Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 1VD5sRsRaT8rG65nisWl7TrpfnJlaMRXITOXoP5dpio=
Subject key identifier: AB:C2:9B:B1:19:8F:60:60:2C:3F:D7:27:5D:F5:67:08:91:16:D3:73
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 0194BD17B0CE5F902E7975B4BABF8CFD1AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: k6l1uwXxetRIn2OoNaA7UBZh30Ak1dum3dF9YtQE0G4=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:ce:5f:90:2e:79:75:b4:ba:bf:8c:fd:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=abc29bb1198f60602c3fd7275df567089116d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:ed:0a:53:76:24:87:27:b2:9f:0e:7d:5d:
8a:e5:6a:84:f7:1d:9a:70:97:16:1e:dd:ad:d0:ac:
d6:bb:ab:04:99:00:d7:9e:fc:31:69:f5:2d:7b:d2:
ec:47:29:28:1a:ff:ac:34:50:7a:f5:bd:11:13:6a:
84:68:94:23:4b:ca:ec:d8:95:0e:34:63:47:a8:d1:
dc:7d:98:d8:11:51:49:b5:70:98:46:9d:4d:d2:37:
90:d2:32:22:16:2f:da:73:ff:01:aa:7e:bc:2f:d7:
a0:5c:25:18:c0:41:cb:0c:e3:14:ef:d6:b4:b0:34:
79:ab:3b:6b:8e:aa:bf:a4:ea:93:1e:6f:43:21:d9:
d9:1b:55:60:43:c7:22:1e:47:e2:11:6a:11:dd:a8:
5d:78:c4:8e:41:10:f7:5b:67:db:99:76:b7:63:d6:
20:5f:49:bd:ba:10:c4:ad:87:36:c4:dc:8c:05:12:
7e:e9:88:fc:ef:7f:0f:70:a1:1c:bc:0a:9c:26:48:
d8:91:b2:70:3a:b2:25:86:f8:12:36:4f:64:87:4a:
aa:5f:f9:8e:98:5f:30:51:3e:b9:be:14:ca:ed:31:
8c:41:65:86:90:a5:c9:ea:ab:22:ba:86:6f:00:31:
46:a7:72:08:68:48:0e:44:85:50:c6:fb:c5:3d:6f:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:9B:B1:19:8F:60:60:2C:3F:D7:27:5D:F5:67:08:91:16:D3:73
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:63:49:87:67:fb:bc:5d:90:b4:89:45:a1:79:dc:ec:52:09:
2b:6d:17:22:2a:23:28:79:da:f3:41:70:08:5c:da:ce:3a:f9:
f8:e5:90:84:e6:c4:c8:ad:d1:9a:b2:a8:7c:4d:c0:6f:d1:f6:
80:39:56:80:da:6d:d0:37:51:eb:4f:bc:a5:71:8c:f4:d4:e8:
b2:12:a2:5b:fb:ac:60:bb:6c:0e:67:cf:bb:11:42:9d:1d:e9:
00:56:3b:7c:d5:20:3a:a7:7a:c8:a5:23:10:86:42:d3:bf:45:
e8:4b:b4:94:7a:91:3a:a3:5d:8a:e8:91:2e:95:36:03:35:38:
5d:c9:e2:59:5f:b4:35:ad:d8:1d:ab:ea:7e:7a:dd:e1:c7:57:
53:80:34:7d:e2:c1:87:89:8d:8f:74:b4:57:0f:0d:64:bc:ff:
b3:0c:8e:74:27:a6:cb:74:62:e8:8d:fa:72:d3:67:d5:4d:5e:
0e:cd:80:36:f2:9e:e5:3b:a2:21:ff:30:33:ef:00:75:30:0f:
29:62:fe:9e:4c:aa:cd:95:55:c9:15:1d:96:fc:5f:f1:d3:7c:
2f:34:52:f9:30:8b:55:11:9f:9b:be:fb:b1:71:52:85:19:c6:
21:d6:e9:bc:9e:0d:7e:cb:1e:ad:a6:dd:e6:23:48:9c:45:6c:
68:a4:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:22 2025 by rpki-client