Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: TCa4RAXowimQHMKhRyYVnmK1xA9tuRVIPcDq0MRCUg0=
Subject key identifier: 96:C6:B2:DF:6A:AF:EE:38:7C:66:36:D8:9C:84:8D:9A:BD:D2:FE:5E
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0194BD4E39E31D8E833C12770B24DAA7160A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: IPhttBRLfwEvgZc32YBQi3iQGsIu3x4QInwrZQ72YOg=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:e3:1d:8e:83:3c:12:77:0b:24:da:a7:16:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=96c6b2df6aafee387c6636d89c848d9abdd2fe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:5b:66:3e:2e:c5:0d:d6:6e:7e:ac:db:bd:
55:1f:81:0a:03:20:70:21:67:71:f5:b8:29:70:60:
1b:b3:73:0b:60:39:7b:eb:6d:f3:f9:df:0d:3a:33:
0a:d1:bb:03:6c:14:2c:b1:bc:28:c9:0e:87:f6:74:
9f:af:8a:d7:ce:a3:72:c8:84:40:ba:6c:d5:87:d1:
a3:f5:f1:14:d0:0e:b5:c3:bd:5b:de:38:ff:10:78:
18:f6:f0:cf:47:7b:3f:ab:63:10:ab:9c:3e:cb:7d:
75:7c:9e:79:bf:21:6e:4e:59:9d:b8:1a:d1:d4:08:
8e:1a:89:a2:6e:d8:e9:68:c2:63:a5:d1:76:7e:db:
cc:d8:28:7a:cb:2d:fc:0a:57:fa:36:d3:42:32:ea:
7a:cb:93:ac:80:df:aa:97:7e:e6:d6:d1:04:54:8d:
88:9b:71:b5:25:b0:2f:1b:6f:87:0d:72:e5:fd:36:
8e:6d:5f:90:31:57:ae:d4:83:55:fe:f7:cf:0b:92:
87:d0:a1:ce:3e:ac:df:32:90:44:94:d0:e7:5f:9d:
b5:09:02:38:68:9a:1a:a5:a7:6f:ea:70:00:2b:83:
ec:00:1c:bf:39:34:9b:64:98:4b:8b:7e:00:3a:c3:
b1:2f:f3:e6:3b:1d:24:04:71:9b:87:85:0d:b1:18:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:B2:DF:6A:AF:EE:38:7C:66:36:D8:9C:84:8D:9A:BD:D2:FE:5E
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ce:83:99:0e:ab:e3:d3:b1:d6:13:45:50:42:5f:ff:61:2f:
e6:bc:34:6b:94:cb:fe:ea:91:3c:df:99:8d:13:bc:54:45:71:
fe:d1:96:0a:a5:ad:fc:c4:45:f3:d2:b1:61:54:83:7a:f0:42:
8b:59:54:88:70:70:c5:2c:26:24:37:30:6e:0c:67:5d:fc:be:
e7:dc:07:43:85:e2:48:66:0d:68:1a:b8:35:4a:0a:77:02:90:
36:35:1c:f1:8a:c6:87:6a:fd:27:84:95:37:56:30:f5:f5:55:
ab:07:4d:ae:71:f9:05:b3:12:bf:43:d1:9c:08:f9:4f:43:05:
44:0c:9e:55:47:b8:15:02:33:66:46:c2:cf:8d:03:63:25:96:
3a:97:93:09:44:fc:42:28:75:39:15:02:4b:1c:79:00:3d:1b:
d1:ec:e8:63:d2:fb:5d:6a:35:4d:d6:dc:f0:e1:f0:d2:a9:12:
f9:e0:84:d0:69:c5:18:e6:c9:b1:8a:ff:5d:b2:34:30:d1:11:
6f:7d:7a:01:9f:a3:4a:78:f7:d0:e5:4f:d6:de:ed:02:8a:0a:
78:1f:05:86:92:ff:f1:dc:26:39:41:70:5b:bb:6c:fb:82:cc:
b3:45:29:02:63:9a:0b:b1:52:29:2e:25:e9:b6:36:4d:7b:67:
96:98:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:40 2025 by rpki-client