Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: UCnKJGPgEBFjyQtPCARfdQg60Ws7TWK5PTObY7Pc3lc=
Subject key identifier: A2:63:AC:97:8A:9E:36:BB:DA:49:07:3F:D2:91:AD:83:5D:97:EE:F2
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0194BCE0C97B2E78F637292610A412185FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 038D
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: V9v8cax614KmSx8reXDcxzuM8vhu1JxmK3PpqoiF6EU=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:7b:2e:78:f6:37:29:26:10:a4:12:18:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=a263ac978a9e36bbda49073fd291ad835d97eef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:d1:a2:bb:eb:7f:09:eb:03:3b:1a:dc:7e:
6b:a0:e7:e6:c8:8a:6e:19:20:be:15:cb:62:0f:7d:
44:ef:bb:88:3b:42:97:8e:28:77:6e:64:3c:7c:5c:
a4:fd:0d:47:4f:87:48:c2:d1:f6:9b:75:28:2f:68:
3d:46:ac:d2:b4:a3:9c:17:22:ba:d8:8a:d8:25:c7:
b3:87:77:4b:b5:40:d4:3c:c5:78:c7:eb:17:24:09:
2a:82:8d:66:29:8e:df:32:9c:89:89:56:44:9e:ec:
b2:98:55:db:01:89:d4:bb:51:9c:5b:89:9f:3e:10:
48:03:a8:6c:47:4f:5b:be:2c:d4:e2:0c:ac:93:70:
18:71:5a:ce:2b:5f:82:5e:10:22:0a:f5:f9:bf:24:
73:78:4e:98:14:c8:62:32:6b:96:d1:40:ca:da:b7:
74:9f:02:e5:9c:33:78:3b:5b:2b:81:5f:bb:01:37:
80:70:62:32:d4:4e:a1:56:5d:36:2c:41:fe:76:fe:
e4:aa:b5:d9:7f:ef:0a:c7:72:de:27:c8:af:de:ff:
49:b7:79:00:71:96:fa:be:7c:96:ad:98:9a:74:7e:
22:ee:6c:f7:e5:20:a5:79:f1:25:58:c4:a5:dc:1d:
87:ef:c6:43:50:b2:66:87:31:9e:eb:ca:e7:aa:3c:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:AC:97:8A:9E:36:BB:DA:49:07:3F:D2:91:AD:83:5D:97:EE:F2
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:3c:54:e7:a5:91:86:e6:ac:40:d4:26:2e:9c:8a:ca:ac:
ec:68:42:6e:3c:6b:b6:c6:58:df:6e:1e:a8:0e:c7:23:98:51:
ca:8c:ea:e7:ed:55:4a:ab:23:1d:6c:1c:9b:94:e5:66:6a:e7:
b8:42:16:aa:c1:d5:d5:22:a8:61:8b:1b:83:05:c6:af:38:82:
b8:0d:cf:95:2c:51:f8:09:bf:dd:2e:16:5a:77:18:65:72:1d:
9b:be:3a:d2:86:26:07:1f:87:f7:f6:36:ea:29:58:86:7d:e4:
f2:92:1e:05:bf:4e:a2:93:59:7a:91:6d:c9:91:24:74:e4:d2:
c4:88:de:98:6b:85:4c:fe:59:e0:a7:39:8d:0f:af:bd:d6:7d:
45:4f:80:00:00:34:e0:5a:cf:57:cd:9d:2d:15:53:d5:1a:78:
b5:25:99:c8:8d:67:f6:c5:7d:f8:40:94:fd:37:b0:d0:c8:63:
95:be:fb:d2:f5:36:fa:b6:96:4d:d7:51:1c:d3:9f:57:84:ae:
8d:b2:c2:47:ae:99:66:77:e7:a8:92:89:7b:ec:81:dc:8e:3d:
1b:ef:a7:c7:62:91:9f:f3:70:6f:c6:94:ca:b9:29:d1:e3:e2:
a4:31:eb:5f:54:ec:93:a2:23:ea:0a:47:12:fb:3b:4c:80:8b:
fb:97:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:21 2025 by rpki-client