Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: 7o+KD3biUVn2nt1+PSG4rtrOPWXDA0OgG+Yi6LK04Po=
Subject key identifier: 50:DD:E8:7F:4C:B0:04:C5:91:13:31:8A:4E:04:65:DC:7E:24:3A:95
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 0194BD8541AD751CA344DE2D2A58BD054B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 0815
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa (hash: u7nakvY2IzZI/nPIoCHOpaknwKeAH1RDuYLRGXqd0p4=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: cFRpdjv3frPc6J7HrcBYM9xuOln8IKEmx98h3f/bwQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:ad:75:1c:a3:44:de:2d:2a:58:bd:05:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=50dde87f4cb004c59113318a4e0465dc7e243a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:4d:16:d6:a3:e0:ed:0d:7c:71:5e:18:a3:
fd:bf:c7:c8:8b:28:21:63:81:b5:c4:6d:8c:46:09:
85:e1:e7:fd:51:8f:9f:2d:51:bd:15:93:04:5f:8d:
a3:a5:7e:e1:52:2c:11:b9:33:ab:2b:c0:b9:8a:81:
cf:2b:8d:26:2f:6d:56:91:a6:ec:5b:d2:a6:e8:c6:
c9:69:61:ca:ef:27:c2:a1:33:8b:02:10:d2:76:7a:
87:5f:f2:6f:b1:e2:14:e0:a7:57:30:0e:1d:af:33:
5e:ab:91:0f:4d:0d:50:a5:61:1c:ec:76:c6:b8:58:
47:e6:f1:a9:12:2d:e9:7b:e1:3b:81:de:09:6d:25:
30:b3:cd:ec:db:c3:f4:2b:68:43:47:22:03:53:d1:
ca:a9:8d:89:ef:8c:68:a2:86:8f:3c:d2:76:23:0f:
9f:15:9a:e8:34:8c:34:e1:1c:28:13:e3:bf:44:d8:
d4:2d:ea:89:24:42:35:90:f7:d8:15:7c:4e:2b:f6:
75:f4:1d:04:61:e5:a6:8f:04:7c:66:59:94:52:61:
3f:fc:66:ce:24:dc:72:d3:32:d5:ba:ca:86:80:74:
77:6c:e4:80:cd:7a:6f:7f:ab:4d:e9:36:ff:90:26:
ec:77:6e:ee:ff:08:a1:d8:76:42:03:cb:f3:bd:fa:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:E8:7F:4C:B0:04:C5:91:13:31:8A:4E:04:65:DC:7E:24:3A:95
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bd:11:3e:d2:5c:13:28:ab:90:f4:e8:86:cb:ac:ce:9e:16:
68:80:db:38:aa:64:23:99:74:39:eb:45:37:c0:03:dc:81:bf:
80:6e:a8:9c:11:d2:c6:07:a0:e2:d1:51:fd:ee:64:0d:66:5a:
82:4d:55:b5:e9:3c:da:ab:a3:75:39:10:ed:91:d3:6c:ab:7f:
b6:d5:f9:bc:12:4c:52:fb:2b:0e:9e:f2:5f:00:b0:a8:cb:d6:
39:d7:bc:7e:88:2e:44:30:6e:17:07:53:e5:eb:b6:46:66:45:
c1:67:dc:43:43:73:8d:48:f2:1b:a0:9d:d3:76:ac:12:35:cd:
78:c6:cf:4e:a8:75:ad:90:38:7c:34:66:59:ad:97:f8:33:e0:
21:20:81:08:56:1c:73:e8:3d:55:bd:7b:b6:6d:83:17:96:77:
31:58:5f:f4:4c:f2:b5:f0:57:b4:77:1c:44:6a:bc:08:6e:34:
ae:0b:b9:41:82:ea:08:aa:6d:2c:6a:22:71:b0:e3:c6:d4:a5:
b4:9f:90:c8:72:89:fc:8f:65:e9:a7:62:fe:e9:65:5a:10:62:
7d:79:54:5c:f0:1c:60:25:b2:5b:dd:01:18:63:42:15:6f:ff:
c2:f6:03:40:3e:11:b4:0f:a0:a3:6b:db:54:9b:fb:9b:16:82:
8f:e1:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:49 2025 by rpki-client