA:10:1B:03:66:18
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:96:b9:7c:7e:01:b0:d1:8d:cd:fd:c2:4b:63:8f:96:08:
4d:e2:f0:92:80:92:a4:8d:25:2d:bd:89:f0:c9:44:5c:3b:11:
af:98:16:70:48:f3:d7:cd:5d:a0:d3:cd:ae:7b:bc:8c:93:8c:
7b:2a:9a:07:86:ee:7f:84:10:37:fa:3e:df:7c:f9:f8:35:55:
30:9d:99:7d:a7:ff:b2:9f:f5:85:10:a5:5a:50:68:78:27:5a:
48:dc:7f:45:ae:a9:a5:07:aa:22:18:52:55:5b:76:54:90:2b:
48:50:c4:ee:a9:2b:68:b7:8d:37:49:27:89:bd:c8:44:ef:c8:
a2:8f:b6:62:bf:cc:74:30:13:78:e2:18:15:aa:51:1a:79:4e:
56:97:9a:64:68:64:56:03:b5:e1:41:d3:b1:f2:8c:27:71:19:
22:26:f6:c0:d3:97:68:68:fc:ec:91:54:1a:df:c2:51:64:02:
25:50:7e:fe:4c:00:0a:d6:44:78:d5:35:62:8e:19:c1:77:93:
09:c4:41:fe:5d:f1:13:7e:b9:ad:8c:67:ee:43:5c:23:4c:9a:
74:7c:34:1c:4b:6f:77:16:65:8c:46:af:30:0c:53:4a:f7:1a:
1e:62:ce:1a:08:e1:a6:a6:f3:c0:4d:d0:05:7b:01:9a:09:d5:
47:e7:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:46 2025 by rpki-client