Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: J6HiQnpd9kjILaKSpyhez8cR5E1HAaFsZCEJp7LJ7Sg=
Subject key identifier: D1:22:0A:BE:E8:8D:85:FB:2E:00:C2:53:D0:EE:D4:9D:CE:EC:BE:B5
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 0194BC04E79E83C03FA63C40BD9372848193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 0E44
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: 8oa0fbrtEejKwAuJWvDKHt0SFxnrqnEt1omaoRDPyCY=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:9e:83:c0:3f:a6:3c:40:bd:93:72:84:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=d1220abee88d85fb2e00c253d0eed49dceecbeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1e:77:74:b3:c3:f0:5f:1b:26:49:a7:fa:f3:
10:ac:b0:92:64:52:8b:56:07:9b:e5:97:9c:e5:c8:
26:0d:61:11:43:27:0c:4a:95:aa:1a:0f:1a:9f:05:
27:4e:33:79:99:79:9c:af:34:d1:69:88:0b:f9:34:
35:9d:f5:3a:f3:8b:19:d8:c8:2c:99:6c:a3:b3:21:
56:a8:ed:9f:4b:b4:0c:5c:f2:21:20:24:df:44:f0:
21:d5:da:f4:05:66:17:bf:5f:34:cb:f5:f7:e2:35:
9c:69:05:49:02:ae:be:d0:59:ff:38:b3:73:8c:be:
87:4d:70:f1:c3:34:c5:80:aa:37:99:a8:df:c1:de:
f5:e7:db:15:87:54:02:d6:d6:ff:6a:73:02:fe:90:
fb:eb:db:19:c9:17:5f:1b:04:56:a2:01:6c:ce:8f:
96:a4:52:b0:c3:53:b3:0d:97:a5:9f:b9:dc:b7:d7:
f2:5d:80:fa:ff:b1:94:83:72:53:10:95:20:df:6b:
52:e3:21:c7:74:b3:51:e1:83:17:d5:e1:21:c6:74:
f7:5c:62:10:f8:31:67:6e:9e:41:74:66:15:17:44:
6c:53:30:28:62:60:36:40:a1:b1:2e:02:5d:da:c8:
ee:e9:da:d5:4b:1c:74:d2:2f:14:13:a9:d9:aa:5e:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:0A:BE:E8:8D:85:FB:2E:00:C2:53:D0:EE:D4:9D:CE:EC:BE:B5
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7d:24:ae:31:fc:1f:af:63:63:e9:47:4c:90:6c:c6:b1:6d:
28:9a:8e:e4:a3:49:59:05:66:0f:44:1a:19:ff:a4:c7:5e:78:
b0:e9:ce:1e:53:e9:ef:ac:16:07:a5:ca:66:dd:ec:46:22:22:
6d:bd:20:42:cd:de:75:fe:be:71:d2:91:3d:77:4a:2f:ec:09:
ed:12:fd:e7:eb:5b:3a:cb:0d:42:48:67:29:e8:0a:79:90:e5:
ee:c1:cc:50:08:f2:0b:71:13:14:11:24:cf:13:b0:d8:44:99:
89:ed:f9:9e:63:de:16:b9:11:46:fa:3b:d4:dd:1d:b6:99:b1:
5a:f5:b1:08:65:90:dc:28:d6:15:be:84:20:e3:05:41:b5:99:
f3:2a:e0:ea:29:ab:cb:53:69:f4:bf:18:61:a7:8f:07:43:06:
cb:4c:be:4b:3b:14:74:c4:86:f8:56:24:9b:a3:ae:5b:4b:0c:
a9:24:89:22:e0:22:66:13:c5:1e:b4:51:89:d1:a4:f0:b4:79:
50:32:0f:b1:4b:ad:c7:88:90:32:87:9a:ce:20:3d:d0:0f:fa:
8e:f1:32:f3:2e:95:95:cf:0b:e1:34:77:a6:5d:ee:22:a5:63:
21:15:c2:7a:a3:86:03:92:74:c7:28:71:64:d2:bb:8d:65:3b:
73:1d:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client