Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: tW0LF+7umCIWK0T8yywmMaLKf5P7XOM9MAF3WtTwbnU=
Subject key identifier: F8:D3:57:FF:77:5A:03:DE:96:0A:8A:6C:1D:C9:E7:15:B5:58:9B:57
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 0194BD854F071F6B22B5C38DE1CC792EF19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 0FA8
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: V4nHSPOoS91AHH97zl0xbE8rrAyl3ErkIJ3z9PiBuO4=)
2: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (hash: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:07:1f:6b:22:b5:c3:8d:e1:cc:79:2e:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=f8d357ff775a03de960a8a6c1dc9e715b5589b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:c1:7f:6d:35:35:1c:2c:36:71:e0:db:ce:
92:b8:45:e4:72:b1:eb:62:2d:71:2e:e7:83:e6:d7:
71:9b:76:80:93:d2:70:30:83:7b:a6:02:e3:d0:14:
bd:7c:05:7d:35:19:a6:2f:94:a3:65:f6:42:55:98:
55:a6:cc:73:27:8b:94:9a:27:cf:3d:01:19:93:87:
10:dc:76:9a:09:3a:13:a4:82:86:56:c0:48:6b:f7:
6f:23:27:1f:e7:31:d9:fa:92:f0:c6:da:11:df:c8:
74:8d:a8:f1:2c:b9:3f:be:12:80:4e:59:ce:66:b3:
3e:15:75:07:97:55:da:82:8f:93:6e:a0:45:f3:76:
b3:d7:8e:12:3d:f1:ef:93:c2:70:72:1e:c1:14:56:
66:cf:1c:a6:e7:36:78:00:9f:3c:02:07:7c:40:b7:
ac:2e:57:5f:60:d9:7e:f6:c1:bd:b2:26:7f:d8:97:
2a:d0:16:b6:4c:cd:6a:4d:eb:7d:71:73:dc:0a:80:
6f:e8:d5:82:7f:80:99:d5:eb:93:5b:b9:8c:26:84:
09:32:41:2a:fa:83:e7:71:9e:f8:ca:32:54:98:09:
46:16:06:4e:45:b2:68:f5:74:e9:46:9e:b2:ad:5e:
c9:45:e5:19:4e:42:e4:16:fe:4f:7d:59:de:8a:7b:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:57:FF:77:5A:03:DE:96:0A:8A:6C:1D:C9:E7:15:B5:58:9B:57
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:38:89:35:20:d1:70:10:39:83:8b:8a:7d:4b:47:26:18:73:
9d:b5:d6:00:45:83:3e:9a:2f:95:a1:89:8c:47:dd:f8:80:12:
c9:4f:d8:fa:de:2f:11:81:70:5e:a1:7d:f9:50:74:6c:31:4f:
48:d1:02:48:eb:31:ab:5b:37:61:a4:15:48:34:1e:d5:40:48:
23:cf:3a:4f:61:da:58:a8:00:92:cf:ba:6a:64:69:39:61:db:
d9:74:fa:fe:3f:ef:e6:86:41:6d:ed:24:87:33:d8:0b:fd:2c:
06:37:0f:72:c5:92:2d:94:81:84:6a:76:a0:94:be:71:52:40:
ec:86:db:4f:6e:97:fc:25:c5:fe:d8:f7:7b:fc:80:19:83:98:
52:ed:02:ff:38:0e:a2:44:e6:46:e5:98:88:d1:5f:43:a5:f2:
25:97:79:90:53:19:5b:d3:b2:21:4b:34:79:bb:29:6f:2e:a7:
fe:f6:84:67:fa:23:a1:de:95:e6:20:d8:c8:de:f9:9b:fa:fc:
16:cb:19:d8:d7:a6:7c:c3:8b:74:9e:7b:e2:66:d8:d2:6f:da:
1b:d4:92:9f:10:46:0c:cc:74:be:e8:2a:8f:60:41:51:0c:6c:
e3:2b:e6:a1:77:32:b7:8f:1b:61:f1:e1:73:16:ce:c8:2c:a1:
0a:51:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client