Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft
File: otP5vJZWutwm594auw-nLD1yjdg.mft (raw, json)
Hash identifier: FnewxSzPAzVvoPnvsfna2DNaeoXdvJGyYPZXV+Iwsug=
Subject key identifier: E5:37:AC:38:F5:C3:5B:6B:B6:75:38:A4:C2:F8:9C:90:79:5C:DA:76
Authority key identifier: A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8
Certificate issuer: /CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8
Certificate serial: 0194BC3BD8B4B6035EE9B3C1383EBCC068C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft
Manifest number: 8F
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: otP5vJZWutwm594auw-nLD1yjdg.crl (hash: eUfFCFYjgOTvVFuNmY4wXA0+HR22HtcKHm+1jZHW93Y=)
2: yntKueGdh_gRYfTjbFRGz4s6BD8.roa (hash: 8wVmYZSgIm0dCsPvd2oqoO7MS+FukiT5t5Ke1EaX2FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:b4:b6:03:5e:e9:b3:c1:38:3e:bc:c0:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=e537ac38f5c35b6bb67538a4c2f89c90795cda76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:c2:97:92:0a:96:b7:4e:8b:91:e4:3b:e1:
02:9c:3f:cc:24:aa:82:cd:f0:f3:5b:5b:26:d6:e2:
a0:bb:d0:ea:fd:1b:84:3b:36:f5:02:76:72:e1:3b:
5c:ec:b3:4e:9b:86:fb:4c:a4:3f:6e:49:bf:e6:d0:
ba:f7:f1:ad:1d:9f:fb:f2:09:10:33:32:71:74:14:
ed:4e:e9:aa:9f:dd:c4:79:d1:4b:38:74:37:52:b2:
9c:b4:f5:18:22:f7:da:fa:15:05:b0:68:cf:98:3d:
4c:67:52:3e:c7:df:35:35:0c:f7:8c:a2:2e:2e:f2:
4a:eb:d6:15:fc:34:12:43:19:72:2c:d5:b3:1c:d7:
3e:93:7d:be:f2:7e:7a:9c:d6:fa:2d:23:ba:10:51:
7a:33:87:ed:dc:8f:80:d5:95:83:14:fe:70:72:d6:
ee:20:7b:c6:5a:fb:6a:25:89:bb:dc:ed:22:33:36:
a8:0a:15:80:a1:91:28:a7:7d:bf:21:3b:d6:82:d1:
e8:07:9e:f8:13:e5:bc:8b:93:4b:e1:03:d5:73:c3:
46:35:61:6e:74:1c:68:94:c8:87:80:71:1e:5c:33:
d0:3b:d7:1d:fe:b2:12:b3:92:2a:a0:9d:62:cc:4c:
a5:5e:c6:37:0a:5a:89:6c:21:cb:1d:af:26:85:b8:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:AC:38:F5:C3:5B:6B:B6:75:38:A4:C2:F8:9C:90:79:5C:DA:76
X509v3 Authority Key Identifier:
keyid:A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:24:9c:a6:04:37:ce:51:c7:18:af:e9:e2:37:d1:28:73:
6e:8e:7c:b3:c3:95:48:25:05:f0:f7:bf:01:7a:56:47:c6:07:
9c:0b:2b:06:82:da:4d:2c:41:48:7e:0f:f6:61:ca:93:2a:f1:
23:fe:61:4e:51:cd:30:7e:da:18:a5:ad:f4:43:e4:9e:c2:48:
72:47:fe:09:03:1e:5e:61:4d:6f:18:b7:63:f5:b0:94:18:9c:
4b:af:4a:70:9f:3b:70:06:ea:75:b0:ad:1b:7f:f0:ba:72:73:
95:c3:ad:a5:b9:cf:5d:af:80:a7:db:29:2d:4d:eb:98:12:43:
cd:e0:a9:8d:e0:a1:39:c1:bc:20:ff:6e:96:7b:23:14:7f:50:
b7:5a:e0:ef:8c:27:4d:97:14:99:15:b9:cf:4f:f3:fb:6e:84:
6b:d0:b3:d5:9b:ab:c5:1b:6d:81:5c:e2:0b:b2:35:36:63:b6:
f7:d9:be:e2:45:18:d8:1c:35:ba:f3:be:26:2f:8f:1b:d5:a0:
3d:d2:35:aa:78:00:c5:b5:05:cf:cf:76:97:22:c0:ba:7f:57:
3a:b6:6b:65:d4:7f:a4:f1:62:7f:fa:32:a3:84:68:24:c1:d3:
24:dc:d0:fc:62:0a:b7:8d:0c:ac:ed:d0:a4:df:7a:eb:97:9f:
34:82:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:33 2025 by rpki-client