Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: 3zIZvWEomS2sB++orWeXWkvvjQDJsUWXw599wUkjOkE=
Subject key identifier: 92:4A:C4:E1:D7:FF:B9:B5:A5:ED:35:80:7E:A4:79:F1:C9:42:CF:26
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 0194BC3C0592044E63DD3C35D9C5DC0C7DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 050E
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: ttzXgEz6YeRR/YGV18ezsJ2Ahqd159xHb7SAL9aSUOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:05:92:04:4e:63:dd:3c:35:d9:c5:dc:0c:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=924ac4e1d7ffb9b5a5ed35807ea479f1c942cf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:0c:c1:2c:aa:c5:d5:7b:b3:58:76:ac:d5:
6f:f0:2b:4f:2e:70:bc:ed:8c:42:be:10:43:e3:ae:
4e:ff:6b:b4:ed:17:70:67:31:6b:91:20:b4:b6:f7:
f1:ea:51:5f:5f:57:08:22:9f:ba:d6:59:85:37:6d:
cb:f5:48:24:66:4e:08:d4:ed:74:e6:b9:19:f7:45:
0c:d3:d0:90:11:90:5f:5c:3a:82:58:48:7c:27:dc:
27:f5:c3:58:f3:66:96:28:d6:a1:16:35:97:03:84:
33:c4:d2:28:20:58:fc:54:d5:17:09:47:c9:b6:b9:
95:41:38:05:cf:6b:5c:ec:90:78:8c:93:33:1a:4f:
1c:11:f1:c8:8a:8a:c0:c8:6d:93:36:21:ae:5a:80:
ab:e5:b5:2d:57:ba:06:4a:b6:53:6c:db:01:06:d0:
ee:14:c0:c7:65:79:57:89:8b:73:cb:b5:38:71:61:
52:44:f4:7d:ff:a5:2f:de:fb:f7:23:46:fc:04:7f:
61:fb:aa:57:e0:39:be:2a:dc:7d:63:f3:67:c9:6a:
13:32:b9:96:b9:53:fb:6c:5d:e3:f2:c1:56:c7:3f:
0c:4c:50:1d:88:af:03:5c:d9:84:b8:e8:dc:c8:61:
aa:74:39:61:0d:43:0f:fb:40:ea:06:fa:4d:83:33:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:C4:E1:D7:FF:B9:B5:A5:ED:35:80:7E:A4:79:F1:C9:42:CF:26
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:99:8a:90:51:80:96:05:0b:4b:09:8b:66:d1:ca:95:56:0b:
c4:9f:b8:af:2b:f5:75:50:ac:ec:02:a9:64:53:63:d1:96:00:
de:7c:62:9d:b1:34:05:4a:fd:58:cc:14:0d:08:51:1c:ac:1f:
32:b4:f0:63:42:c6:70:5c:6e:54:e5:2f:00:f2:7c:96:21:00:
e6:5a:30:54:f6:45:a2:53:76:5b:08:8b:dc:a2:48:89:20:fa:
d7:37:40:41:cf:ea:ea:e3:2a:89:81:b5:61:dd:7d:90:2a:1d:
4a:89:a5:bd:03:81:75:5a:d4:e1:e7:88:a6:fa:96:18:c2:03:
4b:37:6a:ad:cf:f2:3b:c0:30:48:c1:d2:57:6f:3e:4d:61:69:
00:d6:f6:83:7f:3a:91:4a:ee:89:16:31:48:93:8d:d5:f8:c8:
10:3f:62:aa:9f:af:25:ff:af:06:19:60:65:1a:55:b2:2a:1f:
df:b7:51:fd:55:bc:65:bd:86:8d:f0:df:3b:bd:26:7d:e8:c0:
05:e9:eb:6d:fe:a0:29:88:57:18:75:3d:83:0a:49:13:8f:92:
14:97:6c:26:8a:12:d4:08:3a:56:dc:73:20:26:70:2b:6d:30:
2e:bc:ad:5f:8c:f6:ab:f1:d7:bb:e4:0b:c8:fc:44:20:b0:f4:
15:93:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:48 2025 by rpki-client