Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: 9giT/civ6sfDJUaMMez2pTfbnW5epcq6Qq8fFAFnOok=
Subject key identifier: EB:F3:C6:9F:C2:C8:E4:62:65:E8:38:F1:28:D2:CB:B8:FB:0D:CB:2A
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 0194BC04F2CE2982618FE963BA3C96E99BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 7A
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: L0vJIdk++YSE5xKqb+kZ+qnT0KWOHbWgKfNYfr6t1xc=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:ce:29:82:61:8f:e9:63:ba:3c:96:e9:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=ebf3c69fc2c8e46265e838f128d2cbb8fb0dcb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:a0:5a:d4:6b:f6:2b:6c:95:40:4f:38:30:
2e:8d:39:e7:11:ac:ff:42:de:af:07:c2:1e:6b:6e:
7e:dd:d2:db:75:9d:19:81:0b:74:92:d6:79:96:09:
14:36:d4:18:80:9a:91:d5:b0:06:36:8d:87:23:33:
a2:cf:a8:3f:58:90:56:16:bb:f5:aa:33:27:d3:ec:
d9:5f:77:4f:87:6b:4d:23:59:21:23:21:5a:18:49:
8f:31:f1:4f:f5:a9:b8:00:4a:50:87:5b:84:35:2d:
1f:15:e6:ff:7e:5f:45:11:4f:55:82:75:e2:e9:c8:
30:c0:a8:48:61:c0:c6:a1:4e:63:8e:d6:a6:23:a4:
1f:ca:b1:89:81:84:0b:c5:2a:80:75:3b:42:15:e3:
69:05:34:72:03:ac:83:71:60:e1:94:14:ac:b5:ad:
e7:5d:3c:b1:2a:ca:ee:44:46:98:bb:57:4e:8b:ae:
12:9f:e4:3b:01:65:76:61:48:57:76:28:9b:36:85:
42:14:a9:84:a5:32:04:b3:bc:21:69:df:37:b8:4d:
1a:a5:7e:3d:dd:eb:86:2e:13:46:b5:0b:c4:35:48:
2a:58:c0:5f:c9:5e:a5:0e:2e:ce:57:fb:3a:d2:0a:
10:d8:f8:ff:cb:b0:a2:dd:52:d3:8f:34:c6:ce:bd:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:C6:9F:C2:C8:E4:62:65:E8:38:F1:28:D2:CB:B8:FB:0D:CB:2A
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c6:a2:07:e5:44:bf:ee:90:23:bc:ad:ae:d7:c7:bf:f5:e6:
ef:04:9d:13:d0:9a:3d:1a:cd:56:79:54:72:57:ac:17:25:08:
d8:24:0c:86:6d:4e:6d:ea:ae:4c:5d:99:91:a5:07:62:5f:49:
3f:a2:b8:96:84:86:42:06:82:24:3e:d4:da:b0:f1:24:83:5d:
cc:38:83:54:fa:6e:bb:b6:c6:b8:83:19:3d:fe:95:d1:c4:32:
6f:50:9c:8b:4f:5d:3e:73:56:5b:0f:32:a8:9c:0e:de:8f:af:
aa:f9:f9:49:ed:4d:2a:c9:9f:ea:cf:dd:a1:60:a4:48:b7:62:
7d:7c:10:d1:c6:53:af:5a:e8:4f:49:b6:5a:b7:94:58:5d:d1:
1f:75:43:9f:6b:bd:98:52:70:1f:67:ce:d0:95:1f:4e:93:46:
82:b2:65:84:5d:41:56:bb:f1:1b:74:78:7f:cc:77:6b:52:e0:
e1:60:73:f8:01:34:76:2b:b7:4e:01:f8:34:1a:c2:e8:ac:a5:
93:11:42:63:9a:43:d0:3b:c5:3c:10:6b:45:22:d5:fe:d4:10:
96:e7:71:7f:fb:c7:30:c9:c5:2b:37:2e:5b:f4:aa:99:ad:0a:
ac:ef:72:14:9b:47:25:7b:20:55:d6:73:be:af:9c:57:50:53:
6a:03:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client