Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: uQqKaqbZrimTjUZ68+Vh0EcmvkywhbDuR1xhLLp8atk=
Subject key identifier: F7:30:D6:A0:D2:6D:FC:5D:50:2C:CB:4E:56:C0:2B:E7:95:AD:5F:9E
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 0194BCA992A41BFD456D03F5CAC0C5F62B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 0F44
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: 8MKM3nwq6blnjUODgUoGGOv1PF3HSBzkVmZU70vuByg=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:a4:1b:fd:45:6d:03:f5:ca:c0:c5:f6:2b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=f730d6a0d26dfc5d502ccb4e56c02be795ad5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:a6:a7:dc:a1:61:b1:d2:44:31:3b:69:c6:
5c:b9:88:6b:72:44:69:12:b6:3f:83:48:f7:90:9e:
52:4b:46:0c:ba:5c:22:b0:2c:90:b3:09:f7:d0:79:
92:d1:e9:ee:9c:78:1a:99:60:d6:31:f0:d2:dc:18:
15:78:cf:4e:a8:09:2e:cb:1f:59:42:55:12:00:9b:
ed:a4:2b:3e:62:76:c2:7c:f9:19:c4:88:15:b6:c0:
1b:ed:b9:22:1b:b4:95:6b:26:0e:2a:85:13:56:34:
3d:4a:f8:d5:25:84:c0:7e:83:8a:85:d4:34:9a:69:
8a:d0:62:14:f3:fe:9b:ee:7f:80:1e:b7:85:b9:c3:
3b:93:ec:90:81:0c:7a:c2:95:e2:40:11:f0:a5:ed:
4b:b0:69:46:5d:24:69:82:aa:b7:52:78:2b:f5:c8:
6e:9f:c8:7f:15:fb:cd:62:83:66:08:91:86:a7:5b:
a5:16:91:ed:61:93:51:fd:64:1f:ad:71:30:94:36:
d3:e8:c8:cb:83:4a:aa:03:c2:6a:29:56:36:f7:4a:
9d:a2:50:5a:8c:40:14:d4:43:da:e2:d0:79:dc:e4:
3c:de:81:55:c2:34:c5:82:57:0b:b6:52:43:b1:1c:
03:1e:56:71:43:89:1e:92:07:fe:23:c4:19:11:7e:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:D6:A0:D2:6D:FC:5D:50:2C:CB:4E:56:C0:2B:E7:95:AD:5F:9E
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f8:fd:ef:53:8d:f3:5b:a2:3a:bd:ff:76:ee:e2:8c:34:2b:
31:05:89:ed:e0:f5:c3:01:4a:e7:d2:20:14:59:1c:d5:2c:95:
a8:3a:d0:76:3d:23:b9:42:e8:be:c9:3b:93:9c:37:e6:06:9b:
86:dd:50:f9:b4:76:ff:df:38:d2:e2:1b:04:11:e4:3c:23:cf:
8f:02:10:93:05:fc:21:f4:e9:c8:11:ea:4b:1e:19:a1:95:91:
77:22:1b:ea:a4:49:6c:77:d9:2f:44:61:3f:29:52:89:a1:3b:
88:2d:ca:50:00:46:5a:16:b3:29:db:a9:c7:b6:cf:6c:b9:91:
6f:1e:41:4d:4a:50:9c:0d:a2:97:a2:72:6c:85:a0:36:35:f6:
90:7f:e4:84:6e:c3:ce:c8:79:fe:9b:ee:12:58:90:1d:7e:bf:
db:8f:67:50:80:2c:63:ce:0d:b9:06:84:f0:97:ce:6e:2d:f6:
bd:39:f8:ad:ee:ed:71:33:7c:32:9b:2f:95:9a:61:b5:a2:1a:
97:15:f1:7a:37:4b:41:36:92:e7:3e:37:c1:f8:ee:d7:b4:02:
f8:41:e9:80:f7:a4:1b:21:cb:dc:f5:22:40:f4:74:88:01:3f:
48:e2:9f:50:3f:e4:55:80:f2:12:df:41:7b:05:e3:e3:83:cd:
5f:39:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:48 2025 by rpki-client