Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: WEYrp/JXWlWYpdxbV2va+J+zIe/HLO7WjyzNGj4/4LY=
Subject key identifier: FA:B4:9F:A9:9A:2F:D2:75:03:31:6C:01:C3:61:F8:02:43:98:5A:31
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0194BD85A75AE31221E94F6C8558242C514A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1149
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: PsxhGvPvxiQszDTcCwOEncqWhVQPj3yn0Jo9ntNAQM4=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:5a:e3:12:21:e9:4f:6c:85:58:24:2c:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=fab49fa99a2fd27503316c01c361f80243985a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:e5:1c:34:66:21:5f:de:a3:81:35:f8:99:
2f:fa:da:f6:83:c9:52:b8:73:89:3f:c8:3c:e9:23:
ed:f7:10:89:98:ec:39:b6:5e:41:2f:23:60:c8:43:
57:ab:de:6c:89:31:02:d5:38:10:69:cf:97:d0:83:
09:36:cd:0e:51:20:38:02:85:38:64:b0:bf:17:d8:
eb:e0:f5:9c:0c:b3:21:16:b0:50:dc:eb:57:8c:9e:
fe:f8:d4:89:00:92:f3:02:97:0b:a2:06:32:6d:04:
69:3a:27:9c:a6:51:9f:42:ea:f7:a9:95:11:b5:c5:
29:8d:7e:29:d0:16:a2:44:79:88:ee:b9:17:3e:61:
b6:65:82:82:2f:90:16:18:cc:8b:c0:23:d1:be:a6:
1d:b3:2f:89:d5:f0:69:16:17:39:6b:4d:2c:f0:4e:
d7:f7:71:c1:20:39:a2:96:65:21:b7:c4:fd:98:b3:
86:2a:e3:fc:ef:2f:c0:3b:dc:17:3b:c2:db:e8:f7:
3d:e4:b8:09:d7:91:c3:e7:5d:b8:a1:ae:3c:f6:f6:
90:d9:65:f7:1f:04:d8:80:9a:c1:d4:27:e9:ca:db:
f2:ad:74:dd:43:9c:4f:09:79:4f:8f:7d:36:9f:63:
17:9e:55:c8:be:73:af:de:f1:af:14:85:da:85:dd:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:9F:A9:9A:2F:D2:75:03:31:6C:01:C3:61:F8:02:43:98:5A:31
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:63:89:60:ca:61:40:07:91:94:eb:7b:d3:c7:98:7f:df:
25:34:c1:83:b0:f9:14:3a:3a:0f:8a:ca:3a:5f:5c:86:3c:30:
b5:3a:cf:be:7f:45:d9:29:5c:e5:c7:19:c8:29:5b:41:bf:2e:
f7:18:cb:1e:07:9a:41:bb:52:e2:3b:ba:b2:2f:74:b8:74:bc:
c1:5d:69:8c:6e:aa:2b:0b:5d:fd:0c:8c:31:99:5d:5e:35:eb:
5e:e8:e1:99:2a:73:7a:31:5b:9d:0b:01:ed:6f:3a:fe:eb:16:
57:6b:fc:13:44:f7:35:04:b0:f9:34:e0:cd:ce:f0:0f:60:6f:
59:21:a9:1f:5e:10:c6:a2:c8:86:63:4e:bb:9c:41:af:99:3d:
44:b9:e4:a5:32:a4:37:f8:60:a2:8a:05:3b:a6:13:00:f9:48:
11:c4:51:63:e2:02:ac:48:b3:a8:77:10:a0:ca:7a:f7:b9:d1:
fc:34:4a:4e:f0:96:cc:e9:76:26:f5:63:7f:b6:26:4e:d9:8d:
6e:3a:31:24:47:2c:03:e7:c6:0d:4c:6d:92:f0:c3:c5:ec:54:
a5:30:34:0c:7f:47:18:3c:c5:14:b2:96:e2:9c:39:bd:3b:b7:
cb:d6:91:87:df:97:11:6d:79:92:d1:c2:2d:00:b0:da:17:c8:
e3:0e:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:13 2025 by rpki-client