Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: PnnKDacTkP83kQW7cIZcpulJoFsRCsDxmZ4A/wCSHfU=
Subject key identifier: C4:1E:5C:37:74:F4:0B:C2:73:B4:5E:D0:C1:5B:3F:EE:FA:68:80:D7
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 0194BD17A65A62EB4C5E66BCED2E2771146F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 01CE
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: fwsXfn/BKS5CvGAVKE2UE7O+lmu44bbVSzVGboumrsQ=)
2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:5a:62:eb:4c:5e:66:bc:ed:2e:27:71:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=c41e5c3774f40bc273b45ed0c15b3feefa6880d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:80:9c:a1:9d:f2:8c:84:14:dc:aa:fe:0f:
1a:04:4e:90:2d:3f:64:cd:5d:5a:c1:70:dd:20:ca:
73:1c:d9:1c:83:0d:bb:91:18:9b:02:0a:e8:3c:d5:
7d:a4:ac:a0:d2:60:e4:e1:4f:7a:e6:df:3f:d5:04:
f6:55:bd:96:7f:b3:ca:68:cd:bd:48:c5:9f:09:1c:
4a:93:f2:fb:3a:bf:76:19:bb:26:08:e8:ea:3b:8e:
fc:59:a4:d2:29:cc:f2:d4:74:8f:fe:b8:8f:9a:ed:
5c:97:71:32:70:d3:dd:8f:fb:83:ef:07:72:8a:50:
43:72:ba:bf:a3:c7:a8:aa:42:1d:9a:de:2f:d0:c5:
ff:a9:20:81:6b:79:7b:b2:06:e6:82:fd:0e:2c:10:
9a:92:8c:39:37:4a:97:e8:59:88:79:98:ea:71:a7:
d7:68:db:e0:a4:b5:3c:cb:03:b4:09:3d:37:52:6d:
1f:dd:70:9b:29:26:b8:64:8b:69:f1:74:ff:8b:68:
a5:e9:f7:cd:8d:06:87:a8:a3:b5:50:7c:d9:e3:67:
92:fa:5c:17:37:58:5f:d6:f7:24:7d:7e:d9:60:05:
2d:9d:f0:92:d1:9c:69:dd:2c:5e:3a:ea:73:34:08:
c2:14:e0:04:be:42:01:09:a1:b0:d1:fd:f5:06:30:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:5C:37:74:F4:0B:C2:73:B4:5E:D0:C1:5B:3F:EE:FA:68:80:D7
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:81:cf:74:44:99:18:5d:44:6b:cc:25:9f:4c:37:df:76:d3:
67:b0:82:71:de:4c:11:72:e9:63:1b:65:f5:bf:69:6c:bf:47:
5e:99:88:e7:e8:f7:bd:73:f6:f7:23:2a:35:9a:a8:84:15:c6:
6a:9b:e4:c2:f5:4f:e6:aa:c4:a7:06:93:66:cd:50:52:57:f0:
97:12:f1:93:56:6b:9b:38:95:e2:c9:ba:19:23:ac:0e:f5:b9:
43:84:71:34:9b:fd:a9:c1:a5:43:81:43:94:28:90:12:95:17:
b2:78:46:2d:b4:f5:8e:4d:1e:59:4f:ca:49:ec:bc:bb:54:48:
f5:5e:27:ca:3b:7f:3b:b1:11:f3:e9:28:73:d5:52:6c:e0:42:
a3:b3:cd:bf:e6:80:71:96:1c:2c:2a:a4:8e:9f:00:f2:9e:22:
ae:99:b7:1d:4c:f4:36:a1:5f:69:14:b8:03:10:0d:4f:d8:86:
90:ac:33:ee:be:57:b2:85:f0:71:1f:1e:a2:c3:da:e4:02:36:
3c:32:6b:4f:8d:3e:26:79:3f:fd:b5:96:53:ea:ae:2c:97:2f:
59:6f:ab:9e:38:f5:b4:f7:46:2c:f8:2e:72:83:66:de:82:fa:
45:ea:42:3f:c2:48:35:b4:76:c5:31:33:c8:02:39:fa:d6:9e:
33:3c:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:08 2025 by rpki-client