Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: Y1qOHxdJ41h2oyrZYkpBWp7lc30pwNSYBqCB5vSqXcc=
Subject key identifier: 29:AC:24:2A:F6:85:7E:AB:96:20:6E:A8:50:86:9E:15:FD:26:71:84
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0194BCE082C14669A924B0CF50587ECA3E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: hMkYjbX9J3DzgGusqJMFvIwZ0AYc3M325y/q4Tucixo=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:c1:46:69:a9:24:b0:cf:50:58:7e:ca:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=29ac242af6857eab96206ea850869e15fd267184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:f1:e6:53:34:0b:a3:b6:81:4f:15:bb:39:
91:e8:5c:33:72:2c:83:e3:c2:5b:8e:b1:c1:64:07:
86:ca:5e:33:f2:46:fa:e2:54:9b:7c:3b:87:ff:e0:
be:df:36:f4:fc:75:83:5e:04:f6:9c:a2:fe:ea:f5:
e6:fc:cf:47:7c:38:39:5d:5d:8d:ce:23:2f:bc:f6:
19:e5:16:75:04:c8:5a:83:68:b7:bb:ea:f3:f2:aa:
94:10:96:8e:86:c1:7b:8a:b1:a5:75:c3:ed:38:75:
20:b5:04:db:22:76:8f:56:f0:b5:12:3b:98:0d:53:
38:86:da:34:86:16:56:a5:4b:80:12:9e:3c:bb:10:
15:8f:35:6f:b9:92:c9:a5:5c:05:bc:fa:14:1b:7e:
ac:74:f0:ee:97:27:ca:03:b9:c7:15:2e:f7:4c:e7:
46:5b:0e:3f:62:c4:e1:ae:74:7e:34:2a:72:0c:ac:
5c:eb:02:1e:db:b1:92:96:88:c6:d8:6e:92:10:78:
84:6b:0e:12:ef:ba:fa:6c:f9:50:33:3c:07:30:f7:
dc:ec:dc:54:ee:5c:c2:45:61:23:bc:f0:90:f0:1c:
d4:5d:9f:58:92:3b:aa:dd:9f:12:7f:40:42:9a:a8:
c8:1a:46:35:df:f6:fe:1d:16:18:c4:8d:4a:e4:e7:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:24:2A:F6:85:7E:AB:96:20:6E:A8:50:86:9E:15:FD:26:71:84
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:02:95:2c:d9:2d:64:52:f6:42:09:af:3a:75:79:c9:79:
9f:16:48:79:21:7b:89:12:1c:50:4c:37:c9:f2:34:8b:c7:3a:
87:85:9e:0c:20:31:60:81:be:e6:77:c0:0a:fd:f9:76:06:14:
a5:4f:4c:2d:c7:93:55:31:a9:fd:85:dd:b7:03:07:f5:a6:46:
cc:b2:a1:d7:ea:e4:75:d7:50:85:1d:bc:54:91:d9:6e:33:86:
6f:85:71:bd:8a:ab:8f:82:8d:a5:b4:6e:15:27:20:2a:db:66:
09:20:c6:ca:9e:c1:c3:59:d8:4f:da:39:05:d9:71:39:0a:fb:
68:1e:50:c7:52:73:aa:9a:3b:fa:f4:9f:bf:ae:82:00:f8:2d:
4f:f2:6b:c6:22:26:da:10:71:f2:2d:ba:32:58:6c:8b:76:07:
ab:28:46:40:af:91:38:c8:b1:32:0c:3c:1a:e0:b7:4d:f1:75:
9f:4e:a7:47:0d:b7:c0:c9:47:4d:91:67:40:f8:1b:79:7d:f5:
0d:83:6f:cb:42:18:2b:64:21:62:6a:81:2b:85:f8:db:35:ec:
be:69:40:f9:ee:f6:e8:da:0b:ed:2a:41:8f:6a:2f:da:95:f5:
12:e3:fa:7b:24:2a:89:d7:8a:67:2f:c0:14:2b:e4:0c:15:25:
fd:66:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:10 2025 by rpki-client