Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: p2RxhWsoTn8AEUz3losoLDzYotnfsvJdDUu8f/Ia79k=
Subject key identifier: 7A:63:C0:F9:A2:B0:13:36:3B:AB:61:E5:41:B6:5A:40:AD:11:00:1A
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 0194BC72989D94D946942C67B69077BC3E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 1312
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: M3ty4NrnBwccs8Ps31nQxvkvcyAnIjSh68kQuSDAxR8=)
2: VIlea1HGjGCn_MVKwJV926-pJjE.roa (hash: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:9d:94:d9:46:94:2c:67:b6:90:77:bc:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=7a63c0f9a2b013363bab61e541b65a40ad11001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:2a:fc:be:17:f1:87:37:6f:01:ad:ed:23:
be:be:1f:35:b9:f9:85:1b:a0:92:90:b4:80:cd:29:
6d:e0:56:84:ca:74:b7:6b:85:93:82:15:40:80:62:
26:da:15:88:b9:d3:5d:16:94:66:5a:27:b9:73:13:
45:08:e5:8e:a7:2e:15:d7:d4:c5:24:aa:9e:23:6d:
aa:0e:8f:50:dc:5a:a7:ee:49:69:ce:e6:1d:0a:6a:
ed:1b:5a:d9:74:1c:90:9d:47:ba:e4:bd:67:03:0e:
13:e5:e9:ee:7a:f9:3a:1c:4f:09:2e:24:a1:80:3e:
a4:96:88:57:3d:6f:53:51:d2:7f:df:cd:f6:65:0e:
37:a5:57:13:62:e7:1f:5a:65:2d:af:dd:1b:57:6d:
83:37:f0:83:9c:55:23:b1:0e:c4:2f:4f:07:97:5d:
e6:57:eb:db:be:56:53:3e:cb:e9:d1:d5:67:ef:f8:
02:5f:e1:d4:3f:16:1d:48:a1:9a:f9:6a:b5:2d:f9:
70:82:a9:fe:4e:b6:15:59:b0:39:af:62:c7:5e:11:
ce:5c:cf:73:f9:20:dc:ce:cb:32:94:2f:3f:a1:29:
ec:98:ee:f0:d2:66:4a:1a:2d:da:bf:44:30:02:40:
ce:8c:d0:d3:f2:88:7a:91:98:60:a3:78:6b:65:34:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:C0:F9:A2:B0:13:36:3B:AB:61:E5:41:B6:5A:40:AD:11:00:1A
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:ca:2a:54:e7:1c:b4:d6:20:83:fd:d4:89:30:8a:d9:73:
7c:f4:2f:6b:8a:89:dc:2b:66:57:56:fd:db:bd:4e:6b:74:ff:
ec:fd:e5:e4:4b:41:2c:59:52:56:9b:f6:6f:16:da:33:7b:5c:
bc:4b:ee:dc:fb:c8:7b:7a:3b:28:79:45:21:1f:ef:70:c3:9c:
e3:60:16:f6:5e:57:68:8b:ef:0f:da:2d:51:5e:da:9a:ef:28:
05:3d:75:5c:7b:54:c0:4d:42:dd:47:70:9e:f2:6d:18:c3:7e:
5a:9d:dd:d3:b6:87:b5:cb:1a:bf:a2:8b:66:ff:27:01:3d:72:
7c:07:21:b8:91:f1:b1:c8:66:be:5c:cb:6a:11:fb:ec:b4:6c:
d1:5e:c7:ec:c7:60:23:8f:71:e8:9d:dc:33:99:b3:bd:a1:f7:
2c:ae:1a:8e:b3:35:86:b8:51:66:98:4d:a3:55:1f:a9:de:c2:
2f:28:55:8c:c4:ee:8c:af:71:38:19:45:00:8b:0f:cd:18:01:
ae:a5:b6:94:fd:a5:73:a7:9f:b7:79:ac:58:05:c6:5e:3b:d0:
61:2b:ba:d4:f9:4e:e2:8a:c1:d4:e2:f5:6c:50:47:14:95:d5:
c9:b1:85:26:ee:34:c1:ea:23:10:fd:b2:46:fa:bf:31:d4:15:
68:b7:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:41 2025 by rpki-client