Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: lLiB2nIwUe4R38q3bxJHxszUtqjawZ007t4l1t8YB8w=
Subject key identifier: 7C:B3:DA:62:31:A2:31:D0:15:55:C3:73:36:9E:11:D2:B6:9F:F7:97
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 0194BC72A413DC4BD4F0080F416F0A91EDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: 2IdrKld0Fq3B9S1R6rFrv2Ns6m1s29hz2FdIJu29Zbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:13:dc:4b:d4:f0:08:0f:41:6f:0a:91:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=7cb3da6231a231d01555c373369e11d2b69ff797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:e7:5e:92:25:e7:1b:72:93:19:c3:a3:64:
22:b9:b4:9c:1c:59:da:86:f9:2d:f5:96:96:91:22:
6a:af:5e:1d:c0:07:25:54:15:c2:c7:6b:a5:d5:cc:
5a:d4:60:d1:90:6d:44:1d:af:bd:47:09:78:9d:ed:
24:d7:51:24:cf:e4:1f:92:a4:67:ae:04:04:fc:f0:
63:92:47:ae:e8:eb:f3:58:bb:92:bf:28:68:a4:dc:
6c:0c:ce:5f:3d:a4:17:99:c4:7f:f5:f7:04:03:14:
0d:d6:4f:34:62:f7:3e:c2:d8:8d:d9:91:b9:71:2c:
0e:3c:e5:13:a1:97:5f:4c:95:a7:d8:b8:65:b3:31:
ce:b2:03:31:de:4a:f0:31:4c:ab:80:ba:26:0f:62:
d1:8b:a5:18:cd:c8:60:8b:8d:64:f7:19:50:9b:77:
a0:41:53:37:f7:d5:42:60:9c:f8:40:48:be:25:52:
b5:83:ef:47:13:40:33:47:c0:94:bc:49:7c:44:08:
cd:44:21:45:2c:d5:5e:25:21:09:ec:1e:bb:8d:5d:
f9:df:45:7d:89:9c:35:9a:36:b1:bc:73:e5:f8:19:
4e:98:55:79:6d:5d:be:f9:00:42:8d:e5:37:d1:5c:
b7:e4:5c:7b:db:a9:7e:69:66:21:31:a0:94:b0:b9:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:DA:62:31:A2:31:D0:15:55:C3:73:36:9E:11:D2:B6:9F:F7:97
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:82:58:f9:65:7f:4a:75:43:e4:bc:03:70:4a:f3:7a:55:b5:
d4:f2:f3:8b:fa:4c:57:6a:23:00:b5:2b:53:0a:53:ea:47:07:
ec:4b:6d:6c:af:f7:e9:87:6e:92:fb:f8:63:77:fb:e3:2f:b7:
8a:d0:78:5c:e3:73:0e:95:5d:94:23:a7:e0:49:9c:c8:d0:0b:
f4:f5:6d:ee:a5:ed:b9:6c:ad:09:c0:e8:8b:f8:9e:55:94:55:
cb:41:3d:41:66:9a:58:b0:27:d7:44:85:a7:39:9a:a5:80:39:
79:44:6a:71:c3:e8:1e:22:f9:a7:e9:6d:be:4e:db:b8:f5:b7:
60:a1:64:d5:62:19:e0:f4:9f:62:be:f8:fe:0f:85:9e:b0:70:
40:a1:59:58:b1:76:05:d0:d2:01:da:ad:ce:41:27:58:e3:3a:
b6:22:ed:02:bb:ca:02:e1:26:86:d2:27:1e:59:56:54:60:57:
a0:7b:11:0c:ec:a0:24:df:9c:41:73:77:3b:8d:10:bf:29:df:
6b:6a:a8:3d:d5:10:5e:20:09:11:eb:39:f4:c6:1c:3f:70:e0:
c4:c5:40:f1:ae:85:c3:51:74:18:e2:03:83:bd:bc:be:ae:71:
9f:d6:a6:0e:29:84:b9:f5:08:cc:68:c3:74:64:76:2d:e2:37:
b6:6a:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:24 2025 by rpki-client