Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: LWW6NNyEXP4Q2YanGo74B/ahocVGPNueIO4NAxU2S0c=
Subject key identifier: 48:85:AB:B6:35:C5:FE:CD:8D:83:22:73:1F:A5:C5:1B:EE:14:DF:44
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0194BCE09381FCD7E9C7EDFA4377C6B19C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0286
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: fRivlVwjFLz76X2v8ikiIrKD+su1Au/7tCsXO+Vtt7Y=)
2: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:81:fc:d7:e9:c7:ed:fa:43:77:c6:b1:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=4885abb635c5fecd8d8322731fa5c51bee14df44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:db:02:af:38:f6:82:e1:1d:31:38:13:0b:
2f:18:25:93:bb:99:35:84:72:9c:a9:90:d8:ce:6b:
59:0a:b9:94:b7:ec:6d:bf:a4:bc:eb:92:54:72:84:
68:55:88:f4:ff:18:e7:ef:d4:d5:9b:bd:d9:fd:e4:
fd:5d:66:22:cf:22:49:e4:64:16:1a:5a:7e:a0:52:
b2:0d:d8:f2:c2:5a:26:e8:80:2a:99:ce:f7:3c:ec:
bf:c4:d6:3e:1d:a3:2d:51:6d:02:ed:71:35:91:54:
1f:1c:48:40:cd:01:2f:dc:72:55:c1:b2:35:dd:e2:
6b:f7:fd:0a:de:e5:15:73:78:77:03:f8:8f:4d:bf:
1d:0b:6f:22:84:9d:ee:b8:ee:57:80:25:bd:2a:75:
83:07:40:fe:fc:29:7b:39:3c:7a:d1:95:c5:8a:e3:
9f:b6:d6:42:42:95:ca:59:40:41:33:98:f2:ed:a7:
80:6e:01:f8:60:7a:49:8a:d5:ad:0a:18:92:11:ef:
3c:7a:54:35:ac:26:de:e6:fd:e6:ef:a6:35:03:10:
8a:1b:69:52:05:6f:c9:f5:f9:1e:26:fb:63:7e:13:
94:f8:20:64:bf:cb:ec:e8:34:37:ed:79:92:17:fc:
1f:97:cb:77:65:60:6b:69:bf:4d:31:e8:f5:c4:3f:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:AB:B6:35:C5:FE:CD:8D:83:22:73:1F:A5:C5:1B:EE:14:DF:44
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d1:a2:f7:82:ae:a3:8c:a3:f2:a5:16:21:5f:4d:5c:28:e4:
a4:7d:f3:49:fb:3c:18:1c:d5:da:f5:27:d7:a7:76:34:43:e4:
aa:53:10:56:e8:56:a3:b6:6c:18:8b:92:3e:7b:0a:96:12:c7:
32:a5:e4:54:5d:ca:04:72:97:d6:13:c0:d6:48:5e:ef:96:25:
2a:33:32:ae:56:ac:9f:de:e3:7a:9f:da:70:c8:c7:e1:c3:dd:
08:f1:b1:23:60:15:ae:c4:24:63:d4:e9:49:6b:c8:b9:62:17:
f7:9b:eb:57:cc:77:18:7c:ed:33:f9:3c:e4:69:4b:1c:46:fa:
7e:5a:a7:83:22:bb:0b:c2:68:f4:a0:15:af:de:c4:06:d2:46:
41:b1:cd:de:0f:c9:2e:a2:f5:46:05:41:8a:00:4c:d1:3b:5b:
39:1a:eb:d5:45:99:1f:dd:ee:78:3c:f1:36:5f:ac:d0:34:3e:
09:a6:91:0f:03:4a:7f:51:d7:e9:f8:0f:01:4c:30:18:43:80:
52:c0:52:c9:b0:e7:ba:57:e7:36:cd:dc:64:4a:57:62:6f:c4:
bf:0e:b9:72:62:50:e3:cd:7f:62:d7:fc:52:cd:5c:0f:c5:d5:
a9:84:d1:c6:28:54:96:b5:c1:e2:c1:03:85:77:64:0f:1a:b4:
54:83:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:34 2025 by rpki-client