Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier: eBjTpBvG+lkWLYWdw7s5UUyBpMZ0xiqjy61rjXsipy8=
Subject key identifier: 0E:11:79:F5:DB:A2:14:E2:9F:60:70:73:F0:71:C8:D2:E4:D9:56:51
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 0194BCAA28F0A8D2B69BE0004AC645A0B804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number: 0971
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=)
2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: PKtC79NcJcgUVvuRbcxxe/z1ESOz2sJrh0p4asicgvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:f0:a8:d2:b6:9b:e0:00:4a:c6:45:a0:b8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=0e1179f5dba214e29f607073f071c8d2e4d95651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:53:d1:b7:bf:92:8c:f5:29:03:08:4a:70:
0e:35:3d:99:08:99:cf:3c:bc:e8:cd:11:ed:bc:84:
1a:81:ca:96:18:3f:5a:7a:ae:c3:1e:72:06:16:92:
0f:ff:8e:31:28:0b:3f:fa:66:fa:22:e8:b7:c8:60:
38:a0:48:16:6f:19:d2:ac:4b:8e:0c:8b:48:44:e8:
6b:67:50:13:80:c6:13:0d:34:fa:a1:89:29:25:cd:
be:29:fb:14:15:85:7a:05:9b:e1:39:06:cd:16:67:
70:45:a9:d1:6b:62:a4:a0:f7:14:cb:9b:8a:43:4e:
d3:49:48:3a:58:46:d3:3b:68:1c:95:0c:3a:ac:b8:
db:8c:ef:56:d3:32:70:be:f2:52:bb:e6:45:59:73:
c6:85:12:df:a3:9a:e2:2a:c9:94:16:49:cf:6e:c5:
fe:87:37:b1:b5:b2:30:a7:d5:12:a7:38:67:01:13:
b8:a0:c0:62:dc:79:08:c0:13:e5:49:ad:d3:4c:e2:
fb:37:d0:3a:56:6f:b8:4f:c4:64:4c:cc:31:58:b9:
78:d1:6c:30:fa:df:ab:60:0e:9b:6a:e5:ae:d6:ed:
07:58:59:87:a4:47:1a:01:f0:48:76:be:c9:ff:7b:
f7:2a:de:c2:8e:78:e8:da:26:8f:53:4e:0f:be:e1:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:79:F5:DB:A2:14:E2:9F:60:70:73:F0:71:C8:D2:E4:D9:56:51
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:06:f5:0e:41:04:fe:c0:74:e1:7a:ca:a0:c0:26:ac:d0:
c3:98:2e:ec:b9:5c:01:86:88:b3:24:5c:74:7b:36:8c:ed:22:
f8:f3:e6:42:60:3f:b5:cc:cc:7e:f7:74:6a:8b:d9:2b:9f:04:
93:ea:55:c5:c0:7d:27:49:c6:47:6f:a3:02:04:f6:76:d6:43:
aa:d1:3e:9e:c9:40:76:89:ee:4e:0a:69:5b:5e:5a:1c:29:1d:
ac:a9:8c:cf:e1:b8:93:b3:ec:5e:0f:34:ce:51:79:d7:f3:68:
a8:5c:ca:d1:f6:c1:3d:fc:c2:d5:2e:f5:e4:f8:b3:7c:34:e6:
44:47:3d:e0:cc:9f:8b:9e:e7:ca:2c:df:b1:6f:a4:0d:8c:a4:
2e:0a:8d:11:87:f2:76:a5:3b:9f:57:cb:28:47:18:e8:b2:fc:
67:3c:59:36:7a:d3:84:a2:bb:eb:a6:f6:d7:da:a5:bd:07:db:
2a:fe:84:99:1c:fb:8a:57:cb:d3:f6:8d:11:7d:26:75:f8:ee:
55:1b:39:e0:2f:e8:ec:87:be:8a:09:a6:6b:fb:6a:a5:96:87:
fe:bb:b4:21:df:7f:49:b3:85:b5:25:8a:10:e4:59:c6:39:e6:
80:ab:a1:0e:b7:df:cd:0c:7c:fa:f2:33:50:02:54:24:c4:02:
07:39:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:47 2025 by rpki-client