Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: P7qu4lgMCZEEHbVJpVzzWDkpu/SPd6a4cSzuwYeW//Q=
Subject key identifier: B7:F2:F4:62:43:34:0E:EA:99:4A:1C:74:26:F7:3B:8F:60:FC:FB:97
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 0194BC3C0F82D8CE76591E5D57FF09D91392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: Nb1wunasHaufRlcNgsH8UPsX8snPy9IMYtzBqJXkllg=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:82:d8:ce:76:59:1e:5d:57:ff:09:d9:13:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=b7f2f46243340eea994a1c7426f73b8f60fcfb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:9f:48:a2:f4:66:cb:b5:cc:cc:2b:f3:9b:
a2:48:0e:56:3c:72:bb:3a:3b:31:72:b4:59:9c:e3:
ce:6b:ae:36:c5:b8:08:40:28:02:1d:c2:6a:00:8c:
b1:d6:ef:53:37:3e:33:56:ce:81:74:c9:71:d7:e0:
7b:53:6b:25:9f:95:53:75:0a:b1:47:c7:ec:d1:bf:
53:9f:96:5d:11:4b:8d:4b:3e:69:f0:40:50:f8:db:
1d:69:df:19:c7:23:b2:eb:82:b9:90:80:7b:f6:28:
35:4c:48:61:79:88:26:29:16:8e:26:c7:20:b1:7d:
ee:95:40:0f:51:33:d5:48:15:12:34:c2:f0:1e:67:
b5:da:1b:81:42:25:45:a2:39:c8:b4:2b:80:88:cc:
08:dd:35:78:e3:e8:bc:2b:60:85:b4:02:66:68:ed:
42:93:05:cf:c7:77:c8:6c:f8:f4:cf:e4:28:61:55:
00:0e:2d:aa:c0:61:4f:e6:f1:b9:2b:7c:57:b4:b4:
a6:0a:33:c2:04:a3:c9:8a:58:67:b2:ad:d6:bd:1f:
88:3b:82:e0:c6:79:e6:18:23:b7:65:28:b2:51:19:
ce:7a:93:31:c4:2f:0c:dc:52:0c:09:a1:36:56:de:
f5:da:70:a4:c3:3b:3a:0a:28:7a:c5:cd:f8:a4:3b:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:F4:62:43:34:0E:EA:99:4A:1C:74:26:F7:3B:8F:60:FC:FB:97
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6a:75:5c:92:ba:01:bd:48:bd:5c:ad:98:e6:54:25:4a:c4:
b3:c4:c9:f4:2e:01:a1:db:40:d0:b1:2a:73:58:58:2f:b2:45:
0c:7f:e7:50:ab:22:cb:8d:91:2b:0e:73:db:ba:b2:85:a3:75:
ff:a6:fd:4a:d3:62:44:86:68:af:a5:cb:39:17:2f:dc:ea:2a:
bb:e3:e0:8d:21:a2:01:26:02:1f:30:a3:ba:47:20:1a:45:5d:
be:c3:ad:37:01:04:64:ca:d0:63:ce:29:8f:19:74:77:f9:4d:
25:87:9a:e6:59:0c:99:43:60:46:71:e1:7a:84:39:61:2e:95:
0e:2b:05:05:80:16:e1:92:70:5f:6e:4c:43:5d:b1:16:02:7d:
c4:97:b0:fc:5a:31:5a:19:41:88:c0:52:6e:03:cc:4d:47:fc:
97:de:eb:57:25:ab:e1:87:da:cb:30:b9:25:23:4f:a6:1c:27:
70:9a:a6:0b:3b:9c:9a:15:bd:11:cd:81:1c:b7:66:91:84:dc:
cc:08:f9:5e:d9:59:d3:ae:e1:e1:95:0d:06:12:5e:89:ef:71:
c7:6e:cb:9f:77:f1:fa:c1:ce:d5:c4:88:81:6b:90:1d:26:33:
1e:5a:1f:82:a8:6c:41:29:e9:94:86:d1:18:45:83:8b:e1:b3:
af:ff:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:12 2025 by rpki-client