Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: PcWWz9AnX7a3cApfvJswGQpeA/1EeNQo2mDp74ALZv4=
Subject key identifier: 0C:89:25:A3:03:C2:B5:25:CC:71:14:22:E6:21:FB:D0:67:05:19:92
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 0194BCE0F2BDBE0957B6D8D1226C2EDC21B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 10EC
Signing time: Fri 31 Jan 2025 15:00:46 +0000
Manifest this update: Fri 31 Jan 2025 15:00:46 +0000
Manifest next update: Sat 01 Feb 2025 15:00:46 +0000
Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: fX9VQ+hHpIkMvYuQFNPXZvg40iAsBiB4hfxHVCmnaOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f2:bd:be:09:57:b6:d8:d1:22:6c:2e:dc:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Jan 31 15:00:46 2025 GMT
Not After : Feb 1 15:00:46 2025 GMT
Subject: CN=0c8925a303c2b525cc711422e621fbd067051992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:b4:15:c8:4c:58:c6:85:49:11:ea:8e:d3:
a6:3e:f8:f1:af:a3:af:11:6c:f1:9c:7d:bc:c3:75:
77:07:38:cc:7f:8c:88:d1:26:6e:72:b1:ca:10:1f:
b8:19:b2:f5:db:27:62:e9:7a:94:fe:f5:66:51:d8:
aa:13:5e:f5:09:4d:5d:41:2e:25:9d:b4:9e:4d:36:
76:c6:de:9b:33:08:fe:db:8c:c9:c8:37:01:a7:72:
40:81:5b:48:77:9d:4a:14:f0:4c:2a:e0:c3:ec:a6:
29:da:2c:f5:ef:ac:f8:bb:cb:75:c3:ed:33:d8:b1:
33:fa:c2:80:90:5a:f8:aa:1e:7a:7b:68:19:50:1a:
33:f1:24:66:80:77:db:44:d3:e4:ce:8b:98:2d:36:
56:27:e0:70:0a:44:6b:a3:45:52:d5:af:a5:45:d5:
6f:7b:04:10:bc:81:71:fa:50:70:61:7c:50:5b:46:
c4:4e:3b:31:98:5e:8c:f8:1a:a8:7f:4e:f8:cc:6f:
df:a6:16:ce:4a:51:fd:9b:c9:12:01:71:60:86:d7:
a6:5f:83:ce:35:6b:4a:13:13:93:f0:fd:e6:a1:b5:
a0:41:f0:5e:19:b9:50:fd:fb:98:00:1e:db:b9:20:
0c:c6:d6:35:c5:99:6e:af:6f:80:ed:31:2f:19:15:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:89:25:A3:03:C2:B5:25:CC:71:14:22:E6:21:FB:D0:67:05:19:92
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:11:e7:9b:10:18:b2:9a:e9:ae:4f:14:89:96:c4:98:f8:ea:
24:0f:80:6e:38:d2:f0:c8:34:d3:29:96:fb:72:10:8f:26:5c:
35:24:1f:87:90:42:58:dd:b3:47:31:d0:e8:74:aa:61:82:5b:
bb:dc:65:eb:e4:3b:c2:8e:d5:b9:40:d6:23:e2:73:d0:81:61:
8b:18:49:de:8e:a7:fa:b1:53:b3:7a:6b:bf:bb:52:b5:55:0f:
c0:ba:28:b9:1c:47:34:9e:95:54:10:09:82:5d:0b:79:99:ff:
dd:c4:b1:28:5a:4d:d4:f3:ce:bd:23:cf:e6:ce:5b:be:a7:fd:
6d:c6:23:8c:8b:54:a5:07:9c:75:e9:36:9d:fa:aa:51:1f:c8:
86:b7:a2:f2:b1:94:a4:51:5d:07:c8:32:35:ab:55:3c:9d:79:
ac:4f:3d:f3:13:0c:98:f2:27:97:b2:72:b9:a1:4b:a6:2f:8a:
de:86:e7:a0:18:31:8a:b4:95:8f:1f:95:43:db:9f:9f:5c:9b:
d5:ba:26:35:65:33:8f:3b:7b:b4:d2:9f:f7:ec:70:b0:be:90:
c6:40:3b:fa:94:d9:49:ec:4d:c0:b3:b5:35:a2:9e:f5:fb:17:
1d:4c:99:45:53:ed:a9:e7:51:77:ee:ce:1f:15:07:c8:ec:ff:
11:5b:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:35 2025 by rpki-client