Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: QQlywsxpyaFBn+Qi7WVgmodBYdQwhokzyMjkfVvpw08=
Subject key identifier: B9:A3:C2:16:4E:B9:C0:11:7E:04:B7:D6:CF:20:6C:1B:AB:43:54:21
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 0194BD17D92717BACB2FA9CE85B83C2DBC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 1211
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 2Zeb42b7x2DELRR9hUbfKEoCmO7nRL7smD+BQuqmFVM=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:27:17:ba:cb:2f:a9:ce:85:b8:3c:2d:bc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=b9a3c2164eb9c0117e04b7d6cf206c1bab435421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:80:1f:97:28:79:f2:c7:61:e1:62:c0:d0:
be:f2:6f:cc:7a:22:ec:80:e2:88:37:a7:1a:f5:0e:
8a:b8:b9:ad:56:02:4c:20:42:7f:d1:37:4a:2c:53:
c4:93:d8:4c:dd:a9:c3:49:5f:7d:49:98:9d:e8:61:
e2:53:4a:6f:71:7c:e4:3a:31:2e:d2:96:5c:a3:d0:
ed:28:8a:7a:c0:e9:17:3c:bd:f8:6d:70:36:32:fa:
b4:bd:83:fa:5a:3a:81:88:30:d2:58:e7:c3:6c:80:
72:68:7f:69:f3:52:be:89:4c:a7:b7:25:97:94:dc:
34:7f:d5:d1:06:ac:26:65:1d:5b:8a:66:7a:80:0f:
31:c0:2a:30:23:c4:cf:85:65:95:f7:9f:53:03:6d:
69:f1:f2:04:e1:65:34:d4:75:bc:28:d4:ab:44:5b:
f8:de:20:45:0c:b1:65:4f:db:45:f3:e0:9b:e2:f8:
90:45:e0:10:ce:bb:ea:3e:b5:3d:3f:74:cc:50:01:
af:47:39:4c:1d:4c:e7:c8:c7:61:fc:5a:3f:dd:45:
47:b3:51:39:59:13:6a:23:60:65:63:2c:05:bb:5b:
c6:ae:bd:54:5a:09:3d:ba:a8:f2:b1:8a:34:66:d4:
fc:b4:9b:31:31:c5:37:b0:a2:ce:ce:74:b6:46:12:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:C2:16:4E:B9:C0:11:7E:04:B7:D6:CF:20:6C:1B:AB:43:54:21
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:28:d2:c9:1f:1e:bf:5e:1e:df:95:02:ae:8f:06:e4:af:2a:
8e:fa:de:b7:58:61:ba:aa:4e:a5:44:a9:48:cf:23:ac:da:be:
96:61:80:57:24:f9:da:00:9b:e7:75:03:b0:25:09:1e:6a:e5:
1d:88:8a:b7:05:24:5b:6a:13:e8:46:7b:96:f0:fd:dc:9f:7f:
63:a7:fe:ea:b8:f2:be:e5:7e:98:78:13:95:22:f0:86:15:63:
48:d7:41:cc:73:f1:c8:01:ef:8f:17:30:ee:88:6c:06:98:37:
24:ec:6c:3a:2b:c9:86:0a:55:20:8a:8a:c1:ca:14:b7:f9:48:
c7:30:c8:04:ce:6a:df:01:2c:1b:b9:5d:8f:cd:ad:f2:f0:f8:
ab:d6:e5:bf:75:0d:56:2e:36:fa:14:5b:c1:18:85:e7:61:84:
04:05:de:88:14:05:fc:e1:64:b8:f0:0a:c5:e9:b8:81:57:d6:
c7:61:c0:29:11:be:0e:9a:67:e5:4b:1a:c0:5f:e1:b4:3d:b5:
f9:03:df:56:85:df:8f:53:05:87:ca:03:dd:a4:e8:3a:60:ce:
a4:ee:1c:ee:cc:8a:47:42:65:7c:5f:3b:11:fc:7b:0a:33:e1:
01:46:d1:b4:ba:4f:40:d7:c2:82:4e:a7:5b:e2:e8:14:e7:e0:
f1:9b:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client