Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: fvkHFJms+xFaH666EFWWNpO2VHqGkXexvuU6XO+sZoA=
Subject key identifier: 0B:1B:44:31:78:80:CB:C3:67:BB:4E:A8:1D:F4:54:CC:68:61:6C:07
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 0194BD176C2FACEE7FA6DDE8C3AB1FE26696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 4t53igbekCux7oMSXkm2uGkDTRs.roa (hash: JcVC73jSzOeJEsOoBqkgwAslhBdXNKxkO116AmZF308=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: jWCML/PebuKDTq+RrDDYEb/r4PsrdTc/naVHSHuAcos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:2f:ac:ee:7f:a6:dd:e8:c3:ab:1f:e2:66:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=0b1b44317880cbc367bb4ea81df454cc68616c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:2e:f0:c2:c6:0f:9f:21:3b:99:83:e6:cc:
1d:3b:bf:b8:84:61:4a:8c:7f:75:dd:b0:cf:b7:da:
ff:05:ed:fc:18:2a:29:a3:e2:d1:a4:c1:a3:15:31:
82:8d:c5:04:fc:40:62:8d:a1:0a:f3:3e:dc:4a:b3:
f8:32:5a:7f:24:10:f5:5d:75:cf:d6:5c:c2:09:ea:
a0:f5:f6:03:4a:c0:91:f9:db:93:46:d0:1d:fb:c2:
c2:55:55:74:f4:18:06:b1:00:33:d2:a9:4c:df:b2:
ca:03:f8:99:ed:27:1f:ee:aa:2d:5f:50:a0:da:82:
22:73:85:10:fc:cc:fb:51:fe:3d:d6:30:23:d7:07:
c6:ba:e5:98:07:2d:e2:60:19:b9:0e:03:96:5a:cf:
07:07:0b:58:90:92:58:7c:cc:54:5b:93:bc:7c:2c:
8b:b6:6d:7f:5d:58:98:c5:05:c1:b7:6b:39:65:e1:
21:2c:3f:12:b6:b2:66:96:57:ed:be:2e:72:47:4b:
ee:8c:e5:dc:cc:97:44:ee:2e:d2:63:c8:20:ba:d9:
40:53:0e:4c:0c:b0:f2:e9:71:39:53:cc:48:09:39:
37:e4:74:1d:45:39:65:17:36:c3:51:80:ba:a2:34:
5c:c5:43:0c:78:dd:96:44:25:dd:b5:c1:f8:c6:c7:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:44:31:78:80:CB:C3:67:BB:4E:A8:1D:F4:54:CC:68:61:6C:07
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b7:75:06:80:72:91:5f:56:91:04:52:79:5d:8c:40:aa:72:
17:7e:0b:18:58:37:7c:43:b7:8e:21:e7:0f:88:86:47:be:27:
97:99:88:46:0b:10:6a:d2:b3:7c:f1:df:0f:78:aa:1a:28:c3:
7c:59:e3:59:07:9d:9d:09:2f:f7:69:e7:bd:cd:89:30:8c:4e:
49:9e:25:78:da:f9:da:c0:d2:5b:49:3b:00:16:7e:ff:a9:42:
8c:23:ea:3d:19:41:7b:a6:f4:3a:8a:a1:f3:68:df:ce:66:71:
3f:f6:7d:e5:c3:54:b6:c5:3b:e7:db:16:6e:eb:53:5d:30:23:
e3:62:ae:1f:17:96:70:20:4f:22:87:e6:16:4a:b8:d2:3e:a4:
d4:ad:42:f0:de:c9:ed:16:01:dd:47:3e:07:fd:69:a4:95:ab:
b6:61:b3:2a:19:da:64:f7:f4:d3:60:35:3c:4e:8a:d5:3c:af:
96:7d:74:6b:ac:07:99:8e:78:21:b9:f2:b8:36:14:27:21:30:
88:7b:02:d7:f3:31:e5:07:7e:d2:83:2e:3a:73:a7:80:a7:04:
36:b6:38:7c:0f:b9:aa:08:26:69:bd:e1:f2:33:a8:e8:b4:31:
86:d0:14:54:b6:9b:4c:66:d0:9e:8d:7e:2b:93:59:80:1f:89:
a4:07:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:39 2025 by rpki-client