Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: LoZ92nfGb/NOR/eZHZB/dhnomab26Q8oLStgDagM+10=
Subject key identifier: A8:13:34:16:B3:26:10:EB:1E:28:F9:0D:99:93:78:59:D9:CC:B3:78
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 0194BC3BF7B3EF29D118003EA6E1720A75F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 1051
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: IsQZtXopta1ZVRzB8tgX2L6ZdKtTjKj/doYxx41OyDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:b3:ef:29:d1:18:00:3e:a6:e1:72:0a:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=a8133416b32610eb1e28f90d99937859d9ccb378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:de:bd:0c:43:72:e2:2e:cc:ef:2a:98:18:
cc:43:e3:1a:67:7f:b1:22:11:9a:ad:08:6f:b0:56:
9b:74:1c:dc:5f:24:41:45:0b:d0:80:5f:35:33:a4:
9d:5f:e9:bc:89:62:15:79:f8:a0:51:a6:22:da:c7:
ac:a4:ba:53:d5:ff:43:6c:fb:6a:d9:48:72:91:e5:
55:7f:bc:39:a3:a4:af:f0:24:0b:e5:aa:cb:5f:be:
f1:d8:20:79:89:16:4c:2c:4a:8a:a3:68:a3:5d:64:
30:79:7f:36:b4:46:d0:5d:c5:49:5d:a3:1d:0e:65:
6c:ea:b4:27:9a:bf:24:1a:83:05:bb:94:bb:e7:21:
73:d9:57:c9:68:7a:2b:9d:4b:d3:dc:0a:cc:7f:21:
7f:b0:3c:23:32:fe:83:c4:75:1d:9d:9d:ea:44:23:
97:60:78:42:0a:26:f0:07:0f:f9:68:ce:a8:88:38:
f5:b6:be:44:fa:76:b2:bb:ee:6b:8d:e5:18:ea:bd:
25:a3:b6:aa:5d:4e:d9:0b:a2:4f:31:66:55:7b:fb:
78:24:6f:6d:13:63:5e:8e:31:3d:ea:f6:05:7c:71:
8e:68:79:e2:11:71:fe:44:c0:2a:86:ec:c8:33:34:
d2:8e:e6:0f:82:c6:d3:80:b2:47:ae:a5:77:aa:91:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:13:34:16:B3:26:10:EB:1E:28:F9:0D:99:93:78:59:D9:CC:B3:78
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:47:3b:c6:5c:4c:46:f4:c9:64:8d:b9:a7:6b:f2:02:a6:f0:
19:9d:e2:71:2c:0d:9a:c4:86:71:eb:37:f9:ac:2c:59:91:dc:
9c:5d:02:d5:81:b2:ac:7f:de:8a:13:2b:01:b1:81:ff:50:91:
a3:39:f8:e8:74:63:60:59:1c:79:23:21:bb:62:ea:93:bc:25:
ee:ca:a1:f5:ab:8f:03:8c:f4:1d:df:09:3e:2f:dd:d0:d7:9a:
3d:35:99:75:cf:0e:cd:1d:98:5e:a1:72:1e:5f:e0:cc:2f:ce:
b1:0c:be:3c:fe:af:07:c5:29:a2:f4:6f:a8:a6:8f:35:39:86:
36:45:ed:9b:11:37:68:2c:79:b1:2a:91:ed:66:53:15:1c:fc:
d1:19:b5:a3:fc:c9:c6:3b:05:72:7c:1d:c4:45:fa:f1:53:1c:
cc:64:d8:98:b8:70:b8:51:c5:54:b4:29:6d:e2:52:74:39:b8:
5b:57:19:39:fc:17:11:05:6e:78:77:41:da:db:46:08:cc:36:
f7:3e:43:55:7e:06:39:2b:75:62:16:85:5e:29:94:9a:1d:38:
72:67:bc:19:a2:b2:8e:d3:7f:e7:53:e1:b7:c2:48:9e:45:e6:
8b:dc:47:29:cd:0d:d6:df:7a:29:f0:6c:1d:cb:68:55:31:b1:
b2:45:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:05 2025 by rpki-client