Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: CdqxUUp4IAOr5v7a+rpo9FJRNZ/G1ALfZCnaca2XOLI=
Subject key identifier: BC:D0:7C:96:13:92:89:04:39:E8:BD:B9:8D:AF:28:D5:97:19:C0:10
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 0194BD17E20F4B01FBEA37343D814F0F1722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: R3JAtzNrETT9K6hF0N8Ybkqxz9T+ddIbbLDTLkeH35o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:0f:4b:01:fb:ea:37:34:3d:81:4f:0f:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=bcd07c961392890439e8bdb98daf28d59719c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:f8:30:37:d4:3a:c5:ce:aa:10:29:91:aa:
c1:29:9e:f6:ee:18:cd:55:4c:17:82:ef:04:7e:50:
ea:b2:1d:4d:9a:38:4d:c4:6a:73:48:88:16:54:cd:
ff:87:9b:2b:94:32:dc:f1:0e:d8:fe:b5:94:d0:89:
39:21:00:54:63:c4:37:92:64:f8:e7:74:fe:89:f3:
db:52:67:4f:3f:95:c0:84:88:88:07:ce:79:0f:a7:
44:01:47:13:0b:26:dd:73:6b:46:30:7b:cb:e7:f1:
54:7c:c5:ca:e9:34:f9:af:70:bf:99:3c:f8:3c:a0:
49:6b:ab:6c:5f:e3:97:71:8f:e7:73:ba:18:ed:80:
d2:03:00:85:e2:c5:7d:7b:85:97:d0:0b:6b:66:3d:
c9:e3:ca:14:a6:f5:5e:89:5b:77:02:b3:f0:1f:7f:
fa:2c:cd:60:0e:77:22:09:63:7a:7a:2d:e7:eb:27:
4c:7a:84:be:46:29:56:4a:b3:31:59:88:c7:0f:a3:
8f:ad:52:c5:a8:c1:eb:69:6a:d6:95:79:b3:9f:e9:
34:87:74:17:99:fa:10:0f:a8:16:72:22:83:4c:21:
31:c9:53:d7:93:97:0d:14:d4:c7:3b:b5:75:a6:68:
7f:2a:38:8d:ed:e6:15:37:eb:22:99:e2:93:b5:75:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:7C:96:13:92:89:04:39:E8:BD:B9:8D:AF:28:D5:97:19:C0:10
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:95:02:31:9c:3c:b7:59:e2:82:44:cf:ad:e6:39:81:7b:
a5:36:87:ec:61:a5:5b:55:1a:08:70:f9:fd:13:bd:a3:c9:c2:
56:5b:0c:7a:ab:1a:30:94:95:d3:d8:74:26:87:f5:63:55:a0:
2a:ec:24:31:34:c9:03:1a:34:47:7d:27:16:05:d8:28:26:37:
7f:ff:8c:d1:57:b4:1b:95:07:5d:65:19:c8:f9:b7:2d:83:9a:
63:c6:ac:06:41:50:3b:02:66:52:96:05:1d:7f:aa:66:19:10:
3c:57:7a:9f:07:48:c2:b2:04:8d:23:a5:75:92:77:04:0f:b8:
f2:8b:bc:29:28:54:f7:7e:89:db:97:1a:72:16:bc:b2:3f:c6:
51:2f:18:fa:00:96:ff:a2:75:0c:b9:6d:bd:91:24:ca:b1:c3:
28:44:18:d6:fb:34:ee:f5:53:81:29:c4:4f:f6:15:9f:12:69:
ba:09:27:9f:89:1b:97:95:9e:44:09:9c:d4:d8:81:d3:4a:64:
13:bd:27:88:a2:73:ce:19:3b:6b:2a:a2:ac:7d:e7:08:56:3b:
44:4b:f9:0b:e0:94:ca:20:e4:61:da:77:f0:7b:72:a0:d6:b9:
b2:ea:ae:50:11:35:72:44:83:fb:70:4f:20:5c:1e:34:77:57:
e4:54:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:17 2025 by rpki-client