Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: yZ2vwoRBhlcOnL6sRd4n/gP/zZfNt8HGhrLrx6sWgnY=
Subject key identifier: 63:14:A1:FB:8A:18:97:96:B0:18:C1:47:20:BC:39:AB:2E:AA:D8:94
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 0194BCA987D16433D9F04289ADDE8337984F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: 0BJiaeBhobGcEt1SkIXxX0QfYUfplrXuA5cagn+d/QQ=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:d1:64:33:d9:f0:42:89:ad:de:83:37:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=6314a1fb8a189796b018c14720bc39ab2eaad894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:7d:59:85:a7:0a:af:76:99:10:3c:29:0e:
5a:2d:ee:97:60:c3:da:81:a0:8b:55:f7:10:ff:32:
1d:45:5a:2f:0f:91:27:15:de:b8:73:cf:8d:4b:f7:
59:be:33:52:26:a1:21:32:58:c0:de:15:7a:ed:c9:
21:69:23:1f:bd:b4:f3:63:a0:3f:c2:e7:9d:4d:83:
b7:fa:07:6b:b0:4b:13:2a:40:7c:c1:c2:bc:5f:f3:
fd:f8:ac:96:0f:8a:66:42:2f:21:95:90:67:5b:3d:
63:d9:ee:b4:6b:a0:58:bb:49:15:9d:cb:28:bb:7e:
85:07:28:54:8b:cb:6c:c1:e1:04:3f:09:fe:0e:2c:
ba:97:e2:84:26:9d:fa:5a:9f:2f:eb:23:ff:2e:dd:
8e:a9:20:f1:79:2e:ae:4c:89:74:d9:d8:77:10:7e:
5e:7c:19:4d:59:dc:59:b5:f6:96:28:e4:6d:97:79:
6a:a4:14:01:53:6e:6e:1e:de:5e:82:ab:55:85:12:
a0:a5:21:90:4b:e7:75:1d:41:c7:b5:29:1d:c8:2b:
56:96:ca:e6:b8:1e:72:0e:29:8e:77:24:62:5e:95:
ab:76:2b:00:6f:fb:30:0b:28:3b:84:db:d6:3d:2b:
1b:30:03:81:43:85:64:0d:5f:f6:11:ff:f0:94:32:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:A1:FB:8A:18:97:96:B0:18:C1:47:20:BC:39:AB:2E:AA:D8:94
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:d3:9f:cc:78:db:9f:98:25:73:9b:8c:9a:41:9c:6d:fa:
df:ad:6d:26:28:11:ff:9c:33:8f:1c:93:40:9d:77:84:93:6a:
b6:f1:50:a5:74:d4:19:5c:6d:ea:00:06:c0:56:f1:8e:72:00:
79:56:fb:a3:87:62:8d:63:f2:3d:d8:42:6e:48:46:11:fa:91:
cc:1d:7f:78:36:5e:ee:68:44:01:21:f1:02:4c:e8:f7:4e:7c:
70:ff:a9:ab:be:5b:c5:d9:38:e8:8c:8c:82:a9:f9:73:cb:ce:
b2:b9:3e:5a:d4:7a:e4:9e:30:01:8a:84:cb:98:c2:04:57:25:
0d:50:51:41:22:bd:99:48:e3:4d:60:f1:ff:7d:6b:1d:4b:8e:
a5:9d:d2:55:55:1d:f5:05:bd:23:3d:92:46:21:e3:60:79:b1:
90:42:72:36:37:3a:f5:da:7f:43:92:5d:01:a6:f2:66:28:52:
a7:19:38:07:6b:f2:46:91:79:7d:5b:b0:d5:6e:95:d0:de:98:
92:5a:29:d1:b4:4d:75:45:04:31:4a:3a:ac:fd:80:aa:e8:df:
ea:24:9c:1a:09:5c:74:f3:09:1a:19:cb:70:0a:97:91:59:28:
c2:06:6b:6d:6b:d7:10:1d:96:c8:d7:f0:8a:e7:a9:6a:f7:25:
45:5d:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:24 2025 by rpki-client