Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: QSIssTK1Jxhy0K3Rsc9Ys13Hm3CEJ/Ra6x3PK8BdfpM=
Subject key identifier: C3:DF:5F:84:E4:8C:4D:6A:29:7A:16:A9:B8:EB:B1:FF:99:37:D3:27
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0194BC72CC0CED3D9A8675BEE6DF1A197E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: ygd4XRJQMBXujp0yO7R5sqwxbCLhVdlgQP/Lo6HMIS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:0c:ed:3d:9a:86:75:be:e6:df:1a:19:7e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=c3df5f84e48c4d6a297a16a9b8ebb1ff9937d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:7e:89:d2:5e:cc:66:b3:35:e9:0e:01:28:
8f:c3:50:41:c7:7d:fd:d6:25:0e:c6:9f:7c:ef:b1:
16:67:e4:4a:a4:2e:96:ea:6d:a6:03:e9:5c:96:df:
8b:ab:07:a7:2a:40:f3:9d:50:e2:cb:a9:47:d9:80:
e4:bd:da:6b:3b:2d:cb:fb:e6:ed:59:f4:b8:f0:6a:
7a:04:c8:5b:07:17:eb:1e:37:22:56:f0:83:08:39:
f9:74:ad:25:70:b3:2d:26:b1:1f:4e:1c:1f:14:f8:
b1:ad:57:ec:a5:7f:d3:f3:a5:e8:55:5a:bb:cf:12:
70:c4:d4:8e:2f:eb:c2:90:05:74:f5:db:96:68:26:
46:8d:8b:db:68:27:38:c8:c1:5c:f1:5c:2a:42:eb:
dd:87:b0:07:d4:81:5c:ad:c1:8c:6e:f2:5c:40:e0:
cf:b6:1a:8d:be:33:55:4e:77:f1:f9:ac:f1:e7:59:
96:d1:86:e9:df:88:68:5f:13:70:c0:90:fb:6e:71:
6d:c9:a9:36:6e:38:20:88:aa:91:45:a4:71:5c:08:
99:7b:dd:09:b7:22:ed:bf:24:e0:6d:e6:0e:07:ad:
b8:e3:4d:00:56:bb:58:8b:64:d7:78:ba:99:96:eb:
31:cf:4a:f4:ac:99:ba:da:d4:ad:45:2e:d6:66:57:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:5F:84:E4:8C:4D:6A:29:7A:16:A9:B8:EB:B1:FF:99:37:D3:27
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:e3:74:5f:09:53:f1:bc:a1:1b:39:28:87:ec:10:51:21:
28:be:ca:20:18:92:0d:fb:3c:92:97:1f:3b:76:7d:03:ce:c8:
4d:6c:94:fb:b7:9d:20:46:fc:20:b6:bd:30:4c:72:59:7c:f2:
e5:56:1b:07:06:21:78:61:c6:80:43:83:45:65:15:e5:59:07:
5f:22:52:eb:bc:a9:b9:cd:b5:f9:92:58:d1:62:8e:b6:c9:d1:
28:27:a0:c5:ee:4a:d6:38:6c:ef:7a:21:52:98:d0:7d:3b:19:
02:33:f1:bf:a9:fa:b5:ab:e1:93:2d:48:cd:6d:a3:29:cc:f4:
00:fb:50:ae:f1:56:fd:06:af:1a:b0:7b:b3:1c:0c:bc:08:3c:
83:52:c9:1f:fb:9e:73:94:cc:77:ca:ec:ee:ec:03:e8:23:4e:
9e:50:12:2c:3d:0f:d3:22:9f:2b:61:01:94:44:6a:55:71:83:
57:cd:b1:f3:08:75:d7:6d:bb:a3:8b:3e:08:10:af:21:ad:5a:
3e:ec:12:e4:46:8a:a0:32:d0:89:10:ca:c3:f2:24:fc:fe:45:
bd:f3:7e:9b:9c:25:cb:40:d5:b4:3c:c6:89:db:51:4c:ce:89:
d9:90:33:ee:4d:9a:06:c6:f1:86:19:ff:2d:40:17:24:a7:3c:
22:7e:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client