Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: D8i6kJ2dCkgcEJVpgrYbiaKP6Bk0S0BOJfcjYN8/Pm4=
Subject key identifier: 62:5F:8A:9D:A4:DB:78:66:6B:1F:4D:6F:85:33:E9:1F:F0:97:FB:C5
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0194BBCE6A0884D319A38A954A4099DF04D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: FhFUVRHcW28ZNAFw2LFchly6_Aw.roa (hash: CtGGbmP1phfqi2zNSqRvr6jbX70KrsCgBXSTe07WPA8=)
2: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: mtc6+Xaaznk0aZSYUxs/1zjgG/09UF2pzGMDx4/c+AE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:08:84:d3:19:a3:8a:95:4a:40:99:df:04:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=625f8a9da4db78666b1f4d6f8533e91ff097fbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:f6:9a:af:97:a5:6d:53:44:77:92:03:15:
38:70:e1:14:3d:ea:22:8b:16:dd:3d:23:3d:e2:89:
80:f2:4d:0b:14:aa:d9:e1:e2:d8:cf:7a:29:af:4b:
95:7d:90:3b:43:c8:64:e9:16:4f:ae:eb:d1:f6:bc:
8c:d4:92:ce:03:e6:e1:e4:b1:07:a1:9e:15:41:e6:
9d:9c:6e:45:2f:9a:77:e7:6b:0e:55:7c:8a:33:9d:
1a:fe:a7:c1:a2:bb:c3:2d:f8:0e:9c:37:05:57:db:
66:b8:12:ad:e0:a1:ad:4d:c8:56:3e:7d:77:6d:cb:
b5:b9:58:ff:1c:34:f9:0a:76:aa:bd:2a:f7:60:59:
fa:a1:02:9e:51:5e:92:a1:c5:02:bb:12:0b:ca:32:
41:2a:4d:b2:6f:54:97:a6:15:f0:6e:d6:d3:14:54:
d2:9d:45:01:84:31:ab:52:9a:20:e0:99:8a:b3:8c:
cd:c2:46:20:d3:ae:f7:30:69:a7:b8:1e:94:0b:e1:
7b:ab:76:bb:d5:83:b4:af:25:9e:19:6c:f2:68:92:
06:14:3d:a6:d4:19:e9:f0:0e:60:ed:e3:65:7c:54:
69:92:73:b5:4d:d9:ec:10:d6:fd:7f:31:24:df:70:
76:b7:70:42:47:5f:46:bd:0f:49:29:bc:66:1f:f8:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:8A:9D:A4:DB:78:66:6B:1F:4D:6F:85:33:E9:1F:F0:97:FB:C5
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:10:d7:6c:48:28:dc:89:dc:3a:a7:75:10:ae:4c:77:07:
66:53:8c:8d:d2:ee:3c:99:03:19:06:f7:41:7e:d4:78:64:79:
45:14:cd:d5:26:16:3c:b8:ee:eb:17:ec:d3:fc:6c:39:38:18:
3b:cd:e0:a4:a6:f7:88:29:fc:5d:f5:2b:67:68:27:8b:0d:99:
17:6e:cb:a3:4e:5f:54:c7:cb:83:04:6b:9a:8a:7c:c7:96:14:
a8:3c:69:d3:10:e6:46:8f:66:d1:75:b4:cf:03:fd:2a:e0:08:
3a:67:db:c0:b1:88:a2:0a:8c:7a:3c:51:bd:65:cc:f9:dc:d1:
33:79:2e:34:6a:bd:2b:66:db:83:94:07:76:35:4d:75:ba:d3:
94:8d:02:14:b2:06:7a:46:9b:d9:5c:b3:54:38:aa:07:b7:e1:
4f:87:4c:76:7c:5a:6a:82:b2:18:a4:49:2b:05:ff:ad:38:06:
d8:a4:ac:69:34:2f:aa:9a:03:24:89:a6:74:3d:33:53:0c:83:
79:26:2e:a3:e9:2f:ee:03:e8:cd:0a:a1:65:3d:ba:0e:0e:09:
0d:e3:89:b2:12:25:76:46:fa:12:c5:69:14:ef:e3:4c:28:53:
14:d4:6d:b4:e3:e0:44:9d:b6:b6:f0:19:13:28:89:94:01:52:
9d:c6:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:18 2025 by rpki-client