Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: hNXZqJDgy2KSV19ZqKxmB3n9s1kbn9QPn9GciEOFpLw=
Subject key identifier: A8:E4:10:4D:36:33:97:DE:81:46:76:E2:E6:A9:E6:E9:0D:4C:57:3B
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 0194BD856F255A3F985C1FE213F7C3B9ED90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 078A
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: eRS1RsZCD3sqp8qwljLn4ByO9mYYy7KiuOdxPIzMHBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:25:5a:3f:98:5c:1f:e2:13:f7:c3:b9:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=a8e4104d363397de814676e2e6a9e6e90d4c573b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:9e:c2:0d:80:11:18:93:12:3a:10:5f:5c:
cd:b6:05:1a:c1:27:33:88:a5:80:c4:83:57:c9:d0:
ae:02:8a:e4:65:71:81:ad:c2:ff:df:6f:bf:26:c5:
46:32:a8:b6:7c:b6:c3:c8:33:8e:73:4b:85:d7:26:
cc:72:81:21:be:13:a7:6f:a1:fe:e5:ed:c9:0d:1d:
a3:8f:4a:9c:70:d8:1f:b1:07:2c:4a:de:d2:3e:f0:
6b:f3:10:17:36:4b:d2:da:97:5d:3b:bd:f7:f9:72:
bf:d7:c3:11:e0:1e:dd:eb:09:f4:ac:79:c9:4d:48:
ed:c1:ef:9b:ff:65:22:d2:f4:79:41:33:77:32:c7:
0f:56:ca:b5:8c:6b:52:36:85:e4:8d:57:cc:22:78:
6d:0f:48:97:49:48:83:6b:2f:f7:3a:65:a8:49:12:
48:12:01:88:36:4c:59:b5:38:da:ea:f6:34:86:3b:
d6:3a:c5:08:01:d6:c1:74:41:43:df:3e:70:b8:71:
c5:f0:ab:b8:12:a0:e8:19:24:2b:dc:98:47:81:f6:
be:26:c2:9a:80:d6:c2:fa:68:de:9d:82:d9:24:98:
6d:fd:ec:10:d5:bd:f8:1d:82:14:2f:69:0b:b0:02:
7d:c4:87:93:87:3a:bb:02:0f:96:89:c2:9d:44:27:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:10:4D:36:33:97:DE:81:46:76:E2:E6:A9:E6:E9:0D:4C:57:3B
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:89:ae:2d:ca:5e:b7:30:a8:e2:d7:15:78:a5:59:16:14:
a0:d7:cd:db:5c:ca:31:ba:0d:dd:50:db:82:65:ec:fb:7c:3a:
4b:cf:b2:95:73:22:c5:20:53:f2:f9:13:0a:b9:b8:ac:95:95:
fe:b6:55:b4:69:3d:48:a2:59:b8:0f:28:15:13:5b:97:31:e0:
96:85:b9:82:64:b7:b9:dd:f6:7f:4e:4a:ea:fa:f9:c2:89:c7:
5f:fe:6f:76:47:ac:48:33:4f:79:47:63:1b:be:e2:95:5e:9d:
e5:97:e8:58:29:29:41:0f:37:9e:2d:87:f3:93:ca:2a:82:87:
0d:50:42:21:77:bc:21:81:08:a3:87:8f:d2:26:71:75:62:65:
df:57:b5:98:3d:53:e5:c2:ea:26:f9:40:f9:0f:29:6d:47:22:
c1:fc:f4:1a:11:22:2c:19:13:97:23:00:3d:32:c9:e2:2e:2e:
c7:26:e5:03:a1:52:64:e8:be:81:08:ec:ed:59:e8:b0:8f:f0:
fb:7a:5b:ee:8a:97:df:0e:d2:ce:8c:3a:c8:1c:f7:96:bf:f4:
d9:5f:a0:b5:f5:b0:7f:76:f2:4b:18:58:07:5c:8d:1d:c7:f4:
41:f7:ae:e2:c5:f9:ad:4b:05:8e:4d:4e:44:8d:bf:39:20:8c:
9b:0d:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:49 2025 by rpki-client