Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: LAcciWPuKZQ7+NFMn/deecZvAxQHYvtUwKynoJWW510=
Subject key identifier: C4:01:74:CD:18:6D:3B:D4:CE:89:3A:27:AF:74:AA:19:E9:DF:9F:49
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 0194BC3C06D8C5A6A52D83C5A76DB2BB8E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 132A
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: 5ddLE2VUnglNr+3sojiqIVhsPmyT8X+myMgGLN1Q6lQ=)
2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:d8:c5:a6:a5:2d:83:c5:a7:6d:b2:bb:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=c40174cd186d3bd4ce893a27af74aa19e9df9f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:f6:a9:fe:91:8a:bc:29:9a:1c:19:1f:d4:
c9:ca:03:df:ac:1e:ea:11:da:2e:83:b2:6d:6a:fb:
2c:5b:78:2b:70:47:a0:ae:1c:80:4f:51:5f:33:52:
c3:85:18:31:cf:81:0d:0d:5a:de:08:99:73:a8:a5:
bf:f1:7e:a5:b2:67:8a:33:80:38:aa:d2:6b:e1:46:
92:bc:25:8c:c5:86:8e:e6:77:d4:c6:03:67:2c:79:
f9:cc:33:c4:33:2e:a8:e4:79:b6:40:e9:91:f8:6c:
0c:6e:67:02:f5:c3:88:10:e6:d9:ab:ea:a1:ba:ac:
16:4b:c4:3d:55:50:a0:1a:52:ea:a2:8f:71:43:ab:
64:2f:d7:d6:a4:45:56:75:c3:72:74:ea:bb:10:74:
87:63:15:48:0e:a0:fc:14:1b:d7:07:86:7b:54:3b:
d4:6a:8d:ee:88:ba:cc:ba:b4:4a:02:ab:8a:be:1c:
69:86:f4:55:b5:6c:13:06:f1:e8:84:9a:b5:6c:84:
1d:f8:4e:ef:0a:e6:76:04:af:3d:6d:36:2c:61:f0:
54:69:e3:27:f7:fc:5f:c3:18:42:e4:27:21:cf:45:
e7:c7:c3:ad:12:a3:dc:b4:f9:69:ff:b3:c9:f7:dc:
7e:27:42:25:da:ba:e9:e1:f4:41:8d:17:2c:4f:4a:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:74:CD:18:6D:3B:D4:CE:89:3A:27:AF:74:AA:19:E9:DF:9F:49
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:31:b5:99:25:4f:bf:2e:75:e2:a4:9f:c9:08:b5:a3:14:
5b:36:5c:c8:a9:f7:c2:9d:76:16:04:65:84:e2:7f:b0:94:31:
99:37:4d:03:ef:b3:fe:8b:4f:76:9b:d4:cd:9b:3d:38:23:7a:
86:42:9b:c3:c3:c8:b7:20:91:39:43:02:b7:de:3e:f9:53:e4:
57:51:da:93:ee:25:39:6b:81:37:74:64:3f:94:6c:0b:91:f6:
ba:5d:be:4a:28:7b:8d:20:90:ae:7d:77:8d:4c:84:8d:71:8e:
ac:98:3a:0e:30:c2:70:28:e5:b4:d0:a4:84:38:ee:68:ae:31:
da:60:ec:d1:41:15:e5:9d:7c:c5:4b:f9:74:0e:cb:47:fe:85:
b1:86:bc:be:d3:84:f4:bd:7b:76:bf:0a:e8:5c:4c:96:8c:fc:
22:61:7f:16:f2:1a:57:73:c0:9c:47:5a:16:5d:24:0f:80:92:
34:65:9e:1d:a7:66:e2:20:1d:c6:cc:56:16:7a:fd:5d:59:fd:
91:43:d4:9c:f2:c0:ac:9d:97:bd:ab:26:d3:52:12:a4:61:b3:
38:80:78:32:89:2a:95:63:c1:be:ce:4a:b2:90:b3:de:fd:9b:
8c:ff:06:a4:26:88:fe:46:57:38:e1:0f:d5:5c:bb:af:94:f7:
63:5d:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:18:20 2025 by rpki-client