Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: aJqcBuKy5FwAXPu8eGB/h4bkfYywk6ZnhLA0LUio0wE=
Subject key identifier: F3:B8:9B:F7:55:F6:5D:B7:AD:7D:8C:5E:A2:28:48:76:23:D1:89:A4
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 0194BBCE8C072A5EC2BBC2AF7CF936411ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: 6YVC0aoWRdtkI6lO0ekOTA+TQP/Iyhb51UPKnOpVxog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:07:2a:5e:c2:bb:c2:af:7c:f9:36:41:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=f3b89bf755f65db7ad7d8c5ea228487623d189a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:41:dc:61:79:14:8c:ae:b9:42:2e:a6:f1:
41:5e:1d:c5:c2:bd:c9:4c:37:34:fc:62:1c:8e:f5:
c8:b5:a0:37:ab:dc:90:d9:9d:d3:be:ac:50:b9:f9:
ea:49:c8:7e:fa:1f:89:b3:b3:96:a6:53:c3:bc:aa:
cc:59:8c:fb:c3:e3:ad:d3:84:55:46:70:29:04:06:
a0:a3:a1:b8:dd:1c:12:6d:84:52:99:d2:42:3e:4b:
76:fd:4f:98:7e:ef:af:fe:8e:73:7d:ee:cc:c9:f5:
4f:d2:9f:5e:65:d6:5d:00:3e:8b:e8:38:67:09:f2:
05:a1:30:6c:92:2e:1b:84:f8:06:d5:56:51:3d:f7:
f6:b3:39:9d:a6:ad:95:c6:83:ff:ea:df:d0:75:c3:
00:a8:c4:58:d6:70:c9:1c:48:d9:4e:69:ac:cc:fc:
ff:29:9c:76:5b:2f:2f:bc:19:aa:d5:fc:8b:bb:82:
9d:ad:6d:ff:fb:f6:26:64:30:68:6b:56:1b:8f:16:
49:ff:9b:cb:78:f3:d7:0f:ef:c0:d1:5c:75:c4:7f:
a4:31:cf:f7:29:c9:4b:1a:18:d6:dd:07:bf:c0:57:
f9:c3:4c:9a:6e:f2:16:a0:0c:55:4f:3d:6b:5b:aa:
dd:d7:b3:53:ec:33:a9:1f:42:91:cb:5c:d1:ed:32:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:9B:F7:55:F6:5D:B7:AD:7D:8C:5E:A2:28:48:76:23:D1:89:A4
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:d2:55:7d:90:c6:57:a1:5d:7c:4e:fe:12:bb:84:d4:bd:
90:8d:90:89:bd:29:a9:03:a4:66:66:21:f9:4d:a6:a0:77:a9:
68:4c:86:3e:88:c1:95:8f:51:6f:b8:16:7b:67:d6:e7:84:57:
71:b5:a8:c5:0e:69:8c:2c:42:56:74:5f:0c:68:87:98:a7:49:
28:fb:2f:2a:ba:7a:2a:ce:89:07:01:1d:06:ff:57:a3:ed:58:
77:c0:8c:14:4d:c5:a7:9c:7d:2f:96:3e:c2:1e:ea:de:b5:9d:
e6:a3:d9:62:85:aa:92:f5:1f:de:6f:67:6e:79:dc:b8:a4:ed:
ff:4b:98:60:42:f3:75:71:26:07:17:95:b8:93:6f:60:d4:27:
67:82:52:83:ec:d8:a1:9d:66:b7:aa:5f:1f:a7:24:d1:58:ce:
3f:67:e2:91:08:5f:e8:1c:63:c7:04:99:fc:d1:53:3e:7a:d7:
fc:a4:e3:05:15:35:53:f3:50:a5:a2:34:2a:a4:da:e9:cb:19:
8d:26:26:6f:72:c5:d0:44:54:7d:4b:6a:e9:57:24:12:a7:f1:
d5:53:54:a7:4e:9f:42:04:3c:f7:d5:7c:d3:99:3e:07:b0:87:
7c:86:fd:13:44:90:d2:dc:2b:a2:4a:b3:06:02:0b:9a:ff:55:
0c:54:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client