Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: BpJYy9t93nvONzRmNIB6vzyGVKFGR5RnElz43eqF77I=
Subject key identifier: 0C:3B:D8:C3:E0:1D:15:A7:CC:99:4A:C2:C1:62:88:53:70:0B:16:2C
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0194BBCEB710FDB7F2E6124093B2246A7F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: Wii7phJChLWHbcbGkn7i83nkYxHIh8snbmn4fVdx9DI=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:10:fd:b7:f2:e6:12:40:93:b2:24:6a:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=0c3bd8c3e01d15a7cc994ac2c1628853700b162c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:78:e0:12:1e:08:9a:11:e2:1d:1e:5c:38:
42:0d:17:48:80:1a:f8:86:c0:fb:6e:6a:af:e3:d5:
0f:5f:d6:db:28:86:d2:d5:64:b8:7d:a8:d6:c4:d4:
91:e6:ef:5c:e9:c4:54:d5:e3:29:d2:69:7b:bc:78:
0b:f1:bd:11:a6:43:24:9e:c6:33:32:1e:00:79:3c:
d6:ee:66:7e:d1:3c:8d:f7:25:0e:5e:77:19:3a:1e:
27:0d:f5:f8:10:25:47:98:01:79:a2:12:5a:2b:ba:
38:7e:91:41:f8:c3:be:3d:95:3a:73:8d:fd:bf:d7:
d0:82:53:51:11:5d:01:ba:9f:d5:af:0c:e6:d5:af:
15:c8:32:fd:1b:8f:ec:b4:cc:66:f3:25:ff:c6:e5:
e5:f6:e0:3b:d4:2b:bd:06:ef:fd:0a:5c:7f:45:bc:
7a:df:f3:f7:fa:a0:d5:53:34:1d:c9:7a:95:a0:fd:
cb:85:e4:c5:e1:f9:57:97:5d:d5:6c:dd:81:35:e6:
c6:0f:9d:ab:e2:bd:e5:17:02:71:cc:6c:9b:70:fd:
c0:61:34:13:9b:17:e9:b3:6c:59:13:ba:5b:f1:c1:
0a:32:10:29:96:b6:67:a6:b5:bc:d2:d5:0c:f6:1b:
a3:b1:86:30:9e:c3:77:bc:68:ce:ca:8c:9b:d0:af:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3B:D8:C3:E0:1D:15:A7:CC:99:4A:C2:C1:62:88:53:70:0B:16:2C
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:40:37:69:90:67:ae:82:a7:cb:0f:b5:fc:63:a3:db:16:
78:90:39:62:5f:fe:67:2a:f1:99:e4:ac:ae:5b:31:37:3e:12:
6b:9a:9a:f9:52:b0:39:f0:e8:16:77:ac:41:f4:b7:1c:1f:f9:
aa:5e:6e:1c:e4:ef:7f:df:0b:ed:42:9e:4b:10:24:37:51:94:
30:5a:45:0b:cc:02:5b:44:eb:a2:71:7b:76:b9:dc:4b:dc:5b:
0a:ee:8a:c9:8e:cb:e2:b4:6f:68:f4:4a:f4:de:df:65:05:10:
7a:e9:9f:50:ae:2e:1c:72:a9:43:2f:73:7c:1b:58:de:98:f6:
e1:ea:dc:64:35:c8:ef:61:6a:47:30:03:9b:33:ca:39:e7:c0:
75:30:25:71:8f:df:0c:6d:4b:ed:4c:f4:8d:68:2b:53:8b:57:
7b:80:06:77:3e:c6:48:83:7f:4d:a6:9d:93:8a:4b:32:69:5b:
a4:1b:69:2e:cb:ef:42:08:66:10:00:ff:ca:b9:39:59:7c:92:
f5:80:ed:a1:68:41:a4:7c:e5:93:63:a8:b7:9c:99:df:70:c0:
50:be:bc:ce:78:cc:87:5b:aa:ed:18:e8:26:ad:0d:e3:ba:ce:
6d:7f:3a:6b:41:f5:bf:aa:df:60:8c:4d:46:c3:ae:a9:87:e1:
7f:15:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:53 2025 by rpki-client