Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: Y5iWF9X6/yhX732JdcQAVd+MewLks2TCjL6pxXx46CM=
Subject key identifier: A1:BC:CA:68:BD:65:54:0B:25:01:75:76:0E:9C:DA:40:35:42:6D:6B
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0194BCA9BE02FEC0469B8CD900CCEC9B1300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 105E
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: ookyj7llY+LViMGIn0qsgJjkGW+q1cH3Ynk0A6Hrowk=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:02:fe:c0:46:9b:8c:d9:00:cc:ec:9b:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=a1bcca68bd65540b250175760e9cda4035426d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:c6:3b:d6:9d:78:20:f9:c6:ee:fc:5d:8d:
86:3e:5f:a5:ae:a4:2f:85:46:ca:51:be:b6:ae:59:
a5:8e:3b:62:b0:e4:dd:55:dc:30:fb:7c:cf:65:3b:
fb:61:9c:b7:df:fa:c3:f2:b7:8f:b1:c7:bf:d1:22:
e4:f6:f9:00:84:35:94:da:13:07:ca:87:17:01:b9:
8c:ea:07:e8:dd:28:88:57:1e:34:86:43:fe:03:d4:
b4:f9:45:c0:1c:a4:6d:ce:00:0b:21:ef:5f:02:cf:
46:e6:38:45:f0:72:df:63:e8:fb:9a:0a:6d:3d:41:
f3:4d:b4:db:35:89:f6:ab:cd:1e:74:14:73:60:1c:
ad:5b:aa:48:b4:40:9a:44:1c:dd:82:bc:14:c4:b0:
5f:4f:bd:d1:1c:a3:8b:e9:bc:d8:28:02:c9:b1:3f:
b9:03:eb:95:68:ca:f1:74:49:79:b3:f7:60:c2:29:
fa:8b:9e:a2:24:cf:d9:4f:97:be:d2:fd:ad:00:2f:
a9:70:21:9e:5f:c5:97:c5:84:2a:f9:5d:1e:8a:33:
1a:db:72:4e:12:90:ae:e8:13:5b:10:a4:42:cf:82:
7d:43:8c:2e:1e:25:a4:a8:d0:bd:06:a5:3f:01:33:
25:c3:d2:7e:5a:88:3f:1d:b9:e1:db:53:1f:f5:44:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:CA:68:BD:65:54:0B:25:01:75:76:0E:9C:DA:40:35:42:6D:6B
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:f0:cc:86:21:dc:0f:b7:6f:d1:48:b9:ed:02:47:27:d7:
fc:3d:97:1d:c2:07:0e:f0:0a:26:06:4f:cb:d1:0d:e0:15:42:
af:05:64:fe:59:d9:60:4c:28:a7:7f:64:13:91:ab:04:ce:e7:
16:e7:cd:76:57:be:3d:75:3e:b4:0b:45:fc:6b:d2:dc:0d:c1:
c7:a1:27:58:97:05:5e:34:63:86:49:b9:ee:7b:8a:ba:cc:44:
6b:aa:cc:d4:04:57:dd:b6:aa:aa:59:4d:4d:ae:14:21:cd:f8:
41:74:69:a2:a0:e8:fe:4f:97:12:10:ca:70:36:34:4b:78:fd:
9f:3f:ab:81:50:59:a5:9c:ad:1d:e0:71:05:48:97:b8:5d:da:
59:5d:b7:5c:57:01:12:0e:49:f8:1c:e0:39:af:7c:6d:39:75:
25:33:c3:92:07:c8:29:23:39:84:59:60:3d:14:08:bd:aa:1f:
3e:f9:b7:fd:9a:55:20:8c:14:f7:3b:c3:93:60:71:2d:bc:a8:
e8:13:be:56:3c:1c:12:2a:f3:ca:47:54:67:43:4f:3e:60:18:
57:1d:30:25:09:ca:bb:c8:a2:39:8e:49:04:0b:5f:30:83:4b:
b0:7f:32:70:4c:35:77:6f:57:5a:44:4e:d7:8e:e7:a2:07:cf:
c8:aa:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client