Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier: AX+TUOm5Gy+bBaV1TGklcU/OsDVfOfdpTrmxOb4hLGk=
Subject key identifier: 18:96:07:1F:A7:C4:FE:E2:48:5B:7A:C1:A1:C8:C7:43:0E:15:8F:1F
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer: /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial: 0194BC7312D31CC401E1BBC8695EA551F30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: DwzLIm/KrD9+Vw3hr1sCzbKLXwDCUZjdt8fqVUmpgPo=)
2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:12:d3:1c:c4:01:e1:bb:c8:69:5e:a5:51:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=1896071fa7c4fee2485b7ac1a1c8c7430e158f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:9a:2a:36:3b:32:af:3f:f6:50:9b:b4:85:
21:b5:3f:87:5c:9d:42:51:7a:2e:7b:f2:56:06:b1:
26:f4:c6:66:33:1e:ee:c5:cf:85:7d:39:ea:2c:a5:
1f:13:91:60:7e:7c:a9:3d:54:bc:3d:db:03:30:2d:
b8:65:58:37:91:d6:0f:53:dc:7f:ef:f3:1b:29:32:
12:d0:7a:68:2e:44:09:8b:62:e4:a0:a6:bc:bf:ef:
91:e1:a6:e2:0d:40:23:89:94:08:4d:bb:93:8b:d6:
0c:7a:94:c5:1e:50:c6:96:15:ea:69:cc:e3:35:4f:
3b:d3:6e:02:3f:fd:4c:ce:58:4a:f2:93:0e:ed:13:
9d:5b:9a:29:85:e3:cf:fd:0a:23:bd:a9:0a:a0:5a:
ce:97:2f:56:69:5e:31:80:9f:f6:1d:92:8a:84:61:
3a:23:17:94:b6:e2:9c:a0:de:ff:64:4e:f3:19:09:
07:d7:0d:e7:9f:75:49:54:87:07:e7:21:8e:71:a8:
09:3d:5f:4d:7c:f4:f6:de:94:82:f2:fc:36:74:a1:
bd:e0:70:65:26:61:0e:a5:be:4c:6c:c6:a0:70:4b:
72:5f:a4:af:86:f7:49:b9:a1:ba:42:a6:0b:65:21:
7f:d2:20:e8:26:74:b1:1e:8a:80:55:c6:4a:0d:82:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:07:1F:A7:C4:FE:E2:48:5B:7A:C1:A1:C8:C7:43:0E:15:8F:1F
X509v3 Authority Key Identifier:
keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:89:60:83:a4:b3:c1:b3:b4:84:86:a4:79:b9:67:79:e0:
c0:93:90:b8:04:ff:eb:d6:d6:cb:e2:0b:cb:1f:4b:38:d4:ef:
ff:8f:48:45:8c:79:ff:ec:71:18:ef:8c:80:33:1e:dc:d2:d6:
e8:59:56:ae:ee:a4:01:18:25:3d:8d:ba:cf:06:17:2a:1c:36:
3e:10:8b:40:19:6f:db:36:e5:10:71:f9:6d:3d:c9:c7:00:d6:
eb:7f:94:b1:ab:da:d0:35:4a:48:5c:1c:51:4b:32:c4:72:7b:
6d:1e:b5:2c:bc:cf:d9:e3:b5:df:54:bb:8e:94:73:34:31:53:
ef:dd:e9:92:ba:f6:1c:22:5d:9b:fa:ef:4b:f7:12:2b:e2:2a:
38:6d:a6:9d:8f:d8:17:81:f0:70:22:d8:00:50:68:b3:3d:f7:
2f:e2:99:eb:1f:1b:c6:cf:d8:51:15:45:67:c8:9e:e4:54:39:
b8:87:bd:b4:c2:c8:c0:da:c1:71:6c:ae:a1:bb:ba:27:83:89:
0c:fe:01:89:bc:44:4c:42:86:d0:cc:31:9b:ac:15:2d:52:14:
3d:52:84:7d:7e:1c:09:9c:7c:5c:b9:9f:d8:e9:20:58:7b:32:
2e:82:87:5a:bf:44:fe:31:06:23:5c:04:20:79:5b:10:68:3c:
06:04:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:04 2025 by rpki-client