Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: qeGeicPSJNFxjhXog0sTV6RDr6L2y0JWb6MF5oLrDWc=
Subject key identifier: 17:17:98:17:E9:0C:85:5C:F2:41:B3:65:65:DE:8D:DA:4E:A2:C8:C6
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 0194BD4E739DC08343827832CC8F094050DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0C1C
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: YkziHiMNEUoDuRH0GErsRwDdN75bw0PFn6Hf7Jq6v8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:9d:c0:83:43:82:78:32:cc:8f:09:40:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=17179817e90c855cf241b36565de8dda4ea2c8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:04:3f:96:e6:26:6e:ee:3b:91:0e:cd:2e:
46:7e:cc:fd:12:0c:3e:07:a3:8d:c3:41:46:7e:cf:
48:4a:eb:42:37:ab:50:62:41:66:86:c0:50:1b:a6:
91:f4:bf:0d:59:55:f6:1d:ee:90:38:5b:cf:37:43:
9a:1e:fb:0e:79:99:4c:3c:57:ba:02:cb:72:97:8c:
13:5f:8d:32:e2:32:7e:07:54:d0:f7:ce:ed:3a:6a:
77:b8:da:42:a7:8a:35:cf:3e:30:ea:cb:01:01:fa:
d9:fc:f5:34:fe:fd:4b:35:6f:ba:73:6e:0a:af:d9:
d6:9f:05:37:f4:c8:01:5b:18:2a:33:c0:e9:99:15:
3b:2b:4f:79:0b:31:46:94:67:02:c7:4a:d7:c2:f0:
f8:f0:62:4e:c3:96:1c:4b:21:f3:b4:de:43:15:8c:
1a:14:e1:91:79:6a:ce:ae:a3:96:e8:a2:71:96:b4:
3d:9e:7a:40:8a:3a:a6:a5:1b:85:25:52:f1:3b:3d:
3c:8b:d5:21:4e:56:9c:fe:e2:42:34:4a:db:ab:86:
cc:50:06:99:4f:f5:13:3b:ae:1d:77:ca:8a:4a:9e:
0a:d8:f5:5e:00:bf:e2:d0:00:30:ad:6b:6b:0e:8e:
eb:b8:05:8f:b0:66:be:d5:b4:36:c0:4d:41:6f:6b:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:98:17:E9:0C:85:5C:F2:41:B3:65:65:DE:8D:DA:4E:A2:C8:C6
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:f3:0a:99:85:13:17:58:c6:d8:56:6b:3a:d8:af:fd:6a:
67:f8:d4:0a:72:75:ee:8c:73:7f:60:8a:62:66:73:18:38:8c:
05:00:50:e0:fd:35:ce:dd:f9:25:f1:de:e0:5a:0b:db:fb:c1:
f3:13:c6:84:03:35:31:f1:3f:94:8b:40:46:4a:be:3d:e9:85:
da:19:cf:ca:af:c5:20:8d:c1:35:be:d5:8f:c6:ff:4d:09:16:
71:12:ce:56:60:b3:21:e3:eb:e8:86:7e:50:7a:7b:62:3a:a7:
ab:1b:1a:c9:f1:40:05:cc:8c:b7:5c:7e:c3:3f:6d:9e:df:b2:
81:4a:6d:49:7a:f7:c7:ff:32:f5:33:54:bb:be:2b:b5:f9:d9:
34:94:0d:ca:21:91:76:66:e6:ba:39:7f:bd:23:d4:63:48:52:
55:da:22:cb:a0:93:38:44:26:d7:49:aa:c0:56:07:6c:c6:93:
b0:5c:36:32:d5:1d:7a:e2:3b:d1:4d:f4:95:81:ea:6e:6d:c7:
cd:0d:b4:13:76:46:50:98:18:b4:61:2f:3a:bf:3e:a6:20:12:
f9:24:a7:fe:ce:9f:a1:83:1f:40:b7:19:b0:10:51:46:49:aa:
61:bc:db:85:29:68:85:7d:d5:0b:e0:3d:2d:24:71:6e:68:80:
29:78:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client