Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: UgipDW0e1ARiCpnWKmi2ctz+PF13eUQ/iJmk8F3ZGRA=
Subject key identifier: 87:E8:A6:B1:09:63:16:C4:95:68:D6:91:D7:30:D1:8D:34:11:FC:C4
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 0194BD17C2A0A5F5573935583EB8124D5D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: V5rGNkbfPTAJ3uuLC65AHDQd2sH81Itf7cyPsksMI7s=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:a0:a5:f5:57:39:35:58:3e:b8:12:4d:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=87e8a6b1096316c49568d691d730d18d3411fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:6a:1d:ab:7d:d4:51:10:c8:b9:e0:0f:e9:
67:4e:1d:dd:7d:29:1b:8c:72:3e:64:2a:1a:a9:31:
bd:6c:d1:fc:3a:61:39:71:a6:d5:ed:9f:63:b0:1f:
8d:76:a2:f2:be:e6:53:fb:7a:ae:9b:d6:f0:ec:dc:
78:ab:75:6d:79:91:3b:45:db:dc:de:73:09:5b:10:
b2:de:96:dd:be:77:91:66:45:27:f1:9d:c0:2d:c0:
b7:b5:6c:17:0a:52:70:ca:18:ed:dc:d7:d4:5c:32:
76:17:5b:0a:f9:3d:53:a5:44:51:0f:5a:fb:40:72:
34:3b:07:2d:d7:fc:e9:f5:37:4a:85:b3:cd:96:08:
30:8d:0e:37:e5:0a:81:90:59:2d:bd:c0:51:b5:92:
41:eb:a7:87:04:f9:55:b7:32:46:08:4d:e9:b0:55:
be:35:7e:37:9f:91:4b:e5:cd:49:65:ee:51:02:cf:
10:f1:0a:70:14:f0:8c:8c:7c:9b:94:f3:7f:a4:09:
bc:e7:3d:0d:14:65:82:d5:fa:f0:80:fd:7e:79:9b:
86:ba:f4:c5:a5:ae:eb:e1:f5:db:a5:da:a5:5f:b2:
11:80:9d:09:0c:c0:0e:35:e6:64:28:ea:ec:90:d8:
0c:9b:9b:51:ba:40:09:48:2c:38:33:25:a0:a8:bf:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:A6:B1:09:63:16:C4:95:68:D6:91:D7:30:D1:8D:34:11:FC:C4
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:d9:12:2c:18:f5:98:ed:e4:50:29:a5:da:0c:fc:45:0d:
a3:97:7c:1f:0c:9c:cb:f0:1e:0c:8b:6d:be:82:96:be:01:0a:
cb:78:1d:5f:fd:6e:4e:66:15:a9:af:db:a0:ad:92:49:d8:3e:
d2:08:e7:24:5f:c2:c1:9e:c4:44:79:d4:27:9a:b6:f8:65:59:
43:6b:11:14:59:22:52:ae:9c:9e:ff:03:6f:a8:76:9d:c8:6a:
9a:2a:99:70:e6:27:a3:e8:43:00:ed:e3:ce:2a:cc:da:19:53:
fb:76:2a:9d:05:6b:2a:1f:0e:72:93:22:10:ed:fa:60:9e:69:
28:f5:01:9c:52:a5:59:31:14:19:7a:27:16:6c:c6:05:30:52:
e7:ab:7f:00:54:0d:e0:77:fa:38:78:cf:e4:9e:1d:8d:75:0b:
57:38:00:e4:58:51:c9:1d:7c:ba:cd:5d:8c:de:a1:2f:a8:37:
8a:88:ef:77:42:0c:fd:0b:f1:1b:07:95:51:c3:1f:aa:22:7f:
cb:64:8c:72:b9:60:4e:a8:88:47:21:48:12:77:70:bb:f0:88:
ed:32:b6:46:84:7a:da:43:9c:72:99:43:a6:32:75:ee:0a:d1:
ad:82:b0:81:4a:83:0b:f2:19:92:ee:9e:dd:f6:be:5b:c6:4d:
26:a8:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:11 2025 by rpki-client