Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: kWZTM8c9z8shdMjbNYOuhzhcANwvyYs3JQUT5qh3kLg=
Subject key identifier: CD:1A:8D:10:84:85:7C:C9:F8:86:9C:1A:8B:DD:53:CF:DB:DA:FA:84
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 0194BBCE910E8E146011953A1242C85E95E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 03A0
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: 7uTMF7sOqi/L3qS1OdWNqX/fbLCI26NKfbaiGV/SPvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:91:0e:8e:14:60:11:95:3a:12:42:c8:5e:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=cd1a8d1084857cc9f8869c1a8bdd53cfdbdafa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:e2:b8:f5:69:e8:6e:f6:1e:63:4f:75:65:
dc:d1:d1:5a:e1:17:4c:2c:51:57:70:16:4c:f0:55:
f3:cd:02:08:19:b5:33:56:47:46:57:39:9b:c5:86:
09:bf:fb:d8:2c:9c:1c:ae:e2:b3:e2:60:56:51:f2:
a8:5b:11:f4:8f:8e:3f:3f:0d:7f:a8:be:57:27:69:
2b:87:87:0b:32:1d:74:51:00:be:3f:25:df:3c:fb:
b1:df:cc:a0:8e:3d:6b:63:b3:07:32:0f:9b:fc:93:
b8:68:0b:eb:c7:aa:87:bd:65:25:62:44:3d:6f:55:
eb:d3:be:cc:50:af:3a:47:dd:76:37:68:42:25:93:
24:52:f0:f3:08:3b:23:19:f3:af:f4:e5:b8:22:96:
03:2e:ec:28:9b:39:11:3c:5c:77:a8:9a:84:89:ce:
91:b6:54:1b:8f:16:6e:3b:69:24:49:36:d2:8f:e4:
e3:79:d1:74:cb:9b:d8:8c:63:26:79:06:5d:25:c5:
23:83:7f:4d:6c:63:30:42:15:3d:31:a7:62:06:ec:
25:fe:e2:24:9a:f7:13:25:54:aa:11:89:37:18:a2:
f8:2c:b7:fc:d1:03:c2:d4:ac:d4:e2:3d:18:77:20:
3c:e7:4f:54:a6:79:a4:66:b4:51:09:2c:ce:42:f2:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:8D:10:84:85:7C:C9:F8:86:9C:1A:8B:DD:53:CF:DB:DA:FA:84
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:5f:83:40:1c:9e:df:c5:dc:33:38:fc:81:5f:33:2c:e9:
a9:0a:42:50:a9:be:c6:27:28:5e:5f:a3:41:8c:f7:f9:81:18:
7b:57:6c:94:74:cf:e2:b3:ff:d4:3c:67:4f:7c:f8:87:da:28:
af:31:c2:f3:96:82:b4:cb:73:7e:59:a8:8d:1f:2b:14:e1:8c:
03:1e:be:f2:08:0f:c3:04:5d:91:b3:df:61:92:68:a5:4e:ab:
df:f4:e5:60:6f:07:93:be:f9:9d:02:23:f7:2d:7a:f2:b9:47:
2c:25:e7:38:20:6b:f5:8c:18:8f:b6:61:27:0e:26:b9:7f:13:
52:a6:1b:66:43:21:eb:3a:96:3c:55:25:8b:c8:52:41:02:f6:
c8:72:e0:87:bf:14:2b:5f:1d:75:a2:20:86:cf:da:86:02:2d:
46:a1:72:5b:8d:ee:45:3f:57:ae:56:5a:11:81:82:d8:95:3c:
f6:47:7b:94:05:bf:6f:9b:10:a0:1c:48:65:22:64:b2:ab:ee:
07:72:94:d9:f1:e4:7f:c9:9c:e8:9f:74:df:71:a7:f9:04:e3:
6f:d8:8f:b1:38:8e:26:2b:49:16:49:9b:01:da:df:5a:05:22:
bc:ac:2c:ad:f1:7d:ae:7f:64:8a:d5:e1:38:68:90:5c:94:ef:
bc:14:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:32 2025 by rpki-client