Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: XY6exrPA3nAiU83AbH9yueARF9y8K9jjeTgd/+08beU=
Subject key identifier: BC:AE:7D:90:C6:50:3A:02:C0:B4:F5:A4:2B:3B:C2:11:40:18:BA:8C
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 0194BCE06B8915D2E413A97110CB56E634FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1024
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: 4FWm2a4xSQbzgdhy5e97Oy/0YCEJOXjaLpURQ63oj58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:89:15:d2:e4:13:a9:71:10:cb:56:e6:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=bcae7d90c6503a02c0b4f5a42b3bc2114018ba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:32:4e:6c:db:6c:c9:b8:41:b6:12:85:57:
bb:5e:57:c6:b8:0a:5a:dc:69:92:84:79:c3:d4:d8:
c6:3f:83:8a:3d:23:d5:44:b1:ba:dc:43:96:e6:ae:
36:5c:ff:ee:f1:93:40:c9:26:c1:b1:24:a7:21:97:
21:4f:1a:1e:10:89:86:da:5d:e9:93:c8:30:1f:06:
56:8e:38:00:97:b7:94:e1:77:d2:82:bb:f9:f6:61:
ad:8a:21:85:01:ed:52:72:24:d0:01:f8:ab:47:57:
87:18:e4:84:c6:e6:ae:fc:cf:ca:f2:a5:84:d2:b6:
1c:9e:8c:4c:bb:1f:bf:29:3b:55:75:f0:e1:f3:b1:
c9:75:e9:3c:d4:e9:4f:ba:ac:5f:c8:d6:7a:9d:41:
4c:ff:13:91:28:2f:9a:16:93:76:57:46:f4:ff:a2:
17:8e:fb:b1:df:f8:92:bd:e5:54:e5:b9:79:7c:4a:
a0:ba:f5:6d:b1:84:c1:21:fd:2c:b5:7b:38:e3:1c:
10:96:fd:15:ec:3b:0e:d6:22:e2:6b:91:10:6d:ca:
5b:b2:b1:57:f4:73:7c:bf:c1:76:22:29:e4:5e:fb:
84:8a:5c:6d:e8:bc:f1:49:d1:89:d3:db:9c:44:78:
2a:92:4c:19:22:62:c9:97:b8:78:e0:7b:e9:7c:b9:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:7D:90:C6:50:3A:02:C0:B4:F5:A4:2B:3B:C2:11:40:18:BA:8C
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:c9:9c:46:97:af:1d:2e:d1:67:a3:a3:12:75:7b:82:c5:
67:2a:bb:3a:a2:5e:bd:30:3f:22:f8:25:22:cc:3f:f6:7f:0e:
f7:61:fb:04:be:5b:05:fc:c1:c4:97:68:84:8d:3c:53:30:c1:
02:27:a3:2a:9f:b0:2b:25:21:30:f3:c2:50:22:b7:4e:19:cc:
cd:f4:5d:6a:4f:ca:72:36:a8:dd:c9:64:fe:96:00:b4:e0:79:
df:a0:c2:4d:43:75:f1:89:43:a0:a8:f0:73:ac:35:80:4e:a6:
91:08:d3:04:8c:c8:77:a8:b8:3d:b3:3f:f7:05:09:db:dc:53:
33:ea:8c:5c:52:cb:4e:4e:0e:f5:07:83:cd:c9:cc:b5:e8:79:
74:ed:ce:73:b8:4b:b2:56:e7:50:32:08:03:15:ff:30:24:a3:
bb:50:c5:5d:3e:8e:fd:41:b2:93:51:3b:5d:19:f0:d1:05:4d:
4d:a7:a7:af:d5:02:74:0a:bc:c5:fe:04:9b:50:d6:53:01:82:
00:bd:56:03:10:b9:d8:0b:cb:a8:58:00:19:e9:5a:c6:d2:7a:
8a:56:68:5b:05:ae:8f:df:05:c3:cf:b9:66:94:85:2d:b5:28:
9e:4a:bc:93:44:50:da:1a:c3:7a:80:72:87:42:7a:9f:28:2a:
13:ca:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:00 2025 by rpki-client