Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: tIaO3/oKFa8OAgFlpyme0HkGRQabBrnA58C9T3Jhjeo=
Subject key identifier: 9C:CD:66:E6:88:84:52:DD:91:D7:10:0F:FE:2D:A9:06:F6:B7:4F:81
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 0194BCA96F01439CFFF38BAF4882A4E9177A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 0BB3
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: VbKXmjJhkJ/kpdq30w8Gw8AdSm/5dU3fS8QXTeAfELw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:01:43:9c:ff:f3:8b:af:48:82:a4:e9:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=9ccd66e6888452dd91d7100ffe2da906f6b74f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:2c:ba:9b:9d:24:39:e9:0d:f3:3d:46:a5:
4c:a8:c1:ca:f2:8a:4d:51:ca:c1:82:21:e3:e4:f0:
80:57:02:97:b8:b4:35:3e:42:19:8d:cd:ae:45:8b:
8e:d2:d0:76:36:f5:ae:ab:0e:5c:e7:89:57:6b:87:
98:f0:58:c4:89:04:ec:45:11:fb:8f:ed:d4:bf:3c:
e5:bf:91:ee:a9:3a:26:87:f6:6d:0b:81:02:70:15:
59:ce:43:c3:bd:73:ab:92:db:5e:a1:56:34:d3:66:
93:73:a8:9d:e5:b4:a4:c5:3c:62:5b:7b:f9:cb:c7:
13:e0:f2:16:55:f2:54:ae:c3:f0:6d:c2:48:92:83:
59:02:56:e6:1b:38:9b:df:62:92:b4:8c:93:d8:27:
53:60:44:ee:46:e9:38:c5:3c:5f:11:19:57:fc:68:
fa:48:e4:b1:23:79:e1:69:cc:22:14:99:74:50:be:
3e:ed:f9:db:ee:dd:79:d1:bf:ee:a9:48:ae:2f:0f:
c2:d7:78:09:eb:87:44:ea:95:38:a4:6a:7e:ef:5a:
d6:26:c0:1b:9b:cc:25:26:0a:47:8f:7e:4d:23:25:
8e:e0:dc:e3:49:82:6d:6d:36:c2:9b:8e:45:f3:ee:
c1:7c:57:18:cc:4b:6d:70:20:93:b8:6a:c9:be:9e:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CD:66:E6:88:84:52:DD:91:D7:10:0F:FE:2D:A9:06:F6:B7:4F:81
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:f0:91:5a:f9:64:ca:31:db:bf:e7:62:8c:b6:5f:38:78:
54:b0:7c:dc:77:b3:61:35:ac:a7:d4:3b:44:6d:17:6d:e3:08:
c0:51:b2:bb:25:df:7f:e3:53:fd:f5:bc:e3:32:37:60:57:1a:
27:38:3f:ed:11:9d:01:7c:5a:b7:a9:ad:d5:1f:b5:93:3f:c9:
a6:5a:64:7b:13:a1:85:6a:a2:72:f5:73:30:1b:e6:50:22:27:
ba:2e:ea:33:d2:15:21:27:83:0a:92:b6:3c:9f:9f:9b:15:1b:
00:0d:67:11:c9:55:f5:0c:a3:d8:71:7f:42:8f:42:58:8d:4d:
a8:cc:81:91:c1:d3:0e:39:dd:8d:81:01:a5:09:a6:92:fd:a3:
df:ae:51:36:24:6e:0f:71:96:47:a1:04:3e:9a:b9:ca:eb:ff:
23:6d:03:49:90:d8:c0:95:b7:79:3d:25:72:2c:30:f6:b0:44:
43:1d:07:53:11:87:11:59:c8:a8:ce:ec:e5:13:b5:37:5d:ae:
97:46:c5:e6:10:1f:9a:bc:60:9e:be:7a:d5:b9:ac:df:a9:d0:
e4:6a:92:06:fb:b2:95:72:6b:ad:f6:28:ac:06:40:20:08:95:
25:5a:b2:4f:1c:4b:ff:ae:2f:ed:23:54:f4:e5:6a:9b:47:b7:
4b:49:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:13 2025 by rpki-client