Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier: GrHj1kdmn7FhmOaxgWaAhlzz9XBbatJr1iwbaePr5jI=
Subject key identifier: 71:25:16:30:02:04:CC:A3:B8:FC:CE:69:A0:FE:20:5B:4A:73:CE:68
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 0194BC72FB11DB22E245937CE7E3C3876EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number: 07D7
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: 7rD8wsWVZXmFeQTcXcLIfx9NdFtZSmsH0fgzyawFLcs=)
2: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (hash: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:11:db:22:e2:45:93:7c:e7:e3:c3:87:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=712516300204cca3b8fcce69a0fe205b4a73ce68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:fd:6c:68:17:ca:b7:65:74:10:17:5a:1b:
cc:61:07:79:71:b8:df:c8:7b:ad:dd:6d:87:cb:2e:
3b:a8:55:22:c4:f4:33:5d:17:d8:d5:7f:74:c6:de:
86:32:00:98:a5:f3:a1:07:05:32:8f:2d:4d:9a:f5:
4a:f3:21:d2:6c:98:b0:75:fa:d3:62:f4:8c:fd:6a:
dd:d5:a9:5b:36:de:05:ab:29:b3:80:16:99:2b:54:
b0:50:60:2a:ef:73:46:6d:dd:eb:53:e4:be:53:a2:
f8:1e:ef:11:3c:00:9c:58:fd:ce:7e:61:6e:e1:06:
3e:37:ae:4a:cb:54:53:0f:fc:d4:a6:4e:25:01:82:
26:ec:f7:0b:26:d0:dc:ee:04:b2:7c:d2:20:3b:18:
53:0d:e7:61:16:20:ce:a1:d6:46:e0:6f:cd:02:39:
40:45:af:65:cf:27:b1:f4:27:cb:de:aa:3e:8e:75:
b0:ba:58:ce:bd:60:1f:2a:1f:94:c5:01:1b:71:6d:
9f:37:df:e8:22:e4:68:68:a3:e5:79:87:ba:f2:dd:
21:a0:07:1e:8c:dc:29:72:a6:08:c4:9a:b7:12:55:
06:06:8c:2e:80:93:b6:6d:ef:74:90:ad:73:23:e4:
e1:a7:dc:49:8d:7f:85:65:7a:03:d7:7c:2a:25:27:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:16:30:02:04:CC:A3:B8:FC:CE:69:A0:FE:20:5B:4A:73:CE:68
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:75:4b:ee:58:ee:bc:49:9b:80:ce:d8:d9:bb:fc:cd:fc:29:
d4:b0:06:67:9b:6a:bb:18:91:87:66:a4:f4:cb:4d:d0:15:74:
d0:42:5d:04:8c:f8:19:d4:2c:26:52:b3:23:d5:fb:96:04:4f:
8f:be:69:da:e2:1f:a9:e9:50:bd:26:cc:e3:c2:90:6b:cf:41:
f4:d4:b7:f7:f5:76:7e:24:0e:25:45:55:e0:f6:6f:c7:8e:24:
50:02:18:ff:21:ff:2f:3e:86:2e:6e:36:17:ba:c9:34:2c:f0:
39:4a:05:4b:53:ce:19:fd:06:a7:2d:49:91:e5:03:3c:d3:18:
cf:7b:d3:7a:0c:a9:ee:0b:3b:23:8f:7e:73:3a:51:f8:97:4b:
f5:9b:6c:a8:ac:0f:3d:5c:e8:41:4e:b7:a8:0b:92:3d:d9:a0:
b9:27:e4:ff:44:74:9a:93:25:ed:16:cc:82:0e:08:4c:e2:37:
43:e4:ea:a6:41:f3:c6:eb:73:ba:d2:6f:a6:fe:a8:90:28:04:
a6:a3:86:de:8a:88:be:06:54:a7:18:4b:a0:c0:9e:e8:47:15:
b4:b7:70:fb:dc:03:3a:28:02:0a:fc:dd:09:37:dc:7b:33:98:
45:e9:28:18:9e:2d:83:a8:23:ae:5e:2a:07:2b:cc:9d:5d:86:
77:d2:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:37 2025 by rpki-client