Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: zwose/mzAET/nX6/4av7+gRi3WafjG6ptJLRCkRcYMk=
Subject key identifier: 81:C9:B5:CB:1B:A6:79:F2:BE:CD:37:15:A4:C5:5C:3F:CB:DD:CB:5C
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0194BBCE35FA51CAF6FF514230AE49FC484F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0AC0
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: DW29Ec2BjLlpJdRftO4BUGOfEQ+hZohI38AbizRUnjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:fa:51:ca:f6:ff:51:42:30:ae:49:fc:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=81c9b5cb1ba679f2becd3715a4c55c3fcbddcb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:6d:d8:70:85:7d:3f:4b:df:4f:75:eb:03:
2b:a0:d3:f2:de:a8:22:f4:55:82:fe:27:3e:69:79:
3a:f1:93:89:c4:9b:12:0b:96:b3:74:a3:56:86:42:
d5:a9:d7:55:09:1e:15:ac:cb:6e:2e:bd:aa:65:96:
69:c3:c7:2a:68:9d:67:28:0b:fc:67:55:1a:ab:2d:
6c:ec:96:1d:27:b4:79:0a:cf:16:55:51:ee:7e:bc:
d1:ea:fa:e3:93:d9:20:a2:9e:5b:98:e6:9e:c7:80:
70:2d:f1:a0:23:0f:65:9f:db:65:8f:42:0c:05:a2:
5c:1c:ca:a0:5f:c2:36:97:8c:53:3c:99:25:25:91:
a2:5c:71:f2:83:59:82:f0:40:4a:a8:bc:5a:1a:cc:
1c:28:35:27:ee:8e:83:d4:98:ea:d0:20:52:b0:f3:
97:60:b8:58:2e:5e:9f:bf:1e:89:c7:37:16:e4:04:
43:fe:6c:70:39:be:cf:7c:ff:5c:92:2a:90:6b:1f:
b2:ba:f1:0a:e4:5b:00:12:8d:21:f8:bd:59:13:73:
ce:a3:41:7f:f8:87:2f:d5:85:94:8f:ab:53:6e:8f:
5b:2e:cc:c0:4e:6d:a4:ff:45:65:40:f2:17:cc:eb:
87:ed:4b:38:c2:a8:4c:77:be:8e:5e:14:35:5e:fe:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:B5:CB:1B:A6:79:F2:BE:CD:37:15:A4:C5:5C:3F:CB:DD:CB:5C
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:21:60:b0:de:11:d3:f1:86:b5:ff:cd:a3:10:00:b0:e3:
22:f7:8e:bc:9a:82:8a:00:fd:1e:f3:dd:ea:f0:90:b6:94:6c:
29:a1:0a:08:31:35:0d:b2:9d:14:bd:60:85:db:bc:42:c5:9f:
c0:38:77:78:64:3c:d8:b2:c2:66:e1:a2:2d:1e:1f:6b:41:73:
cf:2d:f9:a1:45:a7:8f:2d:da:87:03:c0:67:e5:41:b6:f4:26:
db:48:22:3b:6d:18:93:f3:5e:93:2c:f5:ca:cd:64:06:c2:f7:
53:95:65:f2:3e:e5:48:3e:c1:56:b1:85:fa:f3:bd:17:11:09:
8a:3d:77:8f:f4:cf:3b:1c:d8:f8:74:e1:ef:2c:15:26:71:0f:
8c:3a:8b:96:b0:04:20:82:d5:8c:78:84:11:c6:0a:05:84:89:
32:1a:f9:34:fe:0f:4d:fa:ac:84:45:dc:4b:45:0e:51:95:4e:
8f:34:51:67:84:aa:ee:ac:97:58:24:67:7f:a7:5e:15:6d:b9:
dc:fa:3b:5c:85:89:9a:16:42:88:b8:e4:7f:ab:2b:d8:02:d8:
43:6b:19:bd:47:6c:47:2c:64:f9:82:5b:14:cf:18:c7:69:f8:
5c:98:83:ed:05:5f:9e:e0:24:58:df:69:e5:c9:a9:71:b9:a7:
f0:7b:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client