Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: lYpbondtf6Hlm1ifg9zn+H6gx1sJURDrFaHcgUuetq0=
Subject key identifier: D5:E8:94:15:15:48:70:80:BD:F0:91:88:80:6D:B4:D7:4A:DC:00:08
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0194BD175264CA64DC64F233D60F8381303D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: kX1w8yZDYk/NHLTSCX7aRIhFqZxH9wuwvbPPtuv9wD4=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:64:ca:64:dc:64:f2:33:d6:0f:83:81:30:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=d5e8941515487080bdf09188806db4d74adc0008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:b9:ed:bb:ec:fc:e8:03:96:99:23:f0:f3:
e5:61:61:db:0f:1b:46:ac:fe:7c:2f:ed:04:e6:b3:
ec:e5:9e:1f:92:f0:79:27:79:55:52:ca:95:a7:c7:
25:bf:f6:02:3c:06:d7:0b:3a:f1:02:3d:a4:1f:a8:
93:66:4d:8d:40:0c:bf:c8:0c:e3:3e:77:2c:d9:3d:
94:ef:e5:86:10:43:86:56:3d:3a:1b:01:fd:fb:fb:
a5:4f:d2:44:62:06:12:34:4d:40:1e:27:ce:b5:96:
96:a9:62:11:2c:6e:d6:5d:91:f1:8b:82:2b:26:e4:
fc:de:c8:bc:49:c2:37:f9:98:ad:71:65:0f:cd:d8:
d7:be:70:d8:8e:5f:6f:89:6f:9f:64:d7:2e:54:50:
7e:a3:75:ec:bb:d0:f1:9e:32:3d:05:bc:9d:64:97:
ac:64:73:b9:71:9f:d1:d8:d1:79:08:27:98:55:d6:
f0:25:12:5b:14:0c:1a:2c:94:09:43:f4:f8:1a:1c:
9f:e0:e3:c8:4e:af:2f:78:97:29:2d:86:e0:72:87:
e2:cd:d0:ab:75:0b:d0:67:35:27:00:89:60:38:12:
4f:a2:f6:b6:72:5b:26:c9:40:ce:d7:df:25:78:45:
ac:6d:b5:43:bf:a8:2d:9c:8b:b9:8f:02:39:c6:57:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:94:15:15:48:70:80:BD:F0:91:88:80:6D:B4:D7:4A:DC:00:08
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:85:71:b1:0f:05:2f:f8:0d:37:05:c6:0c:bb:a5:f0:ba:
32:4f:3a:09:12:a0:1b:6e:76:01:9e:14:1a:d0:c7:1b:f3:22:
79:af:6b:98:a8:61:31:23:06:5e:ad:ec:8d:3f:25:02:6a:ec:
ab:48:bc:66:0e:ac:2f:ad:e0:cb:11:7c:d6:d4:2c:7a:45:ef:
3a:57:88:05:be:5a:01:54:9e:b0:5a:eb:03:30:43:dc:76:c4:
f9:c1:08:40:33:4d:93:5e:97:b4:87:63:14:7d:7e:d5:fe:23:
7b:92:c2:75:83:99:63:ea:01:5e:b0:94:95:b4:65:1b:4a:4f:
6f:2d:7f:dd:80:84:85:62:20:5e:99:dd:aa:d1:9d:78:6e:3b:
df:7f:eb:fa:f0:3b:09:15:26:f3:01:e4:51:8a:67:dd:60:1a:
fa:4c:cb:44:fc:0b:e3:e3:c7:89:b6:4e:de:f1:cc:ea:a5:98:
7a:65:05:45:06:1a:2b:b0:46:0f:26:ab:8e:c9:b7:3a:57:93:
c0:fc:03:ef:7d:de:69:50:0c:f5:68:32:d6:11:f7:2a:8e:9e:
0f:2a:7d:6a:c6:03:81:09:81:bc:5b:ec:22:b1:a8:c2:6e:a3:
7a:3e:19:13:40:65:a2:e4:08:9f:f7:d0:d0:01:28:ae:6e:aa:
1d:27:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:09 2025 by rpki-client