Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: THDspffD/wQjnzUk7rrkmJiXmjluUou4e4WiTz9PVkc=
Subject key identifier: 9C:DA:19:2C:A4:4D:15:3E:C8:95:4E:DC:CD:61:17:BD:55:94:4D:00
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 0194BD176FA233BBD4432808CC2E1CC2DC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: sGxVzsS+7qqULKCY2VV48RV8RVcnSOE/cn8DxnFInzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:a2:33:bb:d4:43:28:08:cc:2e:1c:c2:dc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=9cda192ca44d153ec8954edccd6117bd55944d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:22:33:4c:fa:c7:8f:28:4b:be:0e:6a:de:
3c:48:5b:48:23:88:1e:79:e7:78:03:00:f1:15:26:
cc:46:e4:16:11:27:56:57:76:98:e6:9b:d3:c4:4e:
ff:61:4c:32:07:6d:d3:6c:51:a8:cf:45:a3:03:aa:
09:64:28:db:ef:1a:dd:0b:9b:e2:6f:d7:f6:e3:0a:
d7:89:f1:ba:99:32:02:45:6e:8b:c0:40:8c:42:3f:
dd:1e:b8:bd:64:b1:84:8c:e3:5b:12:b9:8a:9b:28:
1a:1d:a6:85:93:ab:40:f8:bf:16:a3:b7:0c:b0:cd:
01:73:f2:d0:da:4c:08:45:ef:b9:1d:97:d2:ac:06:
be:ef:ab:96:ab:39:fa:5c:56:e4:58:77:87:4e:5f:
60:17:4e:6b:89:f9:dd:48:b8:eb:c8:d6:0c:e6:2e:
f2:e8:53:39:b3:65:41:52:14:bd:2c:35:0b:22:44:
9c:12:e4:7b:fb:44:e4:90:dc:ba:5b:10:1a:81:6f:
fd:80:f8:02:ae:f3:b7:8f:66:63:f2:56:1d:c1:3d:
13:cf:06:bf:a3:64:2c:d6:5a:2d:ab:ec:fc:6b:67:
8e:ae:02:bd:13:ef:4f:89:0d:b7:d6:f7:63:66:a8:
45:25:9f:dd:55:c0:aa:32:28:d4:b7:14:4f:a5:d8:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:19:2C:A4:4D:15:3E:C8:95:4E:DC:CD:61:17:BD:55:94:4D:00
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:72:a8:f7:f2:b4:43:04:65:32:31:55:8e:b8:6b:7e:88:
5e:0b:b0:6c:dc:bd:a6:67:0d:10:ac:43:a7:e0:af:83:13:1c:
21:da:dc:76:f4:1b:6f:be:ba:5a:6a:7b:28:de:20:23:a8:05:
0f:d5:92:0f:0e:9e:13:41:d3:c0:a3:6c:f7:96:5a:64:2b:36:
b7:de:5c:fe:52:b5:df:1b:2d:e0:e2:65:56:fa:32:cf:be:cc:
0c:13:54:2f:97:c8:fe:20:e4:91:71:53:5f:2c:c4:6b:7e:fd:
58:70:af:cd:f4:64:02:43:63:2b:c1:ae:03:79:75:18:22:1e:
d7:a4:b8:cd:c9:e4:5f:ea:6c:2f:ba:9a:e4:3d:0d:76:f8:2d:
51:1f:49:fd:e8:e0:e4:76:7a:ed:11:76:d2:ae:f9:26:5f:67:
df:43:ee:54:f4:32:28:6d:bc:f2:cb:ce:a9:58:b6:81:2f:22:
d0:b5:2e:f0:64:38:77:84:9d:e9:93:31:dc:95:26:88:9d:98:
a0:56:3e:58:ec:40:2d:f2:96:af:41:c7:f5:de:45:cb:e6:32:
08:97:2c:18:18:c9:43:3c:a6:e6:7e:ca:8b:79:2a:0e:34:ce:
8b:c2:58:28:e6:8f:63:31:79:26:4b:61:c3:05:c1:55:7d:91:
30:6c:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:58 2025 by rpki-client