Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
File: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft (raw, json)
Hash identifier: 46B4SFdK4zNeGbXL5fRfgwiMEFghuw4zewQKriJen08=
Subject key identifier: 48:22:FA:1E:90:07:24:0F:8F:E8:E5:D7:1C:2D:5E:1D:7B:DA:81:A3
Authority key identifier: 38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
Certificate issuer: /CN=385e4d3a6709740dd91b98f5590687b5d596d806
Certificate serial: 0194BCE09C39B9113767514919093D9DC337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl (hash: l6KhKURdUn09KJ93oW4TGiUzahXw8QTS/S9ostDEPtk=)
2: TVBkLaoLTbZvpjLbalS7glwR5v0.roa (hash: NyRdJ1RerGLrv+6c6D9h46guT6HckjnV+W2YgJhma+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:39:b9:11:37:67:51:49:19:09:3d:9d:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385e4d3a6709740dd91b98f5590687b5d596d806
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=4822fa1e9007240f8fe8e5d71c2d5e1d7bda81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:f1:b8:21:d2:90:42:ed:de:64:ce:f4:2d:
0e:16:34:e5:2b:95:34:34:0b:8d:14:e2:fd:3a:5d:
39:0d:85:d5:02:d1:d5:c5:57:d0:f6:2a:66:d8:a5:
c6:0a:25:ae:90:62:98:44:c3:d3:a9:df:26:4e:8f:
17:b7:39:f5:49:57:48:b3:07:5a:3e:a4:14:53:9b:
f4:e7:42:2d:76:6a:0c:db:6c:be:4e:2d:7e:4f:10:
1f:7a:89:ca:55:0a:d4:1b:d0:f0:c1:04:93:b1:42:
6d:cc:bf:b3:59:77:42:f4:d9:e2:be:80:5b:91:25:
f2:e6:73:83:da:f2:94:b8:a0:55:96:81:95:ea:82:
3c:90:14:2c:be:d1:bf:b1:c3:ac:3f:1b:3d:26:3d:
9a:87:6f:26:5f:5b:54:f7:4e:a6:3a:43:29:2f:fc:
36:83:6c:8b:51:d3:b9:07:44:a7:46:f0:bf:8e:0a:
dc:17:55:c8:90:77:43:43:88:22:14:ab:92:d1:d4:
c4:76:61:89:9a:df:ce:a2:53:24:73:76:52:b4:b9:
6f:d3:15:1b:5e:3c:04:14:c9:8a:86:89:4c:2f:cc:
9c:25:20:d0:2a:02:3c:56:88:74:28:85:13:b9:e2:
d7:a9:b2:e7:35:01:f4:c2:cd:3d:5b:9f:09:7f:36:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:FA:1E:90:07:24:0F:8F:E8:E5:D7:1C:2D:5E:1D:7B:DA:81:A3
X509v3 Authority Key Identifier:
keyid:38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:68:a2:a3:cc:a6:22:aa:9b:97:a7:df:2d:52:1e:43:cd:
c8:74:fe:11:4f:80:09:7f:0b:75:c8:30:b0:a7:a4:b8:2a:bc:
3e:34:9b:09:3b:a9:35:1d:f9:59:c9:7f:32:5b:55:83:42:5d:
23:b0:64:90:26:45:a0:9e:4e:98:f0:5f:c7:fe:47:d0:af:3d:
5b:7d:18:00:cb:2b:89:32:02:ec:1f:32:11:c5:91:23:39:1c:
ef:87:ee:8d:3e:73:d0:5a:88:f6:f2:94:cf:42:32:09:06:7a:
52:b1:08:d8:28:3e:43:2a:df:56:e9:a2:f8:23:d4:c0:63:f0:
a9:b3:a0:2a:b7:36:9f:f7:8d:73:d0:3a:65:b2:9b:b0:03:ad:
05:79:32:d3:da:83:d9:fa:71:a3:a3:df:20:7d:73:8b:7c:85:
87:9a:92:47:26:2f:fa:c5:a3:a2:37:72:06:80:35:2c:cf:89:
cf:1b:b1:33:d7:38:b3:c4:ba:b1:c8:e6:65:c8:e6:70:e1:42:
39:c5:bd:20:9c:47:19:a5:f8:de:1d:6e:2f:4a:56:99:74:2e:
4a:45:0e:1f:ad:3e:2d:4e:2c:eb:d0:20:f5:11:05:4b:a1:3b:
1a:de:9e:64:e5:db:ca:17:c9:94:ef:e7:73:57:50:58:31:51:
cc:03:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client