Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: ulrBGdNQNg7f1W4+e9r0AWzc8KamCDX/MgLrHZQ+Moo=
Subject key identifier: 88:4E:B0:F5:54:8F:B0:62:EE:50:51:17:57:FD:F1:01:99:B1:4E:F0
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0194BBCDEBF6D51DFF33BE119F51E2EB2A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0ACF
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: z+lzQkxzUhDQSxolItYSEdApfygbev9WzuuahLh1ptM=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:f6:d5:1d:ff:33:be:11:9f:51:e2:eb:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=884eb0f5548fb062ee50511757fdf10199b14ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:8f:54:f4:87:ea:86:0c:b1:51:1a:7c:52:
69:4c:82:5e:ad:2a:ef:58:92:6b:18:ec:dd:e2:3f:
a4:4f:8d:11:d8:91:5b:15:29:d4:4f:72:62:71:51:
7c:75:4f:2a:d9:d1:80:d2:53:9d:79:c1:3e:bf:12:
24:18:1c:7c:09:18:4e:6c:d4:38:cc:c0:a9:b5:f2:
fe:23:5c:94:b0:3a:29:a6:bc:2d:82:a2:f4:28:49:
22:fb:81:ea:06:55:44:a5:a4:b1:8e:5a:c4:69:e2:
f8:74:30:e8:91:68:a1:0f:5c:ef:3a:09:88:67:e9:
07:52:82:d1:5a:08:9f:1f:3a:75:2e:cf:4c:26:7e:
6f:2b:89:0d:b2:2f:1f:4f:ea:fb:52:aa:8e:8b:97:
70:95:be:49:2e:54:2d:75:e7:56:a2:45:08:4a:3c:
d5:56:03:cd:49:14:ae:5d:70:ae:01:4b:88:a7:b1:
73:08:21:67:0f:db:12:98:01:c3:ce:4f:33:a7:51:
52:e8:9b:ce:21:10:06:df:1e:1d:e2:80:e7:74:28:
0f:27:88:85:65:23:c4:64:f7:53:cd:cc:56:57:bd:
a8:40:ee:ef:7f:ce:bf:ee:2f:26:a1:b5:43:e1:0e:
9c:97:a9:e2:11:30:2a:16:c3:f6:f6:bc:bc:d7:8a:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:B0:F5:54:8F:B0:62:EE:50:51:17:57:FD:F1:01:99:B1:4E:F0
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:34:f4:70:65:64:b7:75:84:3a:5b:8e:8e:50:be:b6:c4:
ba:f7:bc:65:6b:e3:75:b8:11:6e:e1:f0:b3:81:bc:83:bc:4d:
42:e7:22:a3:11:a6:04:a3:47:53:a4:42:94:80:a9:ba:46:95:
24:21:8d:a6:6c:9b:e1:10:32:83:e9:25:a6:cf:c5:59:aa:77:
7d:48:60:f1:d9:f7:ae:b9:36:1f:f3:ba:8b:ac:09:7c:ee:fb:
6a:ca:84:3c:dc:68:7d:dc:e4:99:ec:d1:cf:4e:15:97:51:14:
20:55:6d:31:37:35:1d:79:22:7f:50:86:c1:e1:40:9e:3b:06:
06:b4:98:e3:d5:a5:28:33:11:d9:96:aa:25:0c:e3:b9:66:12:
0e:f1:d8:0d:c2:54:99:c6:b2:82:60:60:c3:d2:17:b1:eb:c1:
09:2a:ce:3e:83:ac:04:14:2c:2e:10:e3:2b:8b:63:2b:ca:10:
7e:15:14:93:6a:8c:c3:d4:4b:0c:c5:64:b8:20:41:7a:4b:31:
d1:78:73:db:c7:be:a2:27:31:6f:87:30:f7:f3:eb:9d:5e:c5:
8e:e0:82:28:5f:ce:93:3c:d9:9b:f6:e9:a1:a1:a5:0b:0a:43:
e1:dd:35:25:b5:6e:e5:de:ef:66:7e:fe:c9:87:1b:d6:86:de:
e7:e3:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:06 2025 by rpki-client