Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: XJIyUizjYtddtLHiH3aa0ikgfpq0DZgufMxnrEcqT/g=
Subject key identifier: 3D:79:38:22:0C:CD:8D:42:C5:80:97:AC:CA:05:9F:D3:A6:DA:7B:78
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 0194BD4E9CC1F8F5AE22B2BEA64EC4CECDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 066C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: mWbOUgx6/oZxqEqYhISOWU6OFsIF74aAxQ+TPkLpluU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:c1:f8:f5:ae:22:b2:be:a6:4e:c4:ce:cd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=3d7938220ccd8d42c58097acca059fd3a6da7b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:b9:3b:a5:b6:e0:f3:cc:e9:7b:60:6a:b0:
a7:88:46:c6:2e:59:06:96:ec:f8:19:e4:5b:70:f6:
9c:c2:79:b5:a1:01:5c:1d:92:0f:ab:cf:23:88:04:
5d:98:dc:64:18:92:67:f9:bc:02:07:7f:41:6e:09:
bd:ed:60:5b:1f:dc:5a:0e:4e:2c:7a:ef:7d:44:92:
6d:1a:b2:c1:7c:65:49:ad:58:e9:5e:e2:e8:db:81:
7a:fd:7f:b5:72:8c:58:f3:96:57:a6:d0:ff:33:5c:
f1:b6:90:6b:56:d5:39:fd:f8:08:20:6c:bf:8c:30:
73:b4:bf:71:4c:12:2f:71:bc:41:e6:34:e9:dc:a9:
e9:20:ac:cf:3b:c4:dc:6c:02:f7:dd:83:4a:b5:0d:
a0:fe:85:c8:8b:87:58:c7:06:87:64:5c:31:d0:0a:
b1:9a:1a:53:92:92:83:01:df:eb:54:d3:e9:7a:79:
4d:83:74:3a:06:cd:69:80:fd:58:34:ba:00:96:16:
7c:56:59:2b:31:26:14:49:84:0f:3f:31:93:d9:aa:
21:59:27:9d:da:3d:0c:1b:ca:a2:ad:4f:7d:42:7b:
2d:f1:db:e4:f0:8a:7f:dc:49:f7:39:41:08:6c:52:
cf:6f:2d:ad:bf:24:22:5f:01:77:99:78:5c:ac:d4:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:38:22:0C:CD:8D:42:C5:80:97:AC:CA:05:9F:D3:A6:DA:7B:78
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:7d:2c:83:8e:67:7e:bb:a1:1a:02:c0:c1:22:09:4c:36:
c4:aa:ca:5a:0c:f8:c0:7d:27:c0:45:27:9f:a7:cb:48:c6:ac:
d0:50:73:2f:8b:11:f0:a1:f6:ab:fc:e8:19:3b:ba:08:cd:c2:
a0:61:d6:fd:89:15:6e:51:a5:ba:b8:c0:64:c2:33:b6:55:ed:
bc:50:64:9f:f1:0f:12:c8:be:f5:93:4c:d5:22:84:f6:63:c1:
97:79:d3:d9:b8:aa:d5:b8:dc:32:d9:a8:e3:0b:34:bd:9a:10:
27:1f:9f:68:20:dc:ac:d4:d0:6d:bc:a6:93:75:31:67:a8:fa:
6e:fd:be:e8:4b:98:9a:11:87:00:49:7a:ae:b6:5d:51:a2:fe:
26:71:82:9b:52:fb:33:1a:fe:00:93:1b:6d:1e:c6:0c:23:70:
fe:91:59:45:fa:c6:7b:89:f7:2c:43:a5:4e:e0:20:87:d3:60:
6d:19:62:0f:41:5e:cd:02:d7:c6:b0:bc:3a:48:96:39:8c:3a:
9d:3f:d8:73:e8:a3:22:cd:ac:67:39:8a:7c:7d:78:31:1c:c3:
34:aa:7b:12:76:ab:94:53:73:5e:87:11:0c:05:dd:b1:16:48:
d4:df:31:af:eb:84:f4:98:c0:41:29:97:0a:62:89:44:a7:8a:
e3:65:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:44 2025 by rpki-client