Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: nN0LhUzzQBJT45nrcloBrrDCy+ALIBWaZeG6BahBRl4=
Subject key identifier: 92:51:13:5A:B7:7F:47:4F:0C:3D:E6:0C:90:06:C1:A7:AD:9D:79:6D
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 0194BC04DF3C91453328F8B0DBCCD94BF5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: QUcrercr6XKtpWETn9J9OjVB+zO63Xqd/6GUIVLlOiw=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:3c:91:45:33:28:f8:b0:db:cc:d9:4b:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=9251135ab77f474f0c3de60c9006c1a7ad9d796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:0b:e2:87:95:31:c2:e3:dc:80:60:dc:d7:
b6:75:e7:5c:16:74:ee:b9:be:de:42:25:81:c0:d3:
44:f0:6c:e3:a4:21:03:a1:53:4a:64:e5:26:0e:26:
58:5c:fa:f4:78:04:b8:15:1c:50:36:d8:27:76:2f:
a5:70:4d:94:73:60:58:cc:08:f0:47:af:05:8a:d8:
6b:c4:b7:5c:ea:48:bc:ff:c9:29:66:70:5c:77:8a:
df:d1:8d:0a:a5:84:60:c1:d4:56:84:e7:bd:57:33:
64:a5:54:25:89:a2:c8:f5:86:06:dc:8c:56:8b:2b:
40:97:9d:2c:7a:7f:6f:3d:9f:90:9b:49:09:38:79:
a5:63:5d:43:47:a2:b7:e3:da:fc:9d:e0:d6:31:cb:
70:59:86:75:90:3b:a2:a4:ac:8b:21:c0:94:9d:8d:
4a:ae:5b:88:f0:95:41:d2:5e:f9:b9:08:7c:67:f2:
dc:7b:58:84:e7:1c:c2:6f:7c:62:56:32:b5:80:d8:
9e:29:b4:4d:84:cd:c7:d7:b0:8e:d3:0b:18:76:fa:
0d:d4:af:40:08:06:2f:14:a0:1e:0d:58:58:3a:5d:
ea:86:1c:2d:be:f0:74:96:80:20:55:5d:17:52:ef:
b3:5e:7d:17:ec:75:4d:d9:9d:bc:7f:55:f0:59:de:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:13:5A:B7:7F:47:4F:0C:3D:E6:0C:90:06:C1:A7:AD:9D:79:6D
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:63:5b:86:50:65:d1:90:d1:f8:7d:46:ee:8d:a1:f5:19:
13:31:79:34:64:a7:18:20:14:ba:3b:d2:f8:0a:7e:aa:1e:e0:
f1:4f:3c:5f:7d:76:41:46:89:f2:ac:a9:02:a3:73:8e:3c:62:
f6:48:b0:ea:6b:94:94:24:78:17:fa:4e:bc:7d:c7:5c:7f:2f:
8f:eb:57:f2:16:2c:5b:4b:0a:ea:b9:46:52:5d:cd:0e:90:7d:
6c:b8:d5:88:72:39:4e:e5:75:07:b5:d5:0a:e8:5f:77:58:99:
e8:a4:aa:53:9e:41:a2:19:7a:e1:e5:73:a8:4f:9a:00:f6:42:
cd:65:0e:ae:a3:c4:87:90:92:b4:2d:19:9c:1d:24:93:54:5f:
8c:b6:5e:81:eb:27:d0:df:07:a2:fc:db:06:a6:e4:42:dc:ae:
e9:7b:4d:67:1b:ed:e3:3b:2e:bd:3f:4f:a0:37:5a:1d:0a:d9:
32:7f:42:5b:2b:d3:87:63:07:2d:92:45:66:2f:91:c6:92:69:
5c:ed:59:ba:25:65:50:1a:f4:c3:27:7f:c1:a8:0a:ce:a3:88:
76:bd:5e:1b:e0:df:9b:15:07:41:b3:aa:02:ca:fb:9a:ce:8f:
5d:76:0e:76:10:bc:04:a4:ca:25:b2:0a:d5:bc:df:cd:b7:1b:
71:f1:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:59 2025 by rpki-client