Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: 2Mbss89z1mTDamEy+E96TqVIpAlxR2GbO37opPJAAXI=
Subject key identifier: 24:F6:15:75:E8:93:8E:CF:B8:03:7A:07:4D:F4:AA:F7:49:2F:DA:E7
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0194BC051138E1B6A39C3C3AB7DEA0D975FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: MG4WoQy3LQjEVsqsmwI8inaATS0c9C/E8zOtt3o8iCk=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:38:e1:b6:a3:9c:3c:3a:b7:de:a0:d9:75:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=24f61575e8938ecfb8037a074df4aaf7492fdae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:d7:09:f7:93:1e:0b:8b:af:b6:bb:64:f0:
3a:7e:36:a9:20:a7:b4:00:cc:8e:c0:53:f4:80:f9:
02:83:5c:aa:c3:4b:a8:a6:23:2a:98:95:22:e6:c0:
76:92:47:a0:86:46:b4:09:fa:e5:fa:00:41:d2:49:
ff:92:54:54:1f:d3:ab:cf:9f:2a:f0:8b:7d:04:26:
a8:11:af:9b:29:1b:b2:c4:2f:7d:25:b2:9c:8c:a0:
cc:3d:a8:40:cb:2d:11:a5:dd:06:87:66:36:0e:65:
64:a4:2b:23:4f:71:33:fd:be:2f:f6:5d:1a:d1:c7:
f5:9d:3c:96:73:31:4f:87:4a:18:4f:c9:f1:ad:59:
a3:39:55:7e:80:26:64:7e:4a:c1:b3:05:fa:1d:98:
a4:9d:df:5c:7b:3d:33:84:27:14:fe:2a:a8:fe:06:
08:91:5a:7b:b8:40:45:95:4a:67:18:23:5c:ca:74:
bb:8a:62:ef:d6:7a:55:06:8f:1c:fe:fc:9f:7f:24:
6b:d9:e8:8c:46:b2:47:d0:41:83:f4:72:1b:4e:4d:
c1:42:3f:9d:57:6b:d1:fd:cc:9e:fd:e5:62:0d:32:
ef:65:e0:c9:ec:91:1d:02:59:7e:c0:3c:08:8c:94:
93:13:90:ab:57:80:b3:d4:a4:8b:ab:9e:0e:c7:13:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:15:75:E8:93:8E:CF:B8:03:7A:07:4D:F4:AA:F7:49:2F:DA:E7
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0c:4a:95:98:c4:92:02:22:c3:5b:75:1d:23:51:4e:d1:3c:
d2:c4:93:a8:b4:10:f6:f4:3e:f9:79:16:85:4d:34:3b:8d:c7:
b1:67:4a:21:9d:12:1d:61:46:a7:02:2e:93:8d:19:b2:c8:46:
f3:61:16:d2:db:38:05:33:01:6b:e9:7c:34:17:0b:0b:8d:e3:
16:40:53:29:d3:74:7d:fd:06:ee:e6:ca:50:f2:22:61:a4:0f:
fe:67:8c:a1:98:b7:1b:f9:ae:32:3e:b2:4c:b4:6e:81:63:f3:
ae:74:21:2b:e2:7f:37:cd:4b:d9:d1:f6:91:8c:8f:eb:0e:be:
ca:6e:f0:3a:58:f4:72:64:0b:77:9a:9e:7e:2c:46:31:14:1c:
e8:94:66:ab:52:30:13:2f:ed:5f:ce:7d:ba:c2:48:12:53:ea:
e9:55:ec:7f:6c:9e:65:e2:38:04:25:2a:90:5b:6d:d7:ba:60:
37:82:cc:a6:c9:0b:2f:91:b0:15:7b:ac:41:3c:3b:8c:e9:bf:
59:a9:97:31:fc:44:bb:95:32:ad:b2:3a:c6:1d:70:c4:2f:97:
a5:06:66:43:08:1d:7d:d9:42:e9:87:c4:19:b9:4e:92:ce:01:
dc:8b:85:76:15:ac:73:84:34:5c:d7:3e:e2:fc:b2:fe:85:b4:
4f:c9:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:04 2025 by rpki-client