Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: 7Pbj7TiobD1wkSxhJkWh8DrdONooFpRs+LL4R7CbOnE=
Subject key identifier: A7:56:1B:0A:7A:A5:5C:B3:B3:33:69:3C:3A:CC:E0:48:C1:B2:AC:5D
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 0194BC04C2435A7402C28A2088B46E73E098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: Sq70yLnbV1MVeazpj0ggOgquegF9h4OksytCbOkPfng=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c2:43:5a:74:02:c2:8a:20:88:b4:6e:73:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=a7561b0a7aa55cb3b333693c3acce048c1b2ac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:92:6a:83:e1:5b:39:1b:21:03:ef:30:23:
bf:91:a7:d0:2f:48:b6:35:d5:92:55:0a:50:2e:3f:
13:f9:65:d0:a0:93:e3:d2:fd:2d:4b:2a:f0:d4:1e:
80:05:d0:9d:a8:11:6d:cd:b9:47:73:1a:47:6a:f0:
17:dd:cd:21:6c:44:e5:c3:d4:37:b8:eb:b7:ac:4c:
0e:13:05:4f:fa:7c:37:ee:f9:37:d6:fb:c9:98:75:
1e:f6:cc:57:78:45:b0:e1:94:5b:68:7e:5c:c4:1b:
06:39:71:3e:66:56:a2:8f:75:9d:d6:f4:bd:a1:22:
d0:21:36:ca:e7:6d:f5:fd:b7:df:0b:94:35:2e:e2:
0c:41:b0:7a:e2:09:fb:31:82:ad:dc:ec:3b:0f:86:
09:58:73:9a:a2:9c:63:47:7f:04:36:37:ea:a5:69:
41:c2:5f:e7:a2:86:c2:4b:6b:1a:a6:22:a6:8f:7e:
a3:8b:cd:62:ed:7b:03:6f:02:b1:15:e3:af:13:b4:
7f:7c:45:cd:f7:56:10:35:bb:4c:74:d4:a3:3f:85:
72:d2:a6:21:00:3d:3f:c9:62:c4:ff:14:83:5e:2a:
6c:ce:75:19:5a:c9:68:5c:be:ba:b1:83:3f:9f:46:
ba:18:c7:9f:a9:0e:bc:58:4a:8a:87:b7:f2:a8:b1:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:1B:0A:7A:A5:5C:B3:B3:33:69:3C:3A:CC:E0:48:C1:B2:AC:5D
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:25:aa:61:71:f2:68:99:96:81:2e:b7:e3:89:be:5f:e3:
92:46:85:37:4e:7c:fe:70:34:1d:74:5f:3c:2c:ee:ab:92:a9:
01:92:40:10:12:d0:e0:40:c2:32:a6:b6:ea:28:26:fb:ae:57:
6d:c0:92:9c:6f:36:74:42:8e:3d:f5:42:66:09:71:9b:b3:eb:
4a:d6:5c:4f:d9:dc:41:1f:b3:be:c6:31:60:de:a0:27:0f:ae:
37:68:ba:52:59:dc:16:18:ab:c9:bf:08:74:c9:59:96:9a:4e:
af:c4:10:76:2f:cf:1d:2a:85:b6:43:ff:35:69:8d:9a:0c:58:
3a:17:de:f8:fc:67:75:2b:c4:24:49:06:99:e9:a7:4e:ec:5d:
58:6c:0b:28:39:93:01:3a:ef:dd:3f:81:ec:6a:c7:54:53:0e:
ba:5f:9b:d5:62:71:c4:df:d0:aa:59:74:5d:17:21:d8:03:24:
cf:43:d0:27:a7:b7:64:2a:3e:9d:ab:11:35:e4:59:b4:7f:d0:
b3:57:f9:d7:72:c4:e9:dc:c3:5e:f7:4d:bd:7f:23:1b:50:ee:
36:e0:9a:c5:15:26:99:f3:91:6b:9f:ad:46:e7:6e:83:ee:0e:
86:41:f7:fa:cb:69:c1:ee:ba:bd:0b:fa:a3:ab:3d:8d:93:69:
f6:70:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:33 2025 by rpki-client