Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: yWmdQ/s0q+IdDK9FRMiYtM7mJTBZ2h0UdchpceAFH+Q=
Subject key identifier: 00:57:F8:F7:0F:25:79:31:5E:C1:49:C3:0C:1A:BE:75:D7:2A:3E:76
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0194BD4E98DC774AB00EEC27C447789E0B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: sa/hU6DI4cI8Zk+Fst6ZT9Tq4fsi8IsPBzQ8aOeeSyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:dc:77:4a:b0:0e:ec:27:c4:47:78:9e:0b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=0057f8f70f2579315ec149c30c1abe75d72a3e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:3f:84:a0:31:85:c2:9d:23:05:a8:88:ab:
3f:83:ae:db:d1:37:32:56:2b:7e:31:72:3a:9f:b8:
28:30:a9:59:57:51:4f:30:48:4e:6f:35:08:6b:6b:
20:ec:b3:64:ca:2f:11:4f:fb:71:8a:39:e8:8c:d5:
48:06:82:61:b0:21:1c:b0:a8:cc:a0:b5:c8:15:50:
89:ef:31:7a:ca:5a:ff:e6:23:07:fb:b2:29:d2:5a:
00:a9:93:1c:4b:95:cd:34:9e:d5:a4:8c:9a:ec:d6:
02:3c:b8:52:92:0a:b4:6a:e9:2b:60:2c:0f:78:d8:
19:02:9e:e9:54:3d:83:07:e0:c3:0c:a3:3e:65:a1:
c5:d5:d2:37:a7:12:0f:dc:c2:76:75:21:d0:52:01:
d0:5f:2d:ac:b4:36:77:ca:fb:9d:05:ad:4a:1d:9a:
80:e9:2a:1a:7e:4a:e6:f7:06:95:ee:b3:bc:45:d4:
64:bd:0a:14:19:9b:f2:e7:20:41:0c:fa:aa:56:cd:
0a:6a:3c:b7:e2:54:3b:4a:49:01:c5:26:14:e7:f4:
c4:10:45:2b:61:b1:26:77:ae:f6:73:cf:b8:98:d2:
b4:67:95:79:62:30:b1:0b:ba:d2:89:a1:24:84:3b:
45:43:06:5c:02:41:dd:fa:d0:48:11:a7:a8:8a:b1:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:F8:F7:0F:25:79:31:5E:C1:49:C3:0C:1A:BE:75:D7:2A:3E:76
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:ef:f1:24:56:b4:9b:5a:8f:23:60:2b:ad:d5:eb:3d:41:
cb:30:fa:55:11:b8:bf:90:75:60:2e:39:d1:31:22:aa:e9:8e:
94:e7:c7:7d:1c:97:28:2c:f9:a3:08:c0:9a:3f:5a:50:e7:ea:
b5:80:de:92:00:f0:5c:50:f0:48:92:3e:e7:3d:a5:b5:32:f6:
0c:43:66:f2:ea:51:4b:7a:b3:9a:95:fe:0b:c3:27:3b:e9:73:
e0:52:5f:a5:77:79:f3:33:9a:bb:4d:b3:60:ee:f7:94:a8:8f:
6e:46:d1:b1:e7:dd:15:c8:15:bb:10:88:4c:1b:e9:05:ca:0f:
49:70:0c:67:57:9f:9c:c0:75:7a:57:d6:2d:bd:61:75:ec:9c:
77:f2:9b:5b:a8:5d:76:c1:15:b6:1d:5c:d4:63:ed:83:68:b5:
ee:41:fb:8a:52:04:2d:94:32:0e:5f:8a:0b:c2:00:46:fe:f9:
f7:9a:ba:56:ee:a1:8a:66:aa:ee:d6:29:1c:d5:25:a0:41:a3:
87:a5:03:b3:c5:5c:7a:c3:af:b3:60:f3:cc:dc:c0:98:06:b9:
d3:1a:66:6b:7a:a4:cf:41:9a:80:fc:23:94:07:5e:6c:80:3c:
da:2d:61:4f:e1:4a:8e:ba:b6:cd:1b:ed:6f:e5:0c:af:03:f0:
20:e6:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:11 2025 by rpki-client