Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File: OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier: 70ChDmGZSQQK0+2SgSWkoxUrudou3S9sxqD8G3w8Dlk=
Subject key identifier: 96:12:2B:16:F9:6D:57:CE:DD:A9:54:37:74:2E:99:EF:9A:80:D3:02
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer: /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial: 0194BC7319E1A941FB0D94B6DB55565A28AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number: 0D53
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: I4z8IKrbJGLkgx6XMA79D25BErjt9/YthQFJ5v4Q9CQ=)
2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:e1:a9:41:fb:0d:94:b6:db:55:56:5a:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=96122b16f96d57cedda95437742e99ef9a80d302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:2d:06:5b:92:50:18:cf:3f:cd:54:f0:c5:
08:1b:3e:d5:5a:d1:1e:f1:52:9d:37:29:4b:27:39:
1b:89:12:8b:1d:fd:7d:24:ec:ad:89:fa:74:3f:b3:
7b:86:c6:c2:2c:25:6c:83:c9:12:9c:97:cb:2f:29:
29:9d:b7:07:c9:76:59:16:c1:4b:66:a3:25:f2:d9:
05:92:68:62:4e:5b:83:23:e3:c3:b2:07:c6:c6:9c:
a5:1d:4b:10:29:39:e4:5c:9c:20:c2:c7:d4:10:78:
3c:1b:03:f8:1a:c7:f7:2d:d3:fe:82:2c:3a:92:54:
6a:a6:34:82:1e:f7:f0:8d:a4:bf:62:98:2a:58:e1:
1e:ac:27:b2:fc:f2:c3:58:fe:cd:05:5f:d7:e9:e4:
90:5a:c4:b4:ec:01:83:e2:e7:1e:ba:fb:08:b9:15:
63:f3:62:dc:1b:45:7c:b1:81:46:b0:11:7b:a3:ae:
c0:96:19:94:95:45:52:79:04:17:c7:d7:fd:ba:a1:
c8:80:bd:11:41:9b:a7:4d:3d:ec:bc:1a:76:55:19:
5d:dd:8f:7c:7a:65:f0:98:33:cb:3b:af:b2:f6:4c:
30:0d:98:97:76:e5:21:de:5e:40:8c:1e:77:6c:eb:
bd:8e:1a:92:fd:54:fd:33:8e:1d:5e:14:74:2c:3e:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:2B:16:F9:6D:57:CE:DD:A9:54:37:74:2E:99:EF:9A:80:D3:02
X509v3 Authority Key Identifier:
keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f9:5b:46:84:5e:2f:8a:32:51:0b:05:2d:e8:16:af:05:31:
d2:3b:a0:ae:1b:98:fc:a8:3d:7e:01:41:f4:1c:c8:ef:3f:b7:
43:44:38:6a:ca:a4:38:af:0f:eb:91:8e:85:47:ed:91:e9:3e:
4a:3d:44:0a:73:f2:1e:ab:82:04:7d:49:41:86:6e:c7:d6:30:
16:ac:a6:dd:b8:56:0b:5a:ed:64:52:c6:f2:a9:3f:fe:9d:e5:
7b:ba:2d:71:17:aa:b7:f8:5c:c5:8f:8f:b5:d2:8a:d3:74:95:
36:00:e2:cc:44:e1:48:f4:b6:9f:71:26:16:76:c8:46:ac:0a:
2e:c6:46:ca:f0:c0:eb:07:f1:1c:e4:44:f3:76:ba:2d:12:86:
56:d4:bc:5b:01:cd:f0:8b:55:ac:f0:e3:c4:20:34:12:d3:ce:
d2:1e:5c:65:fc:2c:30:48:6a:ff:b3:3b:8e:4f:ea:fc:aa:41:
48:d2:1b:36:90:0e:2b:e8:eb:8b:09:86:27:8a:f7:94:0f:13:
00:af:ea:6f:9e:2e:74:f0:2b:de:38:47:ab:0c:dd:fc:bf:b9:
68:45:de:0b:97:2a:b1:ef:6b:8f:3a:f6:36:2d:89:bf:19:ed:
33:65:df:89:8b:af:de:fd:1b:22:63:19:65:55:da:bf:c8:7d:
02:8b:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:40 2025 by rpki-client