Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: gPHJ0mj4DEtO7BgqDjhhVRx7jVruE2do0oQvj9Jp/t8=
Subject key identifier: 9A:F5:5A:FD:37:92:29:AA:87:9F:80:11:2B:CA:8A:11:19:BA:72:DA
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 0194BCA96EEB5532D2FD01349CD8380B5C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: HI9PccYPb8czbWwFMrd/1loqJSFMhKfxD27p5vXs3vw=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6e:eb:55:32:d2:fd:01:34:9c:d8:38:0b:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=9af55afd379229aa879f80112bca8a1119ba72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:fc:33:d5:e1:3d:85:80:3c:bd:96:1c:4d:
ef:43:b2:8c:bd:19:a1:8b:64:3a:5b:f6:b4:dd:e9:
dc:0d:a5:50:1a:39:8c:ae:02:ab:98:d6:dc:38:1c:
30:98:10:c1:22:d2:8f:c4:01:5c:b3:e1:e7:f7:c5:
5a:57:d5:4d:2f:5f:01:ff:69:99:46:1b:eb:91:fe:
b8:47:9f:8f:c3:7e:94:a7:f8:6a:aa:d3:e1:34:d7:
5e:f6:c1:1f:38:47:8b:64:de:05:72:eb:b2:4c:d8:
18:41:a1:d2:68:97:ae:a5:42:db:0c:be:87:15:91:
e9:49:2b:e5:e5:81:fa:20:64:d4:fa:73:ff:81:24:
d9:26:d5:a6:0e:7e:7c:ed:fd:80:ee:94:97:bb:ed:
91:e0:35:b3:c5:10:ed:cd:ca:31:cf:3c:0c:a0:5f:
b7:98:93:29:55:8e:d4:6b:cf:11:36:eb:ee:7c:44:
55:67:9f:b4:76:e4:cf:95:28:75:b5:f0:7a:e1:e1:
da:fc:d8:0b:6f:8e:48:92:be:a2:34:23:19:dd:f2:
a6:47:f7:ca:06:fa:11:ae:42:38:35:98:b2:bc:ad:
83:59:87:14:49:5f:4d:04:70:e5:18:f3:27:b1:d6:
8f:88:73:a0:f7:ef:49:bb:3d:45:cd:7e:82:38:08:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:5A:FD:37:92:29:AA:87:9F:80:11:2B:CA:8A:11:19:BA:72:DA
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:af:98:97:b9:8e:73:da:6c:5a:23:86:88:70:88:7c:a6:
2b:3c:bc:97:5f:6b:b8:05:14:e5:31:3c:1e:23:6f:b5:7c:1a:
60:16:a4:22:ff:74:f7:0d:99:05:5e:f9:36:41:ee:3e:b1:74:
f0:79:b7:79:1e:3b:c9:c2:5e:5b:ea:f4:50:ba:7c:b3:12:9d:
9e:8f:92:0b:5b:80:14:71:bb:bd:5f:50:02:87:eb:c2:a3:94:
cb:0c:d7:30:1f:61:d9:ce:64:e3:d0:39:e3:50:18:58:28:19:
81:5f:13:65:a3:6e:3a:61:d1:e3:17:7f:cf:1b:a6:5e:73:3e:
83:4f:45:60:45:03:71:37:60:a7:be:fc:9e:71:1e:dd:54:15:
89:d4:e0:38:cc:95:23:a6:60:66:d8:38:8b:39:34:ad:28:c7:
31:db:44:c0:0c:18:ce:5b:67:29:c8:01:8c:2c:71:93:d6:ce:
e5:97:8d:4c:d0:25:de:b5:62:6f:ac:3a:9f:9a:eb:49:6e:ae:
85:5e:9a:3b:82:ab:7e:f5:50:dd:3e:81:10:98:ff:eb:7a:4f:
dc:a9:20:6e:e0:bb:fd:b6:48:17:5d:8a:1f:f2:8b:1e:4f:31:
b2:e8:02:ee:98:b3:d3:f7:30:e8:28:3c:a3:a6:91:b0:33:83:
71:f2:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:29 2025 by rpki-client