Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: tjhaNjP5YXlKmGMMdgeIaRYNM8+GM1pPFpGRW5rInO4=
Subject key identifier: F4:AC:37:B9:04:24:51:19:14:97:73:0E:1C:CB:33:55:96:FA:88:98
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0194BCE0A9A2DD04420379F55AA44F3022DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 073F
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: dEHp2MJj+zeR9n5SwBEeg0UGg2dKj+ecFqX04E3wuGs=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a9:a2:dd:04:42:03:79:f5:5a:a4:4f:30:22:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=f4ac37b9042451191497730e1ccb335596fa8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:4a:95:e4:57:38:94:6a:dc:4f:9b:f2:6e:
73:9e:cf:f5:2a:b9:70:40:14:36:09:7a:ad:5c:67:
b3:d9:d6:94:81:16:55:13:f3:2a:1e:27:77:d9:a8:
4d:40:91:0f:86:f7:f3:b4:7e:89:72:c5:63:26:3e:
1c:43:89:9f:4f:da:aa:da:22:dc:02:02:bb:66:4b:
3b:32:89:be:f4:f9:29:3f:7d:c2:53:87:d8:a8:5b:
05:23:a0:26:58:49:0d:0c:6c:7e:b1:35:ef:07:82:
e1:40:a0:b8:94:12:29:d4:6c:71:c7:f5:12:12:e9:
99:a3:d5:8a:62:62:25:58:f3:bf:68:3b:4e:7b:77:
48:65:9f:97:48:2c:43:52:02:4f:eb:58:86:f7:c3:
cd:7c:fb:ad:1c:1d:9b:4c:70:3d:b0:45:e3:63:e0:
a6:f9:01:79:2a:1d:31:a2:42:f9:fe:27:fa:d8:88:
01:6b:2f:04:3e:98:36:84:61:a6:d7:ac:9e:a4:d1:
50:6a:dc:c4:90:be:83:24:83:53:7b:67:5f:00:dc:
7e:d6:71:5d:65:b4:ba:77:dc:b7:f2:5a:44:49:e3:
50:92:63:4f:c4:82:5d:88:04:92:c0:cb:3d:58:ca:
cf:ce:13:30:f2:6d:90:61:35:50:2c:be:5a:c5:e9:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:37:B9:04:24:51:19:14:97:73:0E:1C:CB:33:55:96:FA:88:98
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:3f:d3:19:43:bf:99:45:7d:2e:60:92:d8:1b:63:37:df:
1f:81:31:0a:f1:5f:57:f0:5e:4a:e2:98:0e:c6:2c:62:ae:8f:
df:08:3f:27:76:e6:ba:d6:d2:f0:0e:10:b0:00:b8:5d:bc:76:
49:0e:8f:f7:bf:97:ad:1b:60:b2:39:1a:d8:c8:64:60:04:ec:
4b:6b:dd:37:38:aa:0c:d1:26:b8:2c:55:79:43:76:20:23:eb:
d1:e1:f2:4e:72:57:a8:ce:52:ce:a7:35:64:3d:42:18:56:f8:
d0:72:48:eb:89:d2:5e:3a:37:9c:23:88:2c:aa:f4:b7:3d:31:
d7:9b:b8:3e:a9:79:1b:db:93:5b:5d:76:18:34:5c:12:02:a6:
be:e3:1e:46:97:86:a5:65:bf:3d:34:dc:96:f9:9d:3a:06:fa:
a6:2e:f3:8c:69:8a:e4:0f:b0:d0:e0:9c:79:05:ba:a5:7b:fd:
ed:33:a6:14:0d:de:1b:61:2d:77:66:61:f8:03:a4:88:ec:28:
12:4c:91:73:4a:c8:61:ba:a1:ba:6e:85:e8:64:c1:89:5e:ef:
87:f6:d2:25:a9:ed:e9:4d:66:4d:f6:4d:b0:dd:b2:ff:f9:9d:
7e:53:e1:f6:a5:4f:45:55:70:9f:10:75:2a:fb:a0:68:24:58:
be:bb:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:42 2025 by rpki-client