Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: TERHRHzmjdTmDLiK3IxIXlbpsx3YqMtZY9EizFG2g9Q=
Subject key identifier: 43:98:68:6F:73:81:4D:DF:37:CA:03:2F:F7:78:BE:05:8A:1F:B5:41
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0194BCE0A2C6F93D30D4304BF4D73E01FEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 063E
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: CPpx0d1XDfTts_23VJXBkQFqJg4.roa (hash: 1lxLtZe90XZ7bXiEJNFwLj04/bVq/MlZjvYwJI3pqW4=)
2: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: J1zFkwOAAnHxa/PgeFqZztBh67/u8kEWk1GgznjAfLE=)
3: lEz8odh3Mk2Nzj9_R9EpakgpfI4.roa (hash: Q0KYcXBHgiITZR8L6PTfW99SVpmX2yWCHbYvvP/i3+4=)
4: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:c6:f9:3d:30:d4:30:4b:f4:d7:3e:01:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=4398686f73814ddf37ca032ff778be058a1fb541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:91:a4:c4:8d:1e:02:0e:29:8b:39:c1:b7:
d6:39:cd:00:53:57:7b:37:7f:cf:b2:ce:25:6d:4a:
d8:70:06:68:24:88:24:a7:5c:eb:50:94:2b:48:4d:
fd:65:c0:9b:06:a0:a0:d9:e0:50:01:2e:d7:9d:b2:
1e:a7:32:43:f4:34:64:5f:be:56:f0:dc:e3:11:b3:
48:b2:8a:36:7b:c0:bb:5c:04:d8:14:82:95:97:a4:
da:d7:4e:25:70:90:58:dc:76:aa:41:a7:db:5f:da:
64:c4:de:3e:ca:31:85:ad:b3:07:d9:27:0c:5f:9c:
24:7a:1f:7d:0d:86:63:42:2e:5b:de:b6:ad:07:75:
7f:b5:80:c7:6e:9c:b5:62:30:65:6f:55:be:af:88:
15:74:9c:38:dc:e4:38:e9:f6:87:93:13:0a:9c:86:
0c:ca:35:ac:32:e4:a4:b8:51:1b:e1:c1:77:52:d1:
0e:e6:6c:e6:ec:b4:d7:96:0a:ad:0b:de:56:91:54:
1f:61:8d:7e:94:9e:77:7b:5e:43:23:9d:12:79:8b:
09:9b:95:58:e5:46:70:71:4b:fc:63:8e:4e:e8:c0:
0f:58:a6:cf:54:bd:f9:71:cc:aa:91:3c:0f:e6:a4:
83:07:9e:c5:1c:80:ba:bd:31:d6:16:f1:0e:57:d8:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:68:6F:73:81:4D:DF:37:CA:03:2F:F7:78:BE:05:8A:1F:B5:41
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:12:54:cd:ab:ba:bf:ef:83:76:be:c6:08:0e:a5:dd:80:ca:
e6:89:b9:02:68:c0:f1:2b:6c:d0:a0:af:2c:a1:9a:f1:31:f4:
e1:56:06:25:60:15:db:b8:96:03:6a:6c:66:41:76:7a:e6:c0:
43:a7:22:45:f7:47:3f:42:23:58:b1:ff:8d:00:87:0f:1a:83:
79:bb:49:54:c1:28:b2:cf:ee:17:16:d4:1c:e6:ee:34:fb:e3:
0a:a3:9a:35:b2:06:b7:2a:95:48:9d:04:c2:99:3e:89:45:ca:
c4:8b:00:53:4e:6f:27:85:6b:a8:67:f7:15:21:99:76:82:87:
b8:16:51:a1:a0:45:12:a7:fb:6f:8e:37:37:7c:b2:e3:59:6d:
8d:c1:94:5e:e2:e8:82:6e:41:c3:c3:05:ae:31:f4:8f:f4:41:
cf:45:f4:4b:d9:f2:83:09:05:55:9a:c2:fd:31:a6:6f:fb:f9:
17:06:17:06:3c:49:c4:61:16:9e:79:20:26:49:5a:4a:e5:2a:
79:3b:06:e7:13:c7:eb:3d:76:63:b4:97:4d:1d:62:4e:e6:91:
6f:37:68:33:d1:5b:56:e5:39:ce:c8:fa:a6:1f:01:32:53:7b:
9c:3c:d3:ef:35:85:59:9f:b2:4b:b5:d7:40:7c:cd:bc:1d:2f:
59:ed:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:44 2025 by rpki-client