Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: vsQPfe3clI3gwhE5CuWjMpdep+jCJEHCT0LQqXTC60M=
Subject key identifier: 44:79:F6:91:F7:C6:1F:25:74:52:B5:C7:68:BF:28:DB:F9:67:42:25
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 0194BC3C7B8047CF08590D65CDBF1388077C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: RktknWQAPqYX4QR1dZnFxkvJm/hZBhZayiWs7bc8UKE=)
2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:80:47:cf:08:59:0d:65:cd:bf:13:88:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=4479f691f7c61f257452b5c768bf28dbf9674225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:dc:72:64:35:54:ab:3f:08:e0:92:da:17:
18:4b:22:d0:04:8d:92:29:9e:16:99:30:5d:5a:16:
c3:6b:0d:b0:b7:5f:5e:93:b6:0f:ee:b6:4f:38:38:
82:d4:ef:ff:08:b2:ee:9d:be:06:fc:3d:d3:27:6c:
67:58:98:b5:36:c8:14:3f:8f:42:73:e8:09:b7:20:
4f:a2:46:03:44:99:56:c4:02:f4:6d:7a:01:a5:8a:
4c:dc:74:6c:8f:d3:95:05:ed:f3:17:f1:1c:fb:16:
d8:c7:f3:ec:5d:2a:ff:9f:e5:6b:a8:45:d2:10:22:
8a:82:7c:5f:5b:ca:7e:ad:97:b6:e0:0f:0a:d2:38:
d2:00:2b:ff:cc:00:e8:a4:65:63:6e:9f:e6:83:c2:
57:c9:72:b6:86:e5:85:76:a9:35:af:cb:c1:c8:bd:
58:22:09:75:e9:f9:f4:3b:81:09:3c:fc:f9:9b:3f:
bf:85:ee:6e:6b:ec:1a:92:5f:8d:2e:87:5c:d9:d4:
6d:a8:4b:dd:74:8e:64:59:9d:cf:18:05:45:df:56:
45:c7:79:31:40:25:5c:ae:94:c4:a0:c3:18:e7:87:
1f:02:54:ab:6f:70:f0:6d:76:59:b8:cf:62:b1:3d:
e8:61:17:fb:de:df:60:12:28:27:b5:fc:c3:b5:9f:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:F6:91:F7:C6:1F:25:74:52:B5:C7:68:BF:28:DB:F9:67:42:25
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f3:da:12:c8:51:15:29:17:3f:f9:45:1f:7d:53:31:f5:d9:
4a:ab:2a:db:cb:b5:7b:2a:3d:b4:72:42:d8:c1:f5:e2:50:e0:
0a:85:63:7e:08:94:25:02:a6:68:eb:09:a6:02:cf:38:a0:72:
16:88:50:10:e4:44:1d:2e:4e:a1:56:2e:58:8d:95:9b:8b:17:
ee:83:7b:b9:84:12:85:f8:cc:f0:db:8a:ed:b3:f7:44:93:80:
47:ae:e9:f7:9e:3d:f7:e3:21:91:5b:f4:85:c4:17:6c:4f:71:
76:eb:1a:38:0d:df:5b:b0:11:72:7b:52:ed:2a:64:fc:e4:59:
3a:87:cc:92:91:0e:be:65:3f:50:2c:b7:e6:00:7d:ca:c1:81:
38:21:ed:56:e4:59:92:f9:d4:d4:3f:01:9c:1f:49:0e:4c:cc:
34:33:c0:b8:77:30:49:c4:d0:9a:52:96:fd:30:e8:9b:d3:b4:
c7:4a:d9:3d:8b:7d:63:88:d6:88:e7:04:b3:f0:03:b3:52:e2:
af:ac:12:5e:43:06:9b:30:8e:f7:67:55:e5:82:fa:eb:9c:6e:
3d:47:e3:4c:4b:fa:9e:30:9f:1a:07:9a:11:a2:5f:9c:6c:23:
ee:5e:a8:2d:56:f6:01:45:11:d1:38:ca:f6:4f:5d:a8:19:75:
14:e3:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:02 2025 by rpki-client