Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: d2Cno186aePQEyi1I4nGpeMK1+cDUpFFPyNoBoaIlUg=
Subject key identifier: 9F:14:4C:B1:75:A1:09:CB:45:46:6B:2D:92:EB:E9:7C:05:16:64:8C
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0194BCE09786935D7BA999422F7C328AB010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 08A1
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: 0xWtVfbn3CHnwzr/ciO10YRARKSYMAVqbXVM5BLcDYs=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:86:93:5d:7b:a9:99:42:2f:7c:32:8a:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=9f144cb175a109cb45466b2d92ebe97c0516648c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:60:8d:5d:f6:fa:27:da:77:e7:2e:f2:3a:
57:c4:d6:a2:dd:34:91:a8:bd:ee:d0:40:9f:2d:7a:
e9:85:37:1a:44:8c:9b:d8:76:7b:2d:d2:41:da:0d:
a5:3c:d6:ba:a9:a7:0f:a8:61:6b:07:f1:a7:d7:05:
0e:f6:b7:d2:fd:b9:35:8d:cb:6c:99:f5:ee:fe:12:
0c:89:0f:fd:01:ad:47:d4:08:d2:23:d0:b0:35:86:
f5:58:6c:b0:da:a7:26:e4:6c:40:a2:21:99:d5:6a:
0c:fa:47:a3:e6:64:3e:d3:ea:2b:d9:60:b1:95:0d:
a9:bf:85:c1:a2:6a:88:03:fc:19:15:f8:6f:e7:46:
de:a3:03:da:15:fc:8c:0d:78:f0:6a:75:a9:a7:a3:
d4:2d:94:ec:f1:c4:b6:3e:5f:47:1c:68:67:30:46:
0f:2a:b5:7f:10:e3:74:e0:d1:ca:c2:2e:11:a3:dd:
7f:c7:a3:b3:ba:7a:c4:63:af:50:73:6a:9b:df:30:
92:ea:ad:37:35:7e:23:79:bc:70:12:1a:7b:03:6f:
92:f4:ab:d8:62:0e:8c:0d:b9:cb:2a:90:00:92:f5:
82:ad:05:71:bf:e0:42:e5:e6:2b:77:31:a3:14:43:
f8:25:7d:22:59:0e:a4:a5:cb:d6:44:76:7d:c6:1f:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:4C:B1:75:A1:09:CB:45:46:6B:2D:92:EB:E9:7C:05:16:64:8C
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:3f:b3:aa:90:de:dd:e1:4d:0d:2c:1c:b1:45:f1:9f:87:
fe:05:be:a7:2f:bc:f5:67:72:71:1d:6c:9e:41:ed:5c:ed:43:
f6:18:e9:23:b9:78:94:75:5a:e3:68:99:ed:3f:c8:1e:6e:e2:
cb:a3:f5:f1:d1:48:b8:6d:2c:db:da:4e:58:23:ec:ad:23:58:
ec:04:02:47:76:01:d2:c5:5a:46:4f:9f:27:a2:09:cd:89:1e:
38:2e:65:39:f6:97:e2:96:c1:96:de:06:99:06:69:7a:5e:36:
a4:b6:05:0c:bb:ab:52:57:fe:59:66:f3:f8:63:18:e0:d8:51:
35:bb:9c:81:16:61:83:2d:b0:c8:8e:61:a2:de:e4:52:a7:a0:
a4:27:79:35:19:a5:03:38:3c:7a:d0:12:d0:de:db:74:b3:0b:
1c:3d:cb:b7:d8:27:12:f2:5d:13:f7:80:d3:3c:60:9d:fc:34:
e1:c2:6a:d4:f5:e4:b7:1d:fb:f7:cf:af:ae:78:22:19:e5:3c:
98:c5:5f:f3:c7:83:0d:35:84:cd:01:da:f5:28:cb:04:dc:ad:
d9:68:66:d7:68:a9:b7:b1:e2:a4:80:de:19:b9:28:29:99:d3:
de:cd:a3:6c:43:34:ed:61:7b:43:93:7b:59:7d:01:e0:ba:79:
e8:43:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:45 2025 by rpki-client