Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: SnhnmkL80p6WKdKME6k8KClAClv0075yo+JjYLU2jKs=
Subject key identifier: 43:BD:5C:A9:11:52:85:84:ED:A2:EF:4C:91:63:09:EB:4F:52:3F:7D
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 0194BD17626E65C1495E001D4F8B0E445CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 0453
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 7xFeKk1Iv33SPP_P8Q53KVhfBhE.roa (hash: vpakuVBdELbZmm7a1lbZtbcwCV3/qaP7VZjibySfKiU=)
2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: mRC010o+4U8uK9qOaLmOeGwDT1vKKPa9xjGX1c3UKYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:6e:65:c1:49:5e:00:1d:4f:8b:0e:44:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=43bd5ca911528584eda2ef4c916309eb4f523f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:4d:e5:06:26:36:37:c9:f3:48:a3:cc:cc:
d3:ad:71:49:30:32:fb:47:7a:2b:54:97:12:bb:68:
d4:dd:6c:e8:da:21:4f:c4:b3:42:1c:e6:66:6e:40:
1f:7f:99:e5:47:c2:7f:d9:16:ac:41:cf:11:b8:7b:
6a:aa:43:49:97:11:d2:14:d8:76:30:76:51:52:dd:
ac:fa:a0:5f:13:37:10:15:6b:fe:97:70:c8:71:fd:
91:ca:79:85:c8:5e:eb:f9:57:da:0d:c2:f5:db:d4:
ff:2b:41:a0:7a:1b:66:db:4b:fc:db:96:4e:31:b0:
99:c7:ad:a2:e0:78:96:91:11:cf:67:65:c1:f2:ef:
76:de:e6:89:b6:c4:8a:4a:e7:af:ca:91:a7:95:fe:
3d:29:d4:71:46:fb:5e:4e:cd:5b:66:a6:35:d6:1c:
31:12:7c:25:37:0a:1f:20:0d:40:a5:e0:78:3c:d8:
84:75:91:68:5a:0c:40:62:90:ac:5b:87:fa:48:85:
2c:b8:63:9e:97:3f:72:13:91:02:81:4e:b7:55:cf:
47:16:2c:ea:e4:c1:a9:5f:72:ea:82:4e:06:1a:05:
a2:ed:ab:7e:17:14:9a:67:bd:ad:bc:f2:8f:c1:4c:
d1:c5:4a:37:c3:bf:48:f4:42:4f:c2:56:bf:b0:f6:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BD:5C:A9:11:52:85:84:ED:A2:EF:4C:91:63:09:EB:4F:52:3F:7D
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:eb:55:a4:a9:36:3c:7d:30:2d:4d:e4:46:c3:d7:57:72:79:
05:28:16:84:39:af:49:6b:fd:2a:16:a2:06:72:40:ea:0a:58:
41:12:b3:af:83:97:39:64:8f:f1:b4:a8:93:4d:c4:90:f0:ef:
0d:8a:c7:dc:62:bf:02:97:3f:23:23:41:d2:e1:7c:c7:1a:17:
81:7d:b7:cc:70:19:98:f9:e9:d0:42:f5:7e:86:00:ee:ce:d0:
20:49:94:c0:ae:d9:57:0a:af:a6:c8:91:e4:98:8e:cc:da:a0:
8e:12:40:f6:c7:84:1b:90:6c:ba:d0:3c:cd:5c:3d:e6:a6:70:
2c:50:38:44:6c:3c:8d:e6:9b:7d:0d:23:e8:75:94:9a:da:c2:
f3:ba:6e:a0:46:c0:5d:a1:b1:b2:c8:22:98:cd:69:85:75:88:
2d:2c:a4:c6:59:a2:68:03:20:c3:d9:07:17:47:04:bc:d2:88:
00:a4:48:7d:0b:17:1b:fc:61:57:96:ad:c7:01:cd:c5:52:f2:
94:8d:e2:26:83:16:75:e0:60:c9:89:b0:db:1a:7c:7e:6c:dd:
60:89:5f:75:5f:ba:c2:54:dd:6e:fa:ee:87:93:41:64:c3:dc:
07:10:65:a2:a7:27:d9:98:33:89:e8:bb:7e:56:60:33:d1:94:
87:9c:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:51 2025 by rpki-client