Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: 3o+2Jvt9sjuYlVA9t0gOK2yHW7Z+FxLByCFW++DEFc8=
Subject key identifier: 6F:31:51:6E:F2:CB:22:1C:10:E7:54:9C:42:DB:6F:8A:4A:EB:A6:75
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 0194BCE07CA3DA67A8EB60821BF6EA34B782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: Ev171PKLiWyg9kWmqIzwQq3r8Lw.roa (hash: 9HZVrssgfd6EYDzaTv+YXjEtSu5iA8YmquhpuH+g1ns=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: eSq7YTII7fILTSE+scHpcbJ9ZWu+Jg9BSSbj+POEt9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7c:a3:da:67:a8:eb:60:82:1b:f6:ea:34:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=6f31516ef2cb221c10e7549c42db6f8a4aeba675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:2a:90:da:27:29:ad:22:dc:28:7a:c2:8c:
e2:5e:52:60:da:b3:3e:1b:9b:81:04:b7:55:9b:bd:
c9:49:8c:68:56:83:c2:7f:05:df:28:ba:ca:b8:77:
67:06:65:e0:b7:25:37:fa:c5:b3:f9:a2:31:7a:ac:
44:dc:2a:69:e5:f4:08:23:e4:e2:71:06:ba:bd:96:
34:1e:97:4f:d9:79:07:6f:c1:a2:cf:a4:2c:11:22:
9b:d9:69:a8:28:70:99:34:4d:25:8d:9c:75:72:45:
20:aa:a0:a8:69:de:5c:ab:88:e8:e7:5f:66:29:24:
d7:fa:60:ae:7d:27:25:28:1d:4b:f2:eb:6c:ac:b0:
d5:b8:e3:c1:71:f0:78:51:a7:b4:bf:2a:76:7a:83:
ee:62:14:c6:df:a7:3e:ac:69:b6:56:41:28:63:b6:
ba:52:2c:dc:a7:ff:9b:39:33:c2:63:45:64:1c:09:
dd:6d:06:24:0c:12:72:d6:2b:38:df:d1:40:04:50:
54:a8:b3:69:bd:a5:30:4b:ea:1b:f7:17:b8:45:9e:
63:db:37:88:73:af:2f:33:1a:70:3b:5a:3a:0a:2d:
e9:1a:bd:02:d6:62:0e:98:17:ca:1e:a9:70:75:36:
24:f0:c8:fb:19:4e:1e:8e:38:10:37:b7:e9:0e:7d:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:51:6E:F2:CB:22:1C:10:E7:54:9C:42:DB:6F:8A:4A:EB:A6:75
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0a:bb:c0:0c:3f:2d:54:65:fc:8a:ab:d5:48:79:99:6f:34:
24:6c:e6:e4:c8:48:04:48:a6:d2:de:76:e3:93:31:fc:32:3b:
b5:a7:99:36:c8:aa:45:28:60:88:b1:e7:4f:21:db:85:a6:b4:
2c:2d:a4:68:70:3c:a0:61:7b:93:8f:75:49:06:5b:87:93:bd:
12:45:88:5b:fd:70:a8:da:ac:5c:16:53:a7:50:71:76:55:fc:
8e:86:8c:27:9a:fa:cc:55:f1:7e:be:85:39:9f:a0:75:2d:a2:
c4:05:a7:21:7c:ff:ac:73:60:f1:70:55:a3:11:18:1f:ac:a8:
46:f1:bb:33:7e:84:a2:2f:9b:cb:57:99:21:7c:e8:4b:16:92:
56:93:73:0d:ee:5f:43:dd:a2:db:70:bd:6e:dc:99:40:8d:5b:
da:e2:49:54:11:ba:a2:8c:6f:3c:11:2b:5e:28:09:53:ec:01:
b3:f4:78:0d:6d:3f:8b:fb:ec:b5:e6:f9:18:83:1a:23:0a:3c:
1a:51:ec:bc:12:00:ca:ca:1b:fd:8d:fd:ed:e7:0e:f3:fe:69:
0c:b8:57:d8:ce:e2:4b:28:af:f0:a4:97:ad:d6:1c:e2:30:65:
ed:c9:05:12:8c:04:c8:8f:23:77:56:2e:ad:4e:ea:ac:5a:1c:
dd:ed:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client