Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: 90gANOoZTjGqFb8hzcfg85AXrE3d16T5id/zLzL06AE=
Subject key identifier: 7F:F4:1B:55:72:EC:EF:09:32:94:93:F4:40:CC:3D:F7:39:57:22:72
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 0194BD17CCBE2D5C84ED53088A2137403809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: jVtPPpfKs8Hj3RKuPGysvazSthD9F1pZVmplIxOHXZ0=)
2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:be:2d:5c:84:ed:53:08:8a:21:37:40:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=7ff41b5572ecef09329493f440cc3df739572272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:c6:2f:0d:fb:84:7a:02:ab:1f:8f:f5:7c:
f0:d3:a2:9c:52:dd:51:75:58:9c:c9:ab:6a:61:7c:
46:e9:88:f6:0d:83:7f:ce:d1:d5:fb:d1:26:aa:5f:
27:dc:dc:4e:79:9d:98:24:ca:19:55:04:7b:7f:35:
04:51:5a:aa:61:8c:40:2a:28:36:1e:79:74:59:0b:
e8:6b:dd:b1:1d:64:4b:8a:60:c0:ed:dd:63:95:db:
cf:6d:7b:e0:5d:17:63:48:ad:aa:a7:b1:06:00:e4:
c5:d4:af:35:a8:f3:59:a7:4a:33:65:7c:20:78:ed:
69:79:20:fe:8a:94:90:19:69:91:32:c0:81:2c:97:
11:03:ec:e5:06:4b:ff:2d:45:4b:c6:c3:fa:93:f3:
60:d9:13:ce:cd:d6:97:fc:0c:5f:dc:7a:f3:6e:f8:
27:98:40:2f:d3:d3:c2:23:bd:02:d9:a4:d7:42:85:
6e:5e:b8:49:22:1e:e3:aa:be:5e:33:4b:cf:fb:9c:
c3:a9:64:49:b6:e7:24:c4:10:5c:fc:0d:d9:1a:bc:
c4:19:03:a5:ca:29:66:f2:a8:76:b8:77:59:4d:16:
57:8e:c5:6b:84:37:10:c5:19:a6:f1:66:26:8b:3b:
c9:f2:25:1c:ab:3f:82:c8:46:0d:51:e3:01:c7:28:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:1B:55:72:EC:EF:09:32:94:93:F4:40:CC:3D:F7:39:57:22:72
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:f3:b8:c2:fc:26:bf:d2:c1:48:83:64:1a:13:03:e7:3e:
fb:3e:77:35:7a:5b:b6:95:a5:56:a8:04:16:a7:4f:82:2d:87:
77:74:13:b4:1b:ea:f4:39:b4:16:a3:be:d5:47:f4:23:c2:2c:
07:b3:22:4a:e6:78:1b:b1:e3:0e:9f:6e:22:0d:3a:4e:2a:f3:
5d:12:4e:a0:52:fa:db:c2:41:2a:a6:cb:55:11:e8:46:28:fb:
45:c1:66:a5:ec:7c:59:0a:de:23:59:51:21:71:c3:5a:34:70:
c0:3a:e4:d1:86:50:01:56:f4:a5:07:05:f9:b5:c6:54:08:13:
19:be:05:82:ef:19:d4:e5:d1:25:27:7a:cf:2b:c5:f3:2e:69:
56:4f:19:81:e8:c2:69:ff:b1:4a:6e:48:4e:51:74:76:81:40:
9a:8f:c9:1f:2d:6d:ce:bf:fe:c9:09:83:7e:1d:4b:4f:4a:32:
84:24:87:3f:f5:f8:48:b9:4b:88:30:8a:e9:b7:ab:0d:69:93:
4a:61:06:03:eb:79:fb:f2:e7:67:2c:76:fb:41:ca:90:ed:a4:
01:74:52:34:f0:7e:9a:5b:d7:52:56:4b:76:88:48:b4:da:90:
b1:26:b3:bf:67:8a:3c:7d:c1:ca:b0:03:2a:14:8d:cc:ce:e7:
e0:1d:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:55 2025 by rpki-client