Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: qs0x4Hbb/tyfI2Mg8yTa+tbV1XJFT8eIEUxWnkhyIHg=
Subject key identifier: 47:F4:95:4F:8E:93:64:12:AE:A7:05:1F:37:E7:50:73:E3:52:FA:F1
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0194BCE092D38756CC43A3DB6B7E901D2932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 02EF
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: V0iE41GXaGKF6EAThw2uqJh/5ZZjN31hfoG9WPW4ZSc=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:d3:87:56:cc:43:a3:db:6b:7e:90:1d:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=47f4954f8e936412aea7051f37e75073e352faf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:63:35:5e:d1:60:0e:51:e6:51:44:d4:a5:
b1:b5:e7:c8:a7:11:6d:24:c9:38:55:a1:ba:c0:16:
6b:df:d7:39:c0:eb:dc:99:f7:7b:6f:3d:6f:b6:a4:
e4:05:cc:72:ba:f6:2b:40:d1:4a:62:f7:6d:9f:37:
1a:28:e5:56:8a:03:5e:46:af:30:63:5d:61:be:41:
74:34:5a:e5:ea:6b:a0:7e:11:03:4b:cd:b0:40:5f:
1b:a2:7a:fe:5e:12:2b:bb:71:98:aa:33:1d:9a:e9:
4f:f6:3f:53:0d:61:87:88:f0:1c:b9:9d:b2:69:4e:
ec:fc:b2:5b:32:b5:51:59:e4:d4:7a:29:4d:96:f9:
30:ef:bb:f5:a7:4e:35:13:f6:56:75:92:e6:49:88:
57:cc:ab:4b:5b:a8:c5:ef:0e:4c:c8:75:a5:59:71:
74:28:8d:13:4a:ce:95:9c:7e:b2:3a:8b:1f:1c:80:
d4:7e:97:de:02:59:9e:31:16:7d:ce:05:55:5a:9b:
3a:58:79:7e:06:a2:1f:c3:66:3f:85:50:21:6d:95:
76:c2:32:96:88:0b:e8:70:b7:cd:8d:0a:bc:1f:e1:
9e:d1:d0:cd:62:3c:7e:e2:b8:63:95:42:e6:3f:64:
cf:9b:fa:2b:0f:32:d4:aa:7b:e9:87:6b:55:2b:26:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:95:4F:8E:93:64:12:AE:A7:05:1F:37:E7:50:73:E3:52:FA:F1
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:fd:9d:3a:75:2c:b4:1e:60:ee:e3:23:4a:d0:1d:81:c8:
55:0f:68:40:fc:93:5b:3c:e7:03:89:1a:ad:99:68:07:c4:f6:
ed:26:b8:23:15:a8:6b:6e:fa:38:e7:88:b1:e9:70:cb:c1:85:
76:9f:5c:02:51:ce:1b:fa:21:a9:56:df:8d:6e:7b:1a:e5:b9:
85:3e:1e:93:46:09:b4:f2:3a:e9:3b:9c:69:0d:97:e6:da:68:
f4:44:39:f1:98:2c:ab:3b:df:01:0d:27:03:e8:82:11:e2:41:
2e:32:be:43:1d:74:d0:56:e2:d7:42:bd:7b:09:e9:b3:2f:0e:
7c:d0:13:35:35:88:9c:0c:aa:2a:9f:65:9f:cb:61:7e:2d:49:
fd:84:0e:0c:27:18:f1:a0:53:f0:74:91:75:ae:4c:4c:42:6e:
25:bb:12:49:95:8b:95:f3:c9:6c:ed:31:80:7f:43:96:97:b1:
b5:e8:d2:1d:fe:3d:91:d0:b3:32:9d:ae:2a:27:60:9a:77:b9:
55:7b:ff:c8:ad:aa:9f:f9:19:2e:ac:f6:59:fa:77:e1:b8:dc:
61:46:d0:51:fc:7d:17:59:12:51:ad:6f:f3:41:9f:25:bb:99:
3b:9d:d9:60:55:f4:b6:7e:e5:33:9a:56:a6:61:83:9f:97:30:
6b:32:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:22 2025 by rpki-client