Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: HSAIXSl561YVnMSr3TGJcdlwgAd3UZVbNijuuRlz88Y=
Subject key identifier: B4:C7:E7:61:10:E3:06:0D:B2:1D:BB:70:FC:BF:88:34:40:6D:89:22
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 0194BC3C2923205B4E3865E648836A5EE110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: ecZ+uEEA/TD5+A1xKGyf3O3A9bn1zWquNFbRe+7KUg8=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:29:23:20:5b:4e:38:65:e6:48:83:6a:5e:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=b4c7e76110e3060db21dbb70fcbf8834406d8922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:88:ef:ec:9b:6b:6d:87:f2:55:8a:93:67:
70:b7:d6:be:7a:62:c9:25:48:4f:c0:90:f9:ae:28:
83:e0:7b:ea:00:c6:c3:d2:82:83:ee:99:01:9d:0a:
71:21:49:60:f9:6f:d5:ff:78:bf:61:c9:9a:9d:b7:
ca:0d:44:7a:cd:ee:a2:7a:df:4a:de:4c:3b:a5:74:
56:fc:58:63:07:80:f8:92:dc:89:14:9f:f6:e9:6c:
08:60:ad:72:7b:14:4a:1b:90:07:54:da:81:1e:d8:
2a:6e:cb:0d:c0:94:d2:26:37:54:7d:be:cd:6a:13:
c7:89:d3:db:7c:4a:3c:93:ea:99:f3:e6:6a:d8:d0:
2d:cb:7c:b8:f0:81:13:7f:7a:fa:a4:24:75:d8:9b:
48:87:bc:53:b8:c3:e5:49:19:d1:33:93:2b:74:41:
91:93:09:20:69:bb:5a:02:87:86:bb:fa:73:c0:9c:
02:29:b5:e2:16:2f:5d:28:45:d9:de:8f:a6:53:1d:
6a:3b:69:c6:46:07:7c:57:f5:74:28:63:79:b9:16:
56:b5:20:cb:cc:eb:75:bd:db:05:8a:d4:23:29:14:
ee:65:11:38:ad:39:5d:e6:01:af:73:56:f6:42:0b:
84:e5:ac:2c:a9:c7:9f:b4:74:66:a2:dd:6b:bb:90:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:E7:61:10:E3:06:0D:B2:1D:BB:70:FC:BF:88:34:40:6D:89:22
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:68:24:eb:8c:17:dc:91:2f:39:85:c2:dc:94:f4:73:bf:
1b:dc:6c:a2:af:f3:f4:e8:5b:47:0e:de:d4:05:cb:72:e9:35:
4f:ea:e6:ad:de:91:3c:42:6c:23:34:4f:9f:35:7b:e4:59:15:
9e:11:fe:93:dd:51:0f:05:50:6a:87:4e:c9:75:72:3a:da:ff:
6a:10:7b:03:d6:19:31:df:d7:1a:32:2c:dd:ce:e7:29:7b:c0:
66:00:b7:f4:75:4e:77:58:83:b0:d5:58:7f:2b:d7:72:02:a9:
08:22:92:87:e3:21:3c:4f:03:7d:c2:23:97:ab:59:6c:29:cb:
80:95:25:4d:a3:f6:17:c3:77:27:92:c8:49:eb:35:38:64:a4:
5b:74:e5:41:36:41:1f:ea:64:1f:d9:fd:1c:80:1b:b3:4e:db:
ee:04:15:bc:09:80:3d:6d:38:94:88:a9:96:d4:94:63:f1:9e:
74:3c:b7:32:90:c1:b0:a3:90:c9:e3:c2:33:bb:56:5b:04:4d:
ba:98:0a:4f:8a:74:f2:45:8a:fb:1b:62:2d:8f:2c:a7:a9:c4:
6e:c6:e8:6d:1c:b6:02:21:b9:5e:60:47:bc:8a:d3:39:8b:ab:
cd:22:a6:2b:ff:bf:65:66:d4:fb:64:fd:f8:2f:04:51:7e:8d:
5a:cb:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:11 2025 by rpki-client