Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: bACve6Aha4+VRzIUNOel1hQmOUFCxr4lXjdzcg2IwHc=
Subject key identifier: 49:97:18:A4:DE:B2:96:F9:9F:37:75:DB:6E:59:15:18:41:BD:AE:B8
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 0194BD85A83708A128E79D35B9E2C5069A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: I7Gahb5YPZ/BxOuTCUMzz08BAJq0qfDWErfAWXepArE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:37:08:a1:28:e7:9d:35:b9:e2:c5:06:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=499718a4deb296f99f3775db6e59151841bdaeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:07:28:34:31:38:c6:31:86:64:f4:90:47:
06:fd:3c:16:93:c0:25:a7:8f:98:86:9a:80:a5:e1:
dd:cb:54:59:1a:64:e0:b3:fb:21:26:4c:1b:59:90:
24:63:86:b8:85:08:b3:99:da:ee:2b:f2:f5:e8:b2:
2d:6b:42:60:c7:56:d4:a7:91:d6:36:73:d7:2d:a9:
87:c8:66:08:c1:63:53:09:6e:12:27:95:61:ec:38:
c8:d0:37:3b:94:c0:34:2b:8b:25:cd:a2:b1:f4:64:
ae:c6:67:bf:93:16:f4:e2:32:30:71:85:a3:86:02:
ce:0b:b6:ad:5e:28:c6:e4:72:dc:76:67:2f:6f:27:
44:0d:72:8f:c3:0e:39:ab:d7:1d:b6:a8:91:9c:bf:
03:ab:34:7a:10:8e:8b:59:76:da:1d:c7:99:23:89:
12:72:1f:93:a5:b2:b1:ca:9e:bb:fe:64:bc:9b:55:
6f:ee:c7:71:a6:a3:84:67:16:b6:74:a5:eb:ce:21:
f4:ba:ac:32:76:d5:6d:81:e6:fa:8a:c7:ef:4e:de:
0e:36:6d:74:b0:b5:1b:ba:f9:57:fc:f5:ca:81:c0:
51:e6:09:f6:07:65:b2:9d:93:c5:e5:1c:f3:9d:9b:
17:1f:cf:2c:de:93:73:cf:af:a8:5e:c8:eb:1e:df:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:18:A4:DE:B2:96:F9:9F:37:75:DB:6E:59:15:18:41:BD:AE:B8
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:62:7d:26:34:26:ee:81:0f:9b:f5:23:74:4d:c4:4a:2a:
b6:9e:99:9b:12:5b:8c:ce:b8:80:c6:c4:93:57:d4:e1:44:56:
34:4e:e2:3b:fe:de:b1:c0:89:29:4a:de:d3:e7:f0:ee:bd:a5:
88:eb:5f:03:1c:f7:70:e0:4d:1d:de:b5:31:c4:e9:db:f2:f6:
89:bc:b5:c0:7e:cd:af:dd:2a:04:0d:1e:48:5a:b3:b9:fa:f9:
b8:63:cb:da:8e:f6:9a:84:72:9d:cd:66:0d:58:47:d1:80:a8:
0a:d1:13:74:ba:b2:ac:75:85:16:06:3c:d5:a4:96:37:aa:96:
cd:a7:3a:91:09:94:1d:a0:1e:d6:3a:94:c1:ee:66:64:7b:2d:
a6:92:39:c5:5e:c7:6f:1d:05:3a:9e:93:75:36:fe:03:fd:94:
11:e4:2c:ba:b9:1d:9d:dd:91:e4:1d:b3:63:0f:7b:4d:c1:27:
40:32:8c:d6:83:2e:ba:ac:a4:3d:d8:29:87:2c:1b:c7:d7:9f:
0d:ec:47:ed:66:0a:96:ff:6f:52:0c:8f:5f:13:db:a4:ee:15:
ad:cc:77:77:3f:1e:04:96:dd:25:8f:06:de:17:30:81:66:8f:
d9:84:b1:79:5e:f2:8f:c0:a6:4d:a7:6c:f1:f7:84:b4:56:dc:
2e:16:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:02 2025 by rpki-client