Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: y5ue5UMy5yu3uf4UT4k3n3nI/3OFzsfGq1+HXVVeaTQ=
Subject key identifier: 17:61:B6:0E:5D:32:44:8A:3B:10:98:1F:E0:2C:71:30:3D:FE:89:A9
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 0194BC72A07C7B08A310222430876FB830DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
2: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: a7OC7RGFFSsFzAryfWaXq0gI1KZtzWbSM8t0X9nlo50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:7c:7b:08:a3:10:22:24:30:87:6f:b8:30:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=1761b60e5d32448a3b10981fe02c71303dfe89a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:71:65:c7:da:d8:02:cc:e5:c2:62:fb:f3:
40:39:15:98:61:59:d0:ea:a6:09:7f:28:4d:9b:d6:
f0:0e:10:20:d9:62:82:9f:c0:78:2e:50:a2:94:cb:
2b:be:ba:dc:85:2e:71:8c:e2:5e:33:07:7e:52:f3:
f9:f9:83:27:48:b9:a8:69:3f:ee:0f:35:23:c3:74:
16:ad:c0:66:e5:8b:88:21:0b:57:48:a6:c4:0f:38:
c1:26:e9:e2:d3:58:a4:f6:ca:c8:b3:9d:ca:47:8c:
8c:26:07:66:48:cc:55:73:45:71:7d:f0:4a:d0:f1:
f0:e1:4c:61:8a:a8:6d:95:aa:40:34:35:1e:00:de:
b5:ad:40:e7:76:9d:74:be:e8:0d:2b:1a:f8:6c:5e:
06:92:0a:56:8f:c1:4c:28:b0:a2:8d:8a:35:19:81:
52:6c:2b:11:61:9d:92:8f:fa:22:a7:6d:ba:e4:73:
ad:7e:df:87:3e:2b:66:ec:f2:83:eb:97:e7:9f:65:
9d:07:b0:cd:ef:a3:36:9a:0e:4f:20:9a:2a:00:ca:
cd:28:c2:a1:24:52:e0:12:e2:8e:f9:c5:9b:35:1d:
b9:f3:39:78:b7:85:6e:cd:1e:e5:82:04:3d:c7:9f:
f4:03:99:81:93:05:a4:61:c7:f3:57:cd:e4:71:dc:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:B6:0E:5D:32:44:8A:3B:10:98:1F:E0:2C:71:30:3D:FE:89:A9
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:08:59:30:17:1a:ea:df:0b:d6:ab:91:3d:69:27:57:c4:09:
7a:99:21:62:81:74:f0:3f:f6:82:5e:a5:53:e7:52:29:e5:f2:
6d:b9:64:83:99:cb:79:ca:5b:42:b8:60:5a:c6:32:3c:1c:fe:
ec:a1:35:bb:71:09:f0:d5:d0:b2:d1:74:50:42:a9:5c:7a:b5:
49:3f:94:bf:cc:25:af:9f:e4:77:37:0e:81:97:c1:dd:f6:fd:
2c:4b:2c:3f:da:a0:62:9a:cb:6d:7e:c5:f6:03:d3:2d:de:be:
69:fd:b5:7f:95:a4:65:3e:7c:5a:a7:5c:5b:80:e5:d9:91:86:
18:28:5e:21:82:65:ec:0c:6c:48:d7:d6:c9:1e:8e:74:5a:9b:
cf:c2:c5:f3:0d:d9:cb:17:63:ed:3f:68:4c:be:ae:d9:63:cd:
ab:a9:a4:88:b9:1f:af:42:fa:ac:28:1d:62:af:c6:14:17:97:
93:79:87:2b:f4:46:7b:ed:5b:83:1a:04:28:07:ca:9b:f0:62:
9c:05:ce:d0:6c:17:04:29:64:a5:31:1b:40:4d:48:65:d0:aa:
89:8f:0a:c5:ee:cf:20:2d:bd:9a:ef:36:31:86:ac:0c:e5:b4:
e4:3a:c0:9f:ce:32:ce:a3:7c:bb:ae:ab:af:3a:77:ac:bb:86:
ba:e7:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:08 2025 by rpki-client