Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: kjespy1oxsQWEv0q09ICEKkphQXXl3mEd/xJrp7jZzo=
Subject key identifier: F3:C3:61:18:B6:6F:73:AF:ED:53:BA:98:F1:FC:6A:DB:FB:DB:7A:2C
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 0194BCE079A568328BA0BB8CAEF430C642E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0BF0
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: UxcDSdO/RuAnj6qaj2MHBpNTMFqKH70Fz4brAfBWEiQ=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:a5:68:32:8b:a0:bb:8c:ae:f4:30:c6:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=f3c36118b66f73afed53ba98f1fc6adbfbdb7a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:51:ce:51:5a:7b:04:84:72:38:31:f4:ec:
53:43:3c:5d:d2:23:3b:38:54:52:51:39:73:41:53:
05:1f:87:c8:ea:e7:c5:3a:b6:c1:4d:33:ad:85:10:
74:9f:50:2a:15:b3:13:e5:41:1e:b7:41:13:b3:66:
8f:ef:68:78:fe:0e:0b:76:7b:34:50:a8:2f:dc:39:
84:9e:69:9e:34:17:7a:aa:01:70:4a:ff:17:ff:21:
26:4b:e2:34:b2:08:7b:d5:b8:4c:c4:2b:65:2d:d8:
74:f7:1d:41:cb:4a:30:71:5a:0d:0e:09:c8:bd:b7:
c2:5e:53:33:f4:57:12:e0:c2:57:be:7e:b3:31:d2:
07:14:a6:96:e2:e3:a1:91:f6:ff:ad:1a:38:1f:94:
e8:64:d1:a6:1e:bd:e0:4e:2f:56:5c:5e:b3:b5:2c:
65:3b:65:5f:66:e2:22:09:d1:c8:83:32:c9:ba:47:
13:29:94:da:7c:6c:32:dd:ae:85:3e:b2:ed:fc:83:
74:3b:6a:4b:91:16:d3:50:60:63:1a:2c:d2:70:5a:
25:17:2c:65:e0:65:e5:67:79:7b:ef:76:22:da:9a:
47:53:e2:97:f1:82:be:d5:c6:3d:fc:71:f6:f9:df:
67:4e:d9:64:d0:8f:c9:0a:c8:a6:84:d3:15:78:e7:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:61:18:B6:6F:73:AF:ED:53:BA:98:F1:FC:6A:DB:FB:DB:7A:2C
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:96:7c:14:eb:c0:1f:fb:8b:f6:f1:92:71:ca:ae:7b:5a:
e1:7a:a0:34:a2:cc:0b:2a:42:67:a2:5a:2b:13:50:33:48:36:
8d:a8:c4:98:a0:6d:a7:53:62:a7:bd:13:86:e2:46:84:f4:77:
32:b7:ef:f0:59:17:d9:56:3e:c0:14:71:35:8b:aa:b6:10:89:
3d:0a:e6:aa:a4:18:4c:e7:74:6c:57:d6:49:0f:c2:53:f4:ce:
d5:2b:6a:f7:eb:7c:b2:0a:0a:9f:bc:fd:8a:b9:59:27:9c:22:
ac:01:4a:76:5f:f3:c5:45:b6:6a:d6:09:ba:81:9e:f7:5b:c3:
f5:31:b2:f9:2b:c2:e0:da:d1:5d:91:d6:2f:77:13:b2:3b:6f:
55:e1:37:0b:f6:09:8f:5d:a8:70:a2:30:ef:32:dd:b2:90:8d:
2c:84:23:ce:7a:b9:5d:eb:29:7f:21:73:97:1d:f5:2e:ab:ff:
c1:0e:a6:67:46:3d:e5:3a:3b:29:47:47:37:6e:39:9e:76:5d:
ac:ed:ab:df:09:85:42:6b:8f:e7:d1:1b:4b:73:9e:a4:51:c6:
6f:32:bb:02:a6:b6:c8:6b:ae:09:f1:d0:11:e9:a3:e8:b8:dc:
50:56:ba:6c:66:a8:b5:38:1b:2c:70:f6:65:20:53:6b:d6:88:
47:3d:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:53 2025 by rpki-client