Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: BVHYRbYBBxvdTqdRh3ktIShnOs2FrROl9xlGCQOPphY=
Subject key identifier: 2D:E9:A0:5C:3C:89:2C:BB:1E:AB:59:6A:7C:AB:9A:6D:A3:00:23:0A
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 0194BC72F9AC41DECDDF4CAE10AC84E987AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: NvSWktzbLauv/lyjdBkH7nktk7zwM2hSQT21WaGBBV8=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:ac:41:de:cd:df:4c:ae:10:ac:84:e9:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=2de9a05c3c892cbb1eab596a7cab9a6da300230a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:0a:25:6b:d1:17:0a:53:87:3b:22:d0:70:
36:c4:7c:ad:92:a4:ec:16:e3:36:b7:e6:c0:c0:4f:
06:8f:2f:4a:69:92:d7:0c:7b:c4:7d:17:e7:e0:d0:
eb:0f:6d:85:1d:e6:96:f2:ac:f3:a7:70:76:5a:70:
ce:94:74:47:5a:97:37:9b:da:ab:2a:47:04:4b:0f:
c7:41:e0:18:94:ab:d4:4f:57:4a:14:db:57:c1:2d:
a0:f1:6c:c7:bf:ee:6d:21:eb:15:cc:e6:c2:b7:b7:
21:31:db:de:67:fb:a3:ed:0c:82:ff:da:d3:43:61:
e3:a1:18:6e:2e:b7:e0:16:1e:36:e4:ed:08:25:73:
79:f3:26:45:bf:e5:9c:c6:52:4a:a6:b5:6c:09:66:
7c:2c:8a:76:1a:4c:7d:b7:dc:65:38:53:01:01:00:
fc:36:08:a8:65:8b:80:2e:cf:de:5c:e7:f0:2b:1e:
82:50:bd:b0:8a:8a:8e:6f:13:79:bc:c0:f2:24:6c:
1d:ab:20:7d:db:b4:52:b1:7b:26:be:df:94:2f:ba:
a5:f6:07:d5:81:62:28:59:9b:fb:7c:68:5d:55:0d:
b4:44:3f:6f:81:2d:45:6c:62:23:71:e8:ac:6f:02:
7d:f8:7b:02:92:10:81:a5:13:dc:e1:3c:c9:b2:93:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:A0:5C:3C:89:2C:BB:1E:AB:59:6A:7C:AB:9A:6D:A3:00:23:0A
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:0d:c3:2f:fa:86:ac:f6:6f:5f:44:c0:a4:af:95:c5:9f:
36:c2:ed:b3:c7:9c:e0:a3:cd:fa:34:4b:29:b7:1c:bd:29:d9:
0b:ed:2a:dc:87:15:77:2f:9b:92:a0:f2:75:1d:49:1a:0f:0f:
73:aa:c9:2d:52:6e:7f:fb:26:4c:a6:46:e7:77:3a:20:69:81:
29:e7:1c:e7:1c:76:fd:e2:e5:84:0f:9e:47:18:b1:50:e4:94:
49:56:45:99:70:f6:d8:8c:3e:40:5b:70:64:b4:01:c5:09:58:
2b:b8:d3:f5:de:f6:53:44:fb:51:69:91:22:55:41:75:b0:0f:
b3:dc:b9:a7:75:83:2a:4b:75:bf:ad:05:8c:6a:4e:39:63:a9:
6b:dd:7f:d0:54:0b:f3:0f:24:04:fc:20:6f:9f:92:00:04:f5:
20:57:ed:e4:32:02:c8:39:24:d6:d4:6b:a5:cb:57:9c:be:6c:
05:32:3a:d0:18:22:86:27:e5:54:cb:00:d5:e7:14:39:c0:4a:
f9:17:9f:fb:36:7c:17:45:06:5a:d8:18:7e:10:8a:c7:60:1a:
82:aa:8a:82:5c:12:e0:81:b1:27:6f:70:3a:bc:f3:a1:32:8a:
81:9b:fc:c5:31:c6:a8:6c:c4:4a:82:5d:f2:f7:4f:a6:32:fa:
e5:61:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:19 2025 by rpki-client