Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: jx9apDPHiaHZQ/DsbZpID2EJ4oERLLwaKEX6bPPEZP8=
Subject key identifier: 83:AE:62:20:63:BB:9B:DD:15:F3:D7:C3:5D:74:AF:8B:1F:52:FE:90
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 0194BCE0A8CB4E0273FCFAD7C12239BAAB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: a74CuGJ3kKznhWjVtOBC8Rt+X8rzLY9T6vD+rXq0V04=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:cb:4e:02:73:fc:fa:d7:c1:22:39:ba:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=83ae622063bb9bdd15f3d7c35d74af8b1f52fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:2e:b2:01:c5:f4:3b:4d:14:a0:d2:af:28:
46:f9:30:8d:37:4a:5d:cb:ce:95:de:7d:54:41:f1:
39:de:98:63:d2:a6:66:c8:f7:19:b5:01:c4:05:98:
b6:8f:eb:51:34:1b:a7:a6:7d:67:51:60:35:43:b2:
c1:4e:77:24:5f:18:9f:59:fd:ec:c4:86:d4:16:71:
85:ae:f6:43:d1:eb:12:ef:0c:b8:58:ad:45:fd:e2:
9f:26:12:32:a5:83:28:9b:e6:7f:68:e6:5d:79:81:
1a:5b:16:ff:9b:b6:51:78:26:7b:60:e4:bc:b5:fe:
87:69:63:16:c2:1a:ed:a5:ed:0f:60:d5:cc:09:bd:
b1:7c:ec:f9:ab:9a:c5:c6:eb:7f:b2:51:dd:97:52:
b3:58:0f:24:46:e0:75:73:83:b4:cf:99:45:93:e5:
e4:3a:46:2d:25:bc:cb:c9:ec:42:62:3e:16:3e:14:
8c:ba:b8:40:67:fe:69:e9:f5:4f:79:f8:58:9b:c3:
42:7c:69:11:07:e8:e3:20:55:05:39:f6:a4:65:22:
3f:4f:ee:47:27:a3:2b:fe:a2:4e:87:17:44:c1:83:
93:6a:de:f8:d7:88:02:77:d7:f3:fe:ab:59:44:37:
99:0b:e5:d7:08:46:53:50:0d:9b:97:6e:0f:80:bc:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:62:20:63:BB:9B:DD:15:F3:D7:C3:5D:74:AF:8B:1F:52:FE:90
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:73:2d:33:bd:8d:b4:4f:94:80:13:0f:a4:a7:1d:c6:b7:50:
27:cb:01:1f:5e:bd:3b:b8:02:41:8a:f0:6d:fe:a4:ea:73:b4:
d8:0a:59:af:16:13:58:12:bc:82:1a:e7:ec:2d:d6:2c:d0:40:
ed:34:6f:5f:c7:a6:0a:d1:56:2a:d2:af:b4:dd:b5:9a:3e:24:
8b:b6:95:22:8f:2f:12:e1:c7:f9:ae:be:a5:93:77:ba:4e:8d:
d8:56:f3:e3:24:03:6e:5c:ac:48:2a:02:96:f3:43:34:73:12:
49:3d:b0:0f:4c:c1:80:da:0c:97:b3:ef:df:8e:87:85:9f:f5:
50:ba:c7:16:64:89:9a:95:b5:3a:c5:18:e4:27:3a:dd:74:92:
d1:ec:f8:76:f2:5b:6e:e1:8c:31:ba:7e:c3:7e:be:4f:44:0f:
4a:1a:ec:e3:c5:18:35:f7:7c:bb:54:ab:1e:5e:4c:26:c4:53:
c4:a8:38:10:37:3d:a3:d0:ab:01:e6:10:96:a3:c6:49:ff:dd:
6a:86:74:34:f2:69:e1:61:15:52:85:66:c0:ee:6a:fd:01:92:
f9:f6:52:6a:97:c0:94:97:2d:dc:c2:3d:84:d4:4b:7e:30:65:
f9:3d:fc:27:91:41:ca:b4:4e:0b:f5:93:1f:e1:05:46:fd:ee:
24:3e:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:54 2025 by rpki-client