Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: E2ZZrMt2G7ske3j0F0uEVQukWJhE3NCidLVWxoNNbAQ=
Subject key identifier: 4C:56:DE:11:98:1E:5E:2B:C0:B9:A4:12:D6:26:F4:45:24:53:2D:D1
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 0194BD1790C217AF21B6E246BAA81D6879F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: B3XDGVaf57BU8PUwMFNZFnag1OqxNg3uzYOVCCYkSVA=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:c2:17:af:21:b6:e2:46:ba:a8:1d:68:79:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=4c56de11981e5e2bc0b9a412d626f44524532dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:96:ec:e8:b8:7c:73:c3:c5:29:62:7a:32:
14:81:21:ed:e4:fd:1f:12:0c:63:5f:49:b9:74:50:
b9:b5:df:44:ac:46:d1:74:19:5d:c4:a0:d1:10:f2:
f8:a2:8b:b0:9d:b4:8f:42:ce:3f:2b:23:1a:55:05:
9d:6a:c7:ef:25:71:cd:80:c0:92:5b:97:dd:42:ab:
df:61:4a:c7:1a:19:1b:b9:b1:52:27:d8:f0:96:ba:
39:b5:2f:63:00:4f:bb:11:d1:74:47:55:34:bd:74:
3f:d6:41:55:d1:2b:95:9c:ba:52:a4:a2:5f:24:5e:
1a:e1:96:b2:5b:b3:bc:ea:63:a1:d0:07:dc:e8:2c:
79:0a:b4:dc:30:8f:6e:55:07:2f:b9:14:d7:a8:ec:
4a:32:c2:b5:d2:78:87:fe:67:9c:1c:cd:ce:aa:5c:
7a:dc:d4:77:c4:3f:3b:3c:3d:71:84:44:df:e5:70:
9c:66:26:84:95:3f:8a:7d:e2:74:7c:c5:ae:b2:9a:
9c:8f:c4:d8:90:e5:84:20:46:66:42:59:4d:01:b0:
b8:7c:96:86:dc:87:bc:08:02:c9:9f:b6:51:a9:29:
25:13:06:e8:1d:b1:1d:b6:c6:22:67:c5:f7:16:fe:
2c:0a:8e:d1:1a:c1:3d:0c:3a:18:bb:0a:fb:a5:98:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:DE:11:98:1E:5E:2B:C0:B9:A4:12:D6:26:F4:45:24:53:2D:D1
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:ac:2f:5e:1a:e2:76:14:de:1b:c5:d7:09:ef:92:a1:10:
73:95:f3:97:3c:4e:72:69:d3:47:86:e9:d0:39:7a:a8:27:46:
33:1a:c1:ef:cc:a1:bb:62:c7:46:e5:0f:3c:03:0d:7e:2c:70:
56:ff:75:a2:59:db:26:c9:6c:7e:89:98:04:e8:8c:95:3d:69:
d7:bd:c3:69:ab:63:08:3d:32:e4:f2:42:1e:8c:fb:71:13:b4:
3d:e8:58:30:e9:22:b8:15:3c:f4:e4:07:bb:ed:a6:2c:19:db:
df:03:3a:12:ca:8e:01:eb:0e:cf:9e:43:3b:fa:fc:41:a9:f1:
d0:2d:f2:a3:c5:26:00:f5:ce:7a:09:4b:4a:f6:bd:1e:14:e9:
47:44:d4:a6:78:fa:76:3e:fe:d1:53:3f:30:60:41:c3:18:d4:
29:3e:92:d7:ee:2c:e7:9a:d5:f9:04:7c:1e:00:7f:33:27:28:
b7:ed:8d:59:d9:ed:48:84:6d:ff:cc:e5:99:cc:88:cd:bf:56:
af:cf:ff:65:02:bf:92:a3:8e:e7:c8:e8:eb:61:ba:94:16:79:
5e:fd:35:fa:3f:5e:e4:d5:59:d3:f7:a3:2f:16:fd:12:ea:29:
a5:1c:0b:59:65:1c:df:7b:d9:40:4f:85:41:53:ff:70:f1:b4:
13:da:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:58 2025 by rpki-client