Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: FcrflkaxTLmEZfJnfsTcUDZGhwITdV9SZZmik4jDzbE=
Subject key identifier: DB:08:16:DC:29:64:E8:D1:6F:BF:45:99:56:B2:DD:59:DE:A8:91:E1
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0194BC3C02DCED30D9DDC1CA89F711E52BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0657
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: pFamMoCiSBZR6m6HS84UMnlEz27nCTqIZEowRekp5rQ=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:dc:ed:30:d9:dd:c1:ca:89:f7:11:e5:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=db0816dc2964e8d16fbf459956b2dd59dea891e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:8b:cd:be:9b:51:02:35:ef:50:0b:f3:85:
44:41:15:69:87:86:11:78:6c:3b:9c:de:e3:53:cd:
5e:ba:a5:2b:f0:63:f0:a1:2c:1b:98:17:78:f8:8d:
72:77:b3:93:be:ac:d7:6c:da:30:db:b8:f4:e5:1b:
c8:6a:fd:c7:1e:4b:1d:94:64:4c:7e:61:d2:08:cc:
10:1e:13:f4:8e:f7:29:9a:c9:f0:cc:2c:1e:c0:b4:
e9:a5:c0:e8:71:0a:4b:1a:a3:a7:a6:2e:d8:6e:17:
38:5f:e2:e3:80:05:8d:da:80:49:56:37:bc:e9:6e:
bb:2b:1d:d7:91:a5:fc:4d:f0:12:ba:23:13:e6:26:
82:45:4a:a3:83:eb:58:fb:d3:a1:ef:8e:16:8e:14:
de:6c:ec:2e:0a:19:78:a8:c4:b8:e1:08:73:14:3f:
40:53:b2:fb:39:d4:b7:b6:87:2f:18:7b:50:f0:99:
e9:2e:3e:5b:9c:83:3d:fe:8d:af:55:78:ef:ac:41:
ef:01:de:75:5d:88:fe:8f:e3:65:46:5f:17:65:b5:
7c:b1:81:a7:2f:cc:55:18:51:07:dd:fe:fe:c3:b3:
33:b3:48:c5:27:bd:aa:e1:84:be:5f:21:16:b7:4a:
41:96:4e:dd:fb:8b:d1:2b:81:25:93:94:fb:54:04:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:16:DC:29:64:E8:D1:6F:BF:45:99:56:B2:DD:59:DE:A8:91:E1
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c6:59:90:69:08:99:4d:93:3c:6b:13:81:d5:a1:a0:b6:0a:
96:25:39:61:ab:6d:84:12:25:4e:4e:7c:29:ea:b6:ee:aa:48:
7e:d1:0f:b7:9c:f0:cd:14:6c:6a:70:57:00:b8:fc:15:c3:a1:
21:c3:67:38:66:b3:16:03:0e:0f:cb:97:4d:89:f5:88:67:32:
9f:d2:ed:2f:cd:af:94:6e:9d:ae:c9:d9:9e:66:82:56:e0:3b:
f6:af:c1:36:33:cf:58:e8:42:bb:07:9f:2b:14:63:22:a4:2a:
db:26:b2:8e:75:48:25:0f:60:07:79:0c:a0:12:10:9d:26:64:
b4:18:a5:ea:37:57:1c:2d:84:31:2c:db:45:7d:82:9b:a7:cd:
49:27:76:d7:50:96:e8:69:52:51:55:8b:80:c1:88:58:07:70:
93:06:19:6a:17:36:1a:d9:3f:cf:06:70:bb:4e:27:c8:39:d3:
53:be:0b:2f:40:42:5d:ca:31:63:fb:f4:42:6f:e5:cc:dd:fd:
e9:a4:44:7c:e8:4c:b3:c6:d5:e4:c8:48:d0:05:ba:ee:50:e6:
6c:81:a7:8a:80:6e:71:71:70:2e:ac:16:ac:0b:99:dd:aa:38:
ca:e6:de:a7:35:43:d4:19:3a:39:d4:35:1f:8e:f3:78:f9:b1:
f1:d0:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:51 2025 by rpki-client