Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: dw+Rdhv+uXxcb1ny3lNmAdUeSGrOFE0V2cyXK6xng6s=
Subject key identifier: C9:26:32:63:E4:A4:AA:F3:2A:FA:51:E0:DF:90:F1:17:1A:BA:9F:6F
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 0194BBCE3A9723228A750958389DF169BF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 12C8
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: BKemPlXVbyH0PbB0vrC2SCmyDnTmLvLuChJ2oSVF+98=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3a:97:23:22:8a:75:09:58:38:9d:f1:69:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=c9263263e4a4aaf32afa51e0df90f1171aba9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:35:11:81:32:41:32:9d:1f:3e:31:94:dc:
ed:4c:bb:52:f1:cb:7c:5a:13:fe:a3:ab:76:05:65:
06:d5:fa:08:9f:8c:5a:e6:4d:82:b3:22:71:dd:87:
7f:f4:0e:6e:2f:d5:24:5c:32:c4:f4:e7:3a:09:9d:
71:00:1d:96:64:81:cb:93:b9:56:3d:1f:a4:71:e3:
87:c8:99:46:70:d6:c2:2c:fc:34:e6:7b:36:24:05:
07:1d:7c:cc:c6:fc:6f:aa:2a:60:bb:0d:ed:09:fc:
3c:63:78:0c:a7:81:58:8f:dd:26:95:bb:f6:f8:75:
d2:bf:9b:1b:2d:7c:58:9c:12:fe:47:ae:37:0d:e6:
54:da:01:61:21:41:75:02:c5:da:05:db:be:10:b2:
c0:0f:16:9d:f4:ce:7f:c4:57:70:6b:e5:bd:51:35:
fb:03:13:46:a3:e1:5f:b4:5a:5d:da:f6:b0:af:99:
cc:4d:ec:30:16:03:59:da:79:31:5d:5f:ca:3d:ab:
17:d7:11:7c:e8:69:2a:cb:b7:f1:1a:1c:78:0c:d8:
3e:60:69:85:68:5c:8b:aa:1a:1f:d7:10:c2:2f:7e:
9e:db:d8:51:76:96:38:1f:54:fe:fd:2b:c5:3f:80:
62:6e:45:72:5c:76:c8:90:14:86:28:88:3f:70:ae:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:26:32:63:E4:A4:AA:F3:2A:FA:51:E0:DF:90:F1:17:1A:BA:9F:6F
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:3e:29:02:ae:dc:3a:83:fd:97:90:04:f7:d2:92:1c:01:
5c:1e:a2:84:85:d5:e1:fa:4a:66:c8:8b:84:d6:bf:2b:50:9e:
a3:c3:e1:94:9b:20:4e:03:f6:38:7f:30:3b:68:65:1b:e8:54:
67:bf:56:40:51:b3:01:74:b2:e6:60:ad:a2:75:26:bb:7d:d8:
99:37:a1:1a:90:c6:68:42:ff:f4:e9:cd:6f:1f:77:33:83:33:
e4:65:34:60:bc:fb:71:c7:6a:62:91:d0:c6:b2:c3:b6:35:93:
64:87:55:1c:db:05:18:ca:be:d6:ca:ab:88:4d:ac:92:a1:39:
02:ef:eb:bd:f4:58:ee:39:9a:2d:f5:c1:a8:b1:e7:4e:4c:a7:
08:cf:0c:7e:f4:82:a4:03:0e:a4:1a:9b:82:d9:33:c4:18:65:
66:78:34:ec:7a:51:e1:81:50:51:25:52:49:6b:eb:9b:81:13:
49:0c:41:18:fe:bf:b3:9e:7c:5b:f3:b6:6b:23:02:2b:78:d6:
27:71:88:82:df:62:6d:fc:77:14:34:1b:b5:2a:9a:0f:e5:34:
fd:9b:73:87:49:00:6b:ed:4e:30:84:62:ac:1c:b0:d3:4d:86:
e2:a7:74:1f:4c:03:57:de:3b:5a:96:79:e2:f8:bb:4d:be:70:
aa:5e:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:31 2025 by rpki-client