Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: s9dsykmNodViDarzL+2m73ccdwA+zEatrE/HSUr5oMk=
Subject key identifier: 0C:19:48:F1:36:BC:D3:4A:C4:96:84:D2:C0:A2:EC:02:D4:48:AC:37
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 0194BC733F6B57EA746F76F646D3BD43AE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0AA4
Signing time: Fri 31 Jan 2025 13:00:56 +0000
Manifest this update: Fri 31 Jan 2025 13:00:56 +0000
Manifest next update: Sat 01 Feb 2025 13:00:56 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: zQs5fSo7qMa6rcdgynMAPji9Mhu5xCdrf84iTAyZ7pg=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3f:6b:57:ea:74:6f:76:f6:46:d3:bd:43:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Jan 31 13:00:56 2025 GMT
Not After : Feb 1 13:00:56 2025 GMT
Subject: CN=0c1948f136bcd34ac49684d2c0a2ec02d448ac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:f4:29:b0:ad:29:c3:80:3b:d0:3b:a4:3a:
6b:8e:8f:37:77:3f:58:1a:46:0d:4f:9a:7b:75:8f:
c8:de:7b:1c:d6:aa:c6:be:16:9a:7c:cc:b4:86:c7:
5b:cc:5b:ab:7e:7b:a8:57:66:72:84:31:80:97:92:
b8:e6:b4:51:a2:ce:da:6e:0b:4a:9d:6e:e9:99:12:
56:00:9f:0b:b3:43:d2:bf:4a:c9:be:43:a0:66:5a:
10:07:80:f9:1d:c0:9a:7b:11:9c:99:43:db:aa:e8:
cf:b1:b0:bc:02:ed:20:de:9f:92:59:8c:41:23:db:
91:01:7b:96:c4:17:b8:84:4d:5b:a8:ff:cd:ae:7f:
55:0d:21:e1:d5:f1:0f:49:cc:01:47:f6:3d:f7:16:
1a:ab:75:b3:c6:f5:58:1f:eb:02:20:17:36:bb:1e:
da:59:ac:ed:2b:e9:6d:3e:5b:39:8b:52:00:ee:83:
c8:b9:2b:44:c3:f8:1c:43:39:53:d4:36:43:23:2e:
86:aa:b1:26:0c:62:1f:aa:af:77:c2:22:b2:be:22:
7a:3c:b9:87:c7:b8:de:d6:79:3a:db:cb:64:85:8b:
14:91:eb:9c:c4:1f:3e:ee:4f:1d:65:0f:c2:48:09:
de:bc:73:a2:86:77:42:ea:85:66:49:1b:61:9a:b5:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:48:F1:36:BC:D3:4A:C4:96:84:D2:C0:A2:EC:02:D4:48:AC:37
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:f3:8f:1d:8d:e1:ee:a0:39:d1:ae:74:8f:72:f7:13:c0:
ae:2d:93:bc:f6:2d:9b:8a:1f:9e:63:c8:06:c4:45:fe:af:64:
3c:83:8f:ed:fd:3c:dd:aa:47:79:13:c6:8f:e5:72:d1:7d:0c:
be:0f:65:14:af:f2:e6:2d:2c:d8:da:84:3e:bf:4b:2d:56:20:
b4:91:23:39:6d:55:68:aa:0a:f9:10:08:c9:3b:56:3e:f9:53:
bf:77:a1:c3:08:13:3a:5b:3c:61:67:4e:42:42:67:9f:93:e6:
9d:f6:34:d9:ae:73:28:79:f3:e7:07:bf:c9:3a:c2:7d:d5:8b:
d1:02:71:ea:e3:56:26:8e:ef:e2:70:98:70:59:59:9d:61:e9:
9e:99:84:39:7e:04:2d:0b:49:65:80:22:67:b9:c2:e4:02:e9:
67:fb:cd:1a:3d:52:c9:f4:54:6b:5a:d5:8e:a0:04:11:55:4d:
23:b7:88:49:01:1b:7b:b2:91:a6:5f:4b:8b:f0:d0:5a:a8:9e:
7c:53:25:a0:a9:1c:01:16:b4:be:91:41:51:fd:22:7e:e8:8a:
30:ed:f7:51:94:e7:f8:70:4a:30:d7:a9:bf:be:09:24:e2:3d:
d9:6a:7e:66:ce:9f:f4:cf:8d:f7:a7:33:5d:55:67:24:92:78:
6e:6f:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:43 2025 by rpki-client