Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: ki9wTTZleSU4eFLL+H5mgxnl9gGaWFddy34/cbOus8s=
Subject key identifier: 03:4B:FD:44:C7:13:12:EE:CC:1E:22:2A:34:14:98:B8:0B:D0:54:47
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 0194BD179771F870A36592B5F6B7431FF327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: BCDtWB/CKE5yvvptq7ixDc8QTp6GgN2qRGDLt+zaTxQ=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:71:f8:70:a3:65:92:b5:f6:b7:43:1f:f3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=034bfd44c71312eecc1e222a341498b80bd05447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:7f:20:c3:07:3d:fd:6e:27:25:a4:cd:fe:
50:c7:7a:5e:ea:16:56:5b:e6:4d:96:8e:4f:62:2c:
52:14:b2:f1:ca:0c:43:fc:85:ad:da:4a:25:dc:38:
e6:b7:8b:df:be:fd:7b:de:e6:b6:0d:f8:0c:c3:7a:
1e:5f:d7:56:d1:d5:b3:1c:e5:38:bc:c6:45:63:eb:
bf:02:91:04:9a:ef:d2:f0:10:43:cb:ce:44:70:b0:
bd:b8:80:b9:ad:36:5a:81:b5:1c:2d:7e:16:06:7b:
81:94:a3:ee:6b:a0:24:31:d7:02:02:dd:32:cd:70:
ff:95:48:40:02:67:68:4b:a0:10:c5:d7:5b:f0:76:
e0:5a:e5:b2:0a:18:a5:51:e1:51:16:63:02:e8:21:
d0:02:5b:37:49:73:c0:1d:cd:a8:3c:b0:05:b5:25:
ae:5b:6e:0d:02:ad:a4:37:b6:db:93:5e:e3:c2:44:
ab:bd:d5:0d:83:1e:a4:99:45:1a:77:e5:4b:ee:bd:
7a:4f:24:ec:3a:da:ba:90:55:c7:6c:6c:d5:d4:95:
42:aa:60:d9:7b:ae:a2:ac:5f:c4:42:3a:f9:6d:ac:
ec:52:8c:9d:b0:fc:64:47:76:d6:bf:a0:9d:22:47:
1f:c1:13:20:a1:75:e2:83:65:2d:29:a2:a6:b9:73:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:FD:44:C7:13:12:EE:CC:1E:22:2A:34:14:98:B8:0B:D0:54:47
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:8d:4a:49:93:b1:63:be:ba:4c:21:11:cf:f0:fe:3f:1b:
34:9d:d2:87:e8:35:0b:d0:a3:24:cf:e0:d1:3f:b2:fe:54:93:
72:28:db:ba:9c:fd:9f:bb:e4:66:46:e6:f2:33:73:d4:63:d6:
b0:08:3f:e1:e9:bf:cf:5f:a5:84:fd:a7:b9:54:be:82:00:54:
d4:b5:de:62:f2:17:51:bf:51:d3:74:1b:e5:59:ed:57:c8:55:
7b:83:01:58:a8:53:48:aa:35:02:2f:51:fb:c2:91:1a:dd:8a:
79:74:ba:c1:69:db:29:04:cc:70:42:85:7d:91:9f:ea:ab:4f:
16:eb:04:97:f4:d1:19:b9:41:06:34:61:6a:20:bf:29:af:9d:
eb:2b:56:39:a7:e6:04:b8:2b:86:e4:0a:dc:6a:16:5d:8f:c6:
2e:bd:55:70:e6:8d:32:95:81:11:c3:82:56:08:e6:ad:94:76:
9b:4f:79:2e:ec:0e:c2:1f:3f:bd:c3:1f:d5:0f:79:1a:9a:9f:
6d:d9:92:5d:d1:ff:ad:45:7d:18:14:d9:2f:f6:56:00:3e:8e:
85:79:2f:cf:6f:0b:ec:9f:33:55:37:36:e9:1e:7a:3f:d4:a2:
b1:ed:d8:63:21:22:f4:06:e6:55:7c:f6:bc:d1:7a:90:de:7a:
69:03:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client