Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: q1o/K0nF6VVKGtA/t1Z0O46lmR7Dd0XbQfhiA0gbz/c=
Subject key identifier: 49:A2:7A:26:0F:BE:0F:CB:59:EA:70:AB:8F:FE:A1:1A:82:70:0E:35
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 0194BD4EABB2E6502DDFCEFE7232C41E3584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0E4F
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: 1tLQoUxEVYelj5WnMeGr0IWkJ2874HcxfXHMLTEJfNE=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:b2:e6:50:2d:df:ce:fe:72:32:c4:1e:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=49a27a260fbe0fcb59ea70ab8ffea11a82700e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:ed:7d:d4:1e:8c:c6:96:ca:4a:39:67:84:
1c:7e:76:52:c1:d8:f6:5a:c3:92:42:12:d9:38:f7:
3e:fd:88:ec:42:e9:d6:af:b5:96:2c:6b:34:7c:60:
4e:9d:86:07:c9:6c:ae:22:b5:eb:de:d2:cb:2a:e8:
e8:f5:6c:0f:bb:da:c2:f7:87:1c:e8:07:7a:56:b0:
6f:d7:49:83:bf:27:34:86:35:59:5f:b5:e7:bb:60:
10:b4:9f:74:c7:07:25:e3:b8:36:65:ff:95:16:65:
be:9a:3e:1b:66:87:f1:f3:0e:fe:4d:5a:7a:3a:f6:
2b:25:83:e9:b2:19:46:79:3c:64:e3:93:6d:49:b4:
d7:15:73:d9:16:67:03:5a:2a:0c:b7:d6:57:7f:e8:
87:55:f2:37:af:02:2a:40:56:5a:82:ad:1e:d1:ea:
9c:b7:79:bb:c5:78:1c:d9:26:78:f8:73:11:79:34:
94:0e:d7:55:65:cc:e7:31:73:3e:ea:bd:92:8d:3b:
76:92:30:78:6d:76:7e:d1:f9:69:59:1f:02:84:35:
c7:a5:97:02:80:74:94:37:18:be:2c:0d:f2:54:da:
25:d5:45:d5:a2:93:9a:8f:bc:9c:91:3f:c3:71:81:
7e:50:4c:ae:64:f6:2d:14:3c:05:c4:4d:13:ba:56:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:7A:26:0F:BE:0F:CB:59:EA:70:AB:8F:FE:A1:1A:82:70:0E:35
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:c4:d4:f3:50:71:de:31:bc:95:37:e1:64:11:53:10:3c:
41:ae:31:19:15:28:a0:d3:9d:e2:6b:d6:c2:01:21:cb:e1:1b:
2b:e9:7b:74:09:71:44:17:c6:a3:61:82:2b:ae:d7:78:7f:df:
ac:c8:87:a0:83:fe:94:11:27:4a:e1:13:d5:c7:d3:3e:47:01:
87:70:b5:41:2b:e7:93:5a:77:69:c3:59:1a:e7:ab:66:90:17:
93:e6:c8:22:89:8b:d1:11:79:aa:bb:c8:33:3b:a6:a1:2e:d3:
51:9d:d5:c7:17:e0:87:fb:c2:30:53:cf:84:df:23:4f:f2:99:
78:b4:a8:a2:31:cb:ef:7f:57:de:6e:6a:d0:62:5b:5c:95:b5:
dd:5c:4f:0a:39:55:7c:39:ec:ea:21:03:03:49:b3:99:d3:e1:
ae:bf:77:05:38:b4:c0:32:78:ef:52:2a:ec:8f:ec:69:cd:12:
1d:ef:94:02:b3:ce:28:58:98:22:9f:82:ae:35:47:ae:7d:a7:
14:53:31:a2:20:70:b4:2e:4a:4a:dc:59:ff:1b:a0:49:80:0e:
b0:ef:ea:26:d3:83:b1:75:6e:90:66:ea:5c:7b:f7:b3:19:c7:
db:1a:20:be:6d:d0:e3:9a:42:d4:39:33:c0:8b:2c:23:86:8a:
d7:a1:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client