Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: KUtjc2cEWYjdiNX0byl0fKRG0VghY0rbnfi6tusoTQQ=
Subject key identifier: F7:AF:9F:05:44:FD:5E:44:57:59:BB:C7:91:3E:49:4A:ED:C7:61:69
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 0194BD175376FC4F9DA0847BBC6D03417F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: TyZ0XtviGwIF4Tr29Y9xX3dDsse/3h8U4KWyhMpPJqk=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:53:76:fc:4f:9d:a0:84:7b:bc:6d:03:41:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=f7af9f0544fd5e445759bbc7913e494aedc76169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:2e:9b:c6:67:f7:f2:a4:bb:32:f5:9d:c1:
4b:3e:47:22:56:29:26:02:ca:71:a5:9a:3c:2f:72:
e6:06:e5:77:9c:aa:0a:fe:02:f5:22:54:59:47:43:
40:94:0e:3f:6c:9e:fd:c4:f3:c2:6c:e6:fd:dc:52:
d3:a0:4b:b4:2c:21:83:78:73:df:99:d2:20:e5:06:
17:fd:6c:08:e9:b6:8c:47:d2:89:f1:3b:a2:3e:b7:
bf:97:d2:67:1d:3d:dc:0c:4d:6b:98:dd:4f:a2:55:
7b:1d:15:ea:32:9a:04:2c:e7:b1:60:04:35:19:2b:
68:48:93:25:ec:9c:c6:6a:50:64:5f:89:02:da:1d:
d5:7a:d2:de:61:1a:c3:fe:a8:38:ac:2b:20:03:e0:
aa:05:e7:9a:45:ab:12:5d:87:d5:bc:90:d6:06:aa:
3a:f3:5d:4e:8d:e0:11:4d:0c:65:79:e2:aa:6c:a6:
6f:71:a2:ad:73:f7:2a:73:29:3f:88:c4:ff:e4:68:
ac:cb:2b:9f:f1:76:cf:f3:27:aa:04:00:87:99:1d:
5d:cb:f3:80:20:c4:ee:28:23:4c:09:77:84:e6:70:
f6:94:7a:42:42:fd:c4:53:19:43:25:16:6c:8e:3b:
fa:17:90:41:f9:c9:92:70:21:59:60:40:c7:49:bc:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:9F:05:44:FD:5E:44:57:59:BB:C7:91:3E:49:4A:ED:C7:61:69
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:a6:09:d0:ea:af:bf:b6:9e:e3:ab:99:fa:f1:95:42:3a:
9c:17:d8:2d:6d:dd:5d:cc:a2:81:76:cd:2b:3d:ec:35:64:2c:
f8:24:f3:54:a6:51:b8:7f:6f:7b:a9:ad:17:2e:3c:36:c9:a6:
66:2a:5f:28:4d:e5:a8:4a:4e:c7:df:81:0d:de:65:03:0e:ac:
b9:38:86:60:2e:4d:f0:1a:a7:89:cf:93:01:2e:59:32:45:35:
a2:63:fe:84:d0:34:cb:61:2b:7a:d1:cb:d9:58:ca:5b:e1:11:
d0:ab:ae:47:0c:b3:36:75:d8:8b:fa:fd:a0:db:a9:e8:78:14:
98:df:e8:1c:f0:7d:07:a7:5d:d1:ab:89:52:76:ea:63:8b:91:
b7:f6:6a:cd:fe:3c:bc:3f:a4:43:d6:04:fa:02:e8:19:72:c5:
e6:60:e6:8a:c8:c5:f1:a7:76:bb:b4:c6:a3:b4:0e:84:23:1d:
f6:25:8a:d6:65:6e:38:8a:1f:8d:22:90:c6:d7:22:80:f5:94:
c0:fd:ce:0b:04:26:fe:f1:ac:8e:82:a0:d3:9d:5a:c0:8c:3f:
31:30:a0:84:3a:8c:15:13:ec:d4:b4:28:91:52:74:61:28:34:
db:ea:c6:9c:27:46:6e:4f:cb:d7:6c:73:4d:6a:c0:73:31:43:
af:94:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:22 2025 by rpki-client