Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
File: OIzM14vxZTPzMYVEPqgtza2SBBA.mft (raw, json)
Hash identifier: IzuL55WDhOS8FPwiBLkE8GlY8DYpdS/Hgx3fC7yJvPo=
Subject key identifier: 4C:F6:C6:CD:13:BD:C8:ED:B3:1B:B5:F2:25:B0:7C:70:D9:E4:2D:61
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 0194BCE065F52D632CB8085C67FA845910C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
Manifest number: 0A67
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: OIzM14vxZTPzMYVEPqgtza2SBBA.crl (hash: L0IwNFLXVcZ6qg/80DJoNTFRMxL9aQIY8xPX/Plp+Ls=)
2: S5-p15oe6PO1US7yiwalFk2guhA.roa (hash: RxwUj9qrcB8W+bA9U60Y3Yd+aWieeN2zZTQTfRBMSD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:f5:2d:63:2c:b8:08:5c:67:fa:84:59:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=4cf6c6cd13bdc8edb31bb5f225b07c70d9e42d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:8d:ce:8f:cb:fc:67:81:6d:de:ed:51:e6:
1a:05:5c:68:00:d6:a6:c8:25:df:cb:98:3b:6a:6e:
f1:8c:9d:c3:9a:a0:72:54:bf:82:63:3a:a8:b9:3b:
3d:00:07:53:85:7e:7f:bc:cb:04:7c:f9:03:54:ba:
a1:e8:e0:55:96:d6:d8:c6:87:03:51:f2:5f:fc:95:
e8:bc:89:fe:75:43:a7:5a:e0:a9:31:9e:ca:60:30:
1d:06:fe:ed:35:63:45:14:c0:83:a2:41:79:63:5e:
1d:8d:e1:92:b3:ce:cb:14:3e:25:83:1f:c1:02:06:
32:0d:c5:88:ed:c2:45:5d:1b:b3:08:01:2c:8a:9c:
01:2f:50:19:8f:a4:de:fa:d0:2c:d8:27:12:ab:81:
95:4c:bb:9f:43:8a:c8:e8:06:e6:2c:15:a6:0c:18:
3c:91:46:af:59:1c:72:b3:48:b2:bd:79:37:00:4c:
29:22:e7:4e:7e:30:94:7d:df:54:d9:da:77:82:6d:
1f:f2:87:f2:7d:dd:13:55:08:c4:dd:61:15:9d:fb:
dd:f1:df:f6:11:b4:88:4e:50:b6:a9:75:9b:43:b7:
db:a3:d4:4a:93:b5:28:47:f8:3c:ce:91:04:b2:4b:
55:fa:5a:43:f9:9a:50:72:50:23:86:36:42:2f:b1:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:C6:CD:13:BD:C8:ED:B3:1B:B5:F2:25:B0:7C:70:D9:E4:2D:61
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:c4:ac:a7:50:0f:0e:11:34:3d:7b:c8:2e:c0:c4:81:bc:
d8:b7:6f:b3:0f:6e:c7:27:9c:28:04:81:55:da:7e:26:4f:fa:
8c:45:c7:42:4a:57:cb:8a:8a:70:6f:9f:04:03:e6:bd:95:64:
e9:ab:6c:e5:46:f5:0f:66:aa:e9:91:37:d7:c4:88:ce:74:b7:
97:cb:7e:0f:19:4a:53:76:ee:41:99:71:95:c6:86:09:95:ae:
1a:74:94:88:cc:21:2c:5d:19:dd:63:b3:93:dd:1b:ea:3e:d1:
87:94:c4:17:c0:10:58:59:88:73:49:38:d1:e3:57:5d:b1:07:
57:52:c2:56:0a:73:c8:03:a3:04:1e:49:a8:f2:74:53:be:2c:
57:1f:e1:73:6c:84:0f:c4:31:7f:88:a5:3f:fa:8e:22:3c:92:
d4:4c:9f:2c:dd:0b:dd:df:d8:b4:52:e6:05:75:c9:67:80:52:
a2:fe:08:87:b4:5b:8b:11:5d:0c:72:61:74:e8:c1:9e:f4:a3:
65:26:80:cc:d1:96:58:ad:04:62:9a:f6:61:34:5f:80:9c:f3:
2c:9e:3a:ce:6e:06:5b:dd:f3:39:5a:7a:1b:d3:1f:68:a8:30:
ed:d4:54:78:8e:da:d8:26:a9:dc:40:00:18:75:52:f8:68:f4:
81:3e:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:05 2025 by rpki-client