Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier: HwSjWexhYnRy66Fj44ljhj7yoEb/2KkFtorxyVjSgUw=
Subject key identifier: 22:B2:B3:F3:00:FC:EB:45:EB:4C:79:7B:02:7C:63:0F:19:9D:5F:59
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 0194BCE0856180AEB522846D376DA4D3B187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number: 01DC
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: pztzudh5KMuKYZe5ZqoKUYUcEUEp7zIwptQI+jaLBPg=)
2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=)
3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=)
4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:61:80:ae:b5:22:84:6d:37:6d:a4:d3:b1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=22b2b3f300fceb45eb4c797b027c630f199d5f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:f4:23:fa:06:bb:8f:4b:2c:6b:f4:57:38:
86:af:9a:c0:81:53:5b:b9:a0:cd:39:e8:71:28:38:
ea:9c:79:88:05:aa:c2:d3:e4:47:91:c2:2a:74:5a:
69:da:93:a6:af:04:67:97:d0:c3:7e:ed:ba:69:e7:
be:4d:ca:d1:f5:b3:12:79:e3:77:1d:8e:1d:75:68:
e4:75:5a:43:f6:c1:f2:e0:67:22:db:1e:ab:da:12:
9e:89:ca:fe:bb:7f:27:d8:e4:9e:a6:f7:f4:c4:d9:
7c:03:ba:be:41:d9:60:07:49:ab:bb:5b:ed:b4:9d:
4a:11:62:19:80:bc:5a:3d:f6:c1:5c:e7:d6:2d:eb:
e7:be:b0:31:3d:e9:da:b6:9c:03:3a:3e:da:39:90:
40:38:1f:1e:8d:c9:c2:3b:b1:98:35:7b:f2:4c:08:
cb:24:da:5a:12:87:a1:14:6a:43:46:47:a6:4a:13:
13:2a:43:e9:e9:82:46:f0:79:46:a0:0e:bd:3f:ec:
a0:06:f8:f8:f0:5a:eb:eb:ef:a5:de:7f:44:45:b1:
62:40:be:20:38:9c:f1:8b:6f:33:6b:72:b3:ab:77:
c0:f9:f1:9e:c7:b4:91:50:3e:be:6e:f8:e3:6e:c6:
45:ed:cd:08:0e:16:ed:2c:ce:d7:e9:bc:3f:e8:3e:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:B3:F3:00:FC:EB:45:EB:4C:79:7B:02:7C:63:0F:19:9D:5F:59
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:7a:43:b8:57:99:a5:94:51:6a:d1:cc:84:83:31:2c:0a:
08:7a:7b:4c:d4:a8:52:79:3f:57:42:a6:d0:0a:fc:6b:09:95:
cc:2e:5c:16:ee:af:e3:9a:d0:45:d9:74:cb:09:7a:28:6d:4b:
25:81:47:81:7a:44:5b:dc:bf:9e:07:b9:1a:82:f2:90:e6:e0:
00:fd:c6:1f:cc:85:b5:08:51:2f:dd:88:ee:a5:c6:d1:09:22:
27:8e:8f:0e:db:01:5b:05:56:3d:d7:74:fa:97:97:4d:bd:4a:
35:3f:13:33:a3:5f:1a:f6:17:3a:33:42:c8:0d:22:c0:fa:fb:
e2:30:ff:1e:24:13:fd:9d:e9:a0:82:e1:db:a2:bc:32:57:fc:
13:f7:07:f3:6d:f5:9f:bb:46:57:4d:21:de:b9:b1:70:f3:58:
6b:2e:cb:2e:35:b6:4c:76:70:66:d7:5c:59:4e:f4:a5:11:53:
be:b2:6a:1a:fc:46:45:c5:ec:7e:fd:22:85:e3:ec:ac:98:51:
70:3f:aa:87:a9:81:85:47:38:71:bf:a6:3e:aa:0f:f3:ef:3b:
e9:f0:ed:79:ad:25:65:5c:40:d1:21:e5:ad:b5:7f:ae:8a:c1:
70:55:91:37:49:b1:92:28:93:05:0f:04:a4:2b:d4:c7:a2:59:
81:77:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:13 2025 by rpki-client