Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: c2WNl7RGOqrye9DNQhOg5F/XLOXmcB2nqkdUGrGq3MY=
Subject key identifier: 84:0B:BE:DE:5C:C0:DC:A9:85:83:26:B0:BA:42:08:56:D2:D0:AE:9D
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0194BC72FAFFA14E916EEF5C49CCB25F2B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0C96
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: aO7/B0OujtFZqCu0wHHqIGgp1uluijOnbpA2JNN0ZVw=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:ff:a1:4e:91:6e:ef:5c:49:cc:b2:5f:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=840bbede5cc0dca9858326b0ba420856d2d0ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:57:08:6e:40:b3:0b:c1:49:80:d4:fa:f0:
75:ff:8c:14:0b:b8:a7:aa:72:86:8e:97:11:1e:8f:
b1:e1:5a:9d:d9:7b:34:84:12:63:5d:2d:55:75:b5:
67:4c:66:17:5c:5a:a1:e2:5e:20:16:1e:02:de:ef:
ca:52:a8:e7:7f:2c:88:55:74:7d:5d:45:3d:ce:18:
ac:57:62:e3:31:0f:86:61:ea:4f:d8:f2:9d:99:cf:
b7:61:98:ad:09:52:74:05:bb:f2:86:f4:35:b8:83:
ce:8c:57:d3:05:e1:d2:60:ed:fa:a1:83:63:73:e6:
bc:d7:8a:6a:e3:6c:c3:45:65:d1:63:0c:b6:f5:00:
fd:81:a9:a9:c6:69:65:75:fb:69:02:ef:44:ec:de:
12:9e:fa:12:64:fb:2e:00:a1:1d:ca:2d:64:1e:de:
bf:58:03:41:46:19:cb:6f:a5:7d:10:e2:cf:59:07:
0d:bf:c4:52:15:6d:03:07:1c:c3:94:8b:da:6f:45:
0b:fe:c3:90:ce:55:89:3e:6e:4f:1b:0d:d7:a9:c3:
84:f1:dd:63:c8:b2:05:24:e6:76:29:ad:3c:30:8b:
be:92:0f:fc:27:44:a8:d9:c7:2f:47:ae:25:00:57:
05:13:2e:2e:7b:60:3d:2b:57:cf:ed:9e:02:5e:c0:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:BE:DE:5C:C0:DC:A9:85:83:26:B0:BA:42:08:56:D2:D0:AE:9D
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2b:13:94:26:f1:24:bc:dd:00:d6:a9:15:b6:72:7b:06:bc:
a4:3d:c3:40:c3:93:04:6e:13:36:a8:4f:ef:37:57:fd:8b:3d:
11:62:9e:0a:36:9f:fa:04:9d:51:7b:13:49:e1:25:de:a6:c6:
90:43:22:64:c9:aa:77:34:46:28:75:e9:72:fe:49:8e:d5:58:
c6:9e:e5:35:df:9a:28:03:03:5d:69:2f:d4:4e:76:0e:ef:f6:
fb:a2:23:ee:80:b3:b6:1c:a8:3a:c1:44:24:52:9e:f5:74:eb:
69:41:cc:09:4c:74:57:73:f2:01:2a:c8:53:ff:86:49:75:62:
bb:c0:62:9d:06:b0:82:a9:49:a0:f7:31:77:d5:3c:8a:d6:77:
0c:43:10:f7:fe:2b:85:d1:18:2d:3a:e7:76:0f:42:ed:a9:53:
5f:bb:d5:29:36:75:22:01:28:e4:a1:aa:82:8f:51:f4:fe:fb:
58:31:e5:3a:c1:4d:5d:c5:25:d1:93:3a:6d:ec:ee:a9:a8:18:
c9:1a:bf:60:fd:94:b6:84:f4:c7:9c:17:1c:b9:e4:c1:e3:d1:
d9:de:70:af:ac:2f:f5:1a:46:48:b9:3f:96:c9:42:7f:01:e4:
b8:37:90:93:20:0c:fc:25:91:de:32:f3:26:05:ff:a3:ee:c3:
d8:3b:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client