Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier: IMlw6KXYsKNcEeP+WLyRbiG7OUH+377qm+tmLW0whZU=
Subject key identifier: AB:52:DE:91:23:74:67:2D:6C:A2:02:E5:D1:2B:06:D6:5A:2F:A5:85
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 0194BC04CE4D90362197F68DEBF96013A1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number: 0C3E
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: LRdY87ihbmwgt343W/IJBEStKB/RQ8r74QODXj4Kyn4=)
2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:4d:90:36:21:97:f6:8d:eb:f9:60:13:a1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=ab52de912374672d6ca202e5d12b06d65a2fa585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:56:e3:c5:18:37:99:a7:a4:4c:00:b3:64:
63:4a:da:d7:47:a1:68:0c:39:4b:54:07:4a:24:8f:
9e:e0:3d:b2:8c:13:4e:b8:ef:7a:0f:06:00:b4:7a:
a4:8b:9e:1c:e4:12:3e:4e:47:6b:b2:32:52:b6:25:
18:a1:81:32:24:a1:c2:68:48:21:d7:83:79:02:be:
54:42:8e:f8:76:16:05:a2:e1:ba:e6:c3:6d:7d:6f:
18:77:7a:a4:89:42:9e:6e:a6:54:23:64:db:91:5c:
c6:89:be:df:bf:f5:8e:a7:b3:c5:da:ed:48:2b:6c:
fb:bd:90:11:ea:f8:7f:a8:5d:de:ff:eb:40:72:47:
9a:e1:86:7b:57:77:93:88:78:e4:32:96:78:b2:bd:
ab:c7:77:92:70:c3:ec:6d:47:72:9e:a1:ff:a3:6f:
74:2c:bc:3f:5f:d5:db:85:62:5b:b0:fb:62:1c:21:
6a:f7:48:32:dc:86:89:71:7e:93:5d:9f:c5:1c:30:
62:13:3a:ef:ad:5b:9d:15:a4:21:2c:6e:53:bd:a0:
b5:8e:22:0e:07:93:ab:7c:c1:0a:e9:00:49:fc:02:
47:76:7c:43:55:95:4b:5b:13:46:b7:ab:1e:74:0b:
cd:c0:88:b1:42:cb:e9:6e:dc:8e:04:79:71:24:47:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:DE:91:23:74:67:2D:6C:A2:02:E5:D1:2B:06:D6:5A:2F:A5:85
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8b:39:86:5d:85:d3:7e:37:3b:0c:71:a0:d8:af:b2:1f:ed:
6e:cc:12:9c:8f:da:a9:cc:91:0a:f5:76:ce:71:b5:0b:27:52:
23:62:e6:0a:3c:24:e6:b5:c7:89:22:83:a8:99:73:1c:8b:2a:
e1:1a:53:f7:bc:36:de:7f:a0:76:89:5c:ca:ea:3c:d1:ac:30:
88:0a:2a:10:d7:88:2c:08:ae:17:7b:ea:24:d2:94:7a:60:4a:
1f:8d:e6:cc:a5:c6:28:59:12:cd:6d:71:05:07:6e:2b:55:b2:
42:b1:d8:53:38:99:3f:7f:ab:2d:92:3d:6f:f4:1a:ec:71:39:
20:44:44:1d:09:b1:7f:7c:b3:e1:4d:99:cc:d1:74:50:55:3f:
f0:6e:8d:79:51:5e:18:28:26:35:0f:e1:44:cc:03:de:bf:c5:
9e:5f:25:86:e2:42:d8:63:e0:55:89:39:ff:01:75:59:de:23:
08:9d:6b:b9:2c:fb:24:ee:28:41:81:9e:1d:88:c9:20:13:be:
a6:6b:27:d5:28:12:b3:dc:3b:8d:4e:6f:a9:88:c1:8a:bc:01:
01:8e:78:da:f5:ac:35:8f:aa:f9:b7:29:1a:70:1b:a8:62:89:
23:24:92:54:fc:ba:5b:0e:22:e6:9c:5d:3b:18:2f:c2:86:c3:
7e:8f:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:13 2025 by rpki-client