Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File: OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier: ZD0gjV3lHTwL+u8SmbiK+WLELgY/YGbkCPcpSo9A+gw=
Subject key identifier: 73:1E:08:09:4D:80:CB:37:11:EC:74:7E:EE:AD:85:38:10:01:08:7D
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial: 0194BBCEB4FA815EC7A984B53F31D18BA3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number: 03EF
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: v9rGKUs55oQYgzawcMa93qXSr+YTfx2Gz4PfsCHR3f8=)
2: Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa (hash: PECjzeRoLCDiJc+fMhDdhpnjzdeMhIqjV/edQ5qJgEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:fa:81:5e:c7:a9:84:b5:3f:31:d1:8b:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=731e08094d80cb3711ec747eeead85381001087d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:f7:84:e3:e2:5b:42:57:e3:dd:d8:07:4f:
5e:c0:bb:75:25:e1:d4:f0:dc:62:bd:fa:8e:0d:79:
33:d3:40:c2:26:52:52:bf:48:3e:18:45:40:c2:36:
08:99:50:cc:8a:35:33:fc:af:cc:60:58:13:69:0e:
a3:db:93:5a:73:3d:be:42:97:9f:35:76:fe:52:fb:
39:0b:e1:93:cb:21:62:b0:f7:42:ac:13:95:5e:56:
46:b8:f3:bf:bd:ca:8b:ac:fc:25:75:56:3d:1e:6f:
05:20:34:47:50:a3:67:7f:b0:82:d3:43:a7:48:92:
57:f7:ad:1e:bc:ae:b0:d6:9e:53:56:7c:2e:85:25:
55:22:48:41:5a:4b:63:9c:0c:5d:ca:e6:64:5c:a0:
8a:2d:67:73:a5:bc:47:8c:d1:c2:d2:83:59:01:8a:
e9:ff:e2:16:ab:83:42:25:4e:31:da:f6:c8:fa:d9:
55:d1:45:5d:78:ee:b4:3b:be:c0:27:e5:1c:c5:07:
a1:81:f6:e9:06:84:75:ef:78:88:4a:2b:ea:2e:a0:
3a:32:e9:40:d3:bb:5b:41:c3:f7:21:a8:33:27:e2:
ec:3b:71:27:21:31:ed:ea:eb:0b:39:59:bb:ae:3f:
20:fb:ac:7e:9f:ff:c2:e4:56:3c:9a:b1:56:66:25:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1E:08:09:4D:80:CB:37:11:EC:74:7E:EE:AD:85:38:10:01:08:7D
X509v3 Authority Key Identifier:
keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:63:5b:de:25:0f:9a:ac:a5:38:72:e5:c9:17:eb:1d:c4:d8:
d5:0b:bc:94:c5:e7:39:7c:d1:c6:e9:99:a5:5f:0a:68:e5:ab:
9e:0d:e9:50:cd:36:a2:34:c5:a9:27:15:40:60:4b:dd:4d:69:
c6:42:aa:00:d3:bd:ef:be:db:6e:43:78:e3:65:7e:f5:c9:cd:
bb:13:e4:29:90:8f:ad:46:79:c5:a6:54:77:c7:fb:b5:2c:73:
b3:a2:f2:58:ee:a9:20:c9:3c:62:26:e2:2d:44:7d:b2:78:85:
ab:a6:aa:fb:4c:30:ac:0c:44:3f:a5:0d:8d:7a:6e:53:13:d1:
d2:bd:95:e2:da:77:ce:8f:b9:04:cf:b8:9c:db:01:18:7a:77:
21:9d:74:90:cf:83:18:be:9d:5e:fd:56:83:e1:0f:01:e6:5a:
dc:86:9f:8f:ac:1b:2a:d4:6d:f6:12:12:07:7e:c2:6a:dc:7a:
bd:0d:34:37:20:e1:d5:09:c4:16:71:b3:c0:86:5b:79:92:b5:
df:c6:4c:aa:9c:88:21:c1:31:8f:6c:7b:53:97:6e:97:08:31:
a7:3e:dd:d7:50:df:1a:87:b9:93:60:c2:99:a7:b9:06:a8:49:
27:f8:c8:95:cf:cd:27:ce:92:72:20:36:08:8c:26:96:b1:69:
48:9c:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:16 2025 by rpki-client