Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: VQd4GY7oZJc8ZiA7x4u+Bf2B9aWK0BVgT7uzJXNXQiM=
Subject key identifier: 59:EA:2E:26:8E:CA:D2:03:5D:02:92:1D:46:97:49:7D:6F:B3:37:C9
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0194BCA986DAFF1FCB19127C0067771F37FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: BtG4HCnw86aR6pT9bv7KVeIp4DjisIZCeE7hENUvzIE=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:da:ff:1f:cb:19:12:7c:00:67:77:1f:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=59ea2e268ecad2035d02921d4697497d6fb337c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:4f:2c:61:a4:cd:2e:21:63:fd:44:0f:d4:
62:15:fe:20:ff:fd:5e:c2:72:70:ed:bc:15:56:7b:
bb:0c:b1:28:ac:56:07:1d:19:55:5b:84:62:40:12:
0b:99:39:10:f0:17:f8:56:f5:ef:ab:a3:5c:69:07:
16:91:2c:b5:b2:21:db:93:ad:a8:c4:b5:e1:0b:83:
f0:74:71:f1:2d:07:fb:4f:11:e2:5e:16:ae:ce:ff:
d7:52:1b:00:5a:ca:70:5f:b9:28:0d:e1:b3:59:a3:
65:82:3d:a7:51:86:b5:e3:fc:74:33:05:06:55:a4:
86:cb:52:1b:5d:d3:fd:31:5a:c7:57:9d:d6:64:86:
d8:ad:19:66:b4:a8:4b:15:a3:d0:93:02:bf:8e:48:
42:01:52:cc:2c:21:3d:0c:a1:bc:2d:04:ba:10:d8:
4b:7a:4e:5f:55:94:9c:14:4a:17:ad:aa:4a:e0:54:
98:06:9e:65:ca:d5:98:5b:76:25:de:4b:7c:96:38:
7a:e3:c8:82:33:6e:4e:a7:ba:e6:43:b4:ee:54:0b:
72:e2:84:e3:94:90:3d:7a:df:8e:60:b6:01:bd:cc:
13:3f:cb:13:f2:47:1a:24:36:76:05:af:9d:61:44:
0d:3a:e6:93:0f:e4:29:bf:44:1a:7d:bd:f6:92:32:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:2E:26:8E:CA:D2:03:5D:02:92:1D:46:97:49:7D:6F:B3:37:C9
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:20:31:55:55:9b:69:22:fb:5b:13:39:3d:ba:62:13:9d:cc:
85:04:4b:3b:4c:be:19:9f:84:62:90:c8:06:79:c5:b9:c4:69:
52:3f:7a:1d:11:2b:6a:1b:01:d8:34:57:fa:0e:74:42:69:05:
0d:d0:f5:a1:5d:55:e8:36:39:88:11:39:29:69:95:4a:44:41:
5a:05:88:36:6b:ec:a3:79:bd:72:ac:aa:14:a8:44:33:9a:87:
14:c0:e7:59:77:1d:be:06:d8:81:0a:7d:fa:99:f3:73:d4:12:
92:01:61:5c:a2:c2:ef:a6:11:2d:74:1f:6d:62:a6:ee:d5:00:
cf:ab:fb:95:1c:de:cd:82:bd:3c:c4:10:8e:7a:30:a7:41:cf:
79:d8:78:a2:d1:7a:25:7e:38:f0:ca:24:45:6e:91:37:68:89:
32:4c:d9:d1:68:b0:1b:d9:4b:01:83:51:24:e1:a3:4c:88:cb:
b7:1b:dd:47:e5:01:22:65:6d:05:1f:de:b3:03:78:1f:7b:13:
ba:38:4f:2a:73:6c:6b:d0:45:42:3a:e8:b8:7e:b9:a7:2e:e1:
da:6f:5c:81:8d:10:69:cd:51:58:7e:62:04:03:88:c7:23:d4:
fe:53:7b:33:d6:4b:6a:74:26:88:7d:51:47:51:4c:9e:cc:28:
bb:f0:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client