Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: PjzDRvTJIZHnIdeSA/aHzTq6aIQ1rPkQ/EwI/Ng4bnw=
Subject key identifier: 5D:E5:77:BD:AA:1F:48:A8:3D:86:3E:9A:88:85:4F:12:34:EF:6C:61
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 0194BD4E69454C5B00E079210DEA6715BFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 10C7
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: 48RqF8GEGmw+EaBxbOh0FefxXGy1R4ORsrx4Clx6iMk=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:45:4c:5b:00:e0:79:21:0d:ea:67:15:bf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=5de577bdaa1f48a83d863e9a88854f1234ef6c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:90:0c:0c:ae:11:db:a2:0a:1a:1b:9a:4c:4e:
49:cc:52:9e:d2:89:45:32:47:5f:8d:1b:a4:38:b2:
f5:91:ae:31:f7:26:f4:5c:55:13:92:b7:9f:09:d1:
61:dd:b1:a4:46:f3:27:90:c1:ed:b6:ec:5c:6b:6a:
70:a8:ef:a2:15:d5:f0:fb:b2:09:d5:42:5e:30:7e:
1f:b6:2c:a8:25:01:dc:6d:d6:40:be:0c:bb:13:d0:
c3:aa:b5:e1:92:91:cc:92:99:71:57:75:32:3b:7f:
e5:d7:c8:a7:cf:f4:c2:27:20:22:bc:28:57:7a:33:
b8:72:eb:e5:c6:31:fd:f7:9f:ca:21:c1:69:44:a8:
26:c8:e4:7c:25:fa:b0:7a:0e:09:c2:66:d2:d9:c7:
36:b1:8e:a1:4b:56:db:02:5d:d9:8c:f7:19:a6:4a:
4d:9b:d7:96:de:56:4e:2e:25:90:0a:52:79:b8:ea:
e7:d0:bf:25:71:fe:b1:9a:b4:e3:89:94:cf:cd:ec:
45:84:89:54:bb:72:2a:4f:89:d0:d9:a1:17:2b:87:
42:72:91:2f:9c:66:75:37:e3:cb:43:97:1c:d5:eb:
62:03:55:71:d3:f5:3b:58:7f:d3:9e:1b:d6:67:20:
9c:0e:d9:fb:99:25:a8:70:dd:b1:8d:f0:16:ed:43:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E5:77:BD:AA:1F:48:A8:3D:86:3E:9A:88:85:4F:12:34:EF:6C:61
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:75:31:ff:6d:f0:45:df:6e:23:47:33:5c:76:62:5f:bb:
e8:f8:fa:9f:30:c5:4e:2e:a3:da:f1:8d:73:2f:00:f7:c7:b9:
32:8f:cd:37:93:d0:de:9f:99:99:a4:4d:c6:67:ea:db:3e:64:
13:8a:90:ac:30:d1:42:4e:1e:90:9a:58:06:c1:69:5c:44:09:
54:a2:f7:4c:d5:28:33:a5:05:58:ae:93:ad:c0:ac:5a:8b:1e:
6e:f8:b1:91:7f:97:61:51:5d:f7:2f:75:50:35:de:7c:e7:53:
39:58:af:32:74:8f:4d:d4:a8:e9:bd:3f:a8:95:46:b5:fa:2e:
f8:9a:f8:e1:f7:10:86:07:eb:49:82:48:ab:2f:8b:5a:eb:4a:
1a:86:c9:ec:7c:6f:05:8e:1c:a0:13:be:59:fd:e2:2f:4f:8b:
19:96:c8:83:ed:a6:3d:32:ea:fb:4b:f9:ce:39:57:f2:c3:03:
bb:68:cc:81:c4:31:be:61:8c:8f:68:6d:59:d8:8d:f4:87:41:
63:03:49:4a:bb:7e:6e:bd:64:48:1a:f3:cd:3d:6a:49:3f:75:
52:33:c1:89:69:f4:fe:07:dc:cd:8d:70:9d:9d:8a:68:3f:78:
1c:fa:e9:ed:41:75:dd:77:c3:3b:f4:54:7d:f1:93:ae:18:dc:
da:db:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client