Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: jqiVPUk0IusJa6aZn/nP4cr0AYXBvYrHbg5I1TQUBTY=
Subject key identifier: 4B:47:4E:B0:BB:1D:5E:2A:C9:74:1E:FA:6F:3D:B7:51:B3:C6:B0:25
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 0194BCAA16475CC4C707E2DC9F8AC223FCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 13CB
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
3: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: x4wqo4R9j8yxmZQLzYurw3bVgkD6NTGL4OHKowsSffg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:47:5c:c4:c7:07:e2:dc:9f:8a:c2:23:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=4b474eb0bb1d5e2ac9741efa6f3db751b3c6b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:c9:ca:74:0f:8d:50:e9:0a:43:27:cc:f7:
e4:8b:9a:0f:df:82:59:18:54:ea:5e:aa:f1:61:6b:
06:b8:32:c1:5b:1b:a7:45:98:01:48:cf:94:d1:48:
77:01:0d:48:37:ab:d2:32:9a:b1:f1:b4:27:e3:90:
19:18:61:3c:66:b2:5b:18:d2:31:e1:6f:96:38:23:
9b:5e:68:3f:83:d5:94:56:df:80:46:78:86:4a:17:
e2:2f:7b:a5:77:e6:32:21:e6:29:46:f3:44:26:46:
e7:42:17:53:74:06:f1:51:08:f8:f5:4d:0f:1a:2e:
d5:d9:34:eb:13:8d:32:94:fd:58:fb:96:a4:5d:6e:
46:8e:d8:90:1e:63:a6:0e:74:06:77:e7:92:25:f1:
ff:83:70:6d:46:d8:9e:bd:b9:b0:34:4c:67:87:02:
c2:20:f4:f2:5d:db:19:c6:d7:fd:e4:fc:fb:59:1a:
dc:ab:98:2e:c1:35:83:18:16:95:47:0c:90:58:24:
8f:b1:2f:c4:e8:1c:70:c9:29:01:2c:c9:76:be:80:
4d:42:d9:4e:3e:63:8a:f3:f2:76:fa:3d:fc:c1:b2:
ac:3a:70:af:5d:ea:01:67:b5:b3:e0:af:55:56:c0:
24:43:af:36:66:55:0f:e1:53:76:c8:95:0a:0b:ca:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:4E:B0:BB:1D:5E:2A:C9:74:1E:FA:6F:3D:B7:51:B3:C6:B0:25
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c4:4c:41:cb:90:b6:4d:75:7d:1a:12:c5:23:be:5a:19:96:
53:0a:89:95:74:f6:fe:b4:90:cb:42:aa:bc:0d:f2:cc:c1:ee:
3b:6e:db:d3:e9:77:6d:e0:7c:d8:aa:81:7f:b0:41:8c:28:07:
90:54:92:7d:87:e5:7d:ad:22:ed:6d:78:95:69:d9:89:a4:44:
83:b9:cc:d1:dc:c7:bf:19:95:2f:e2:99:be:b5:4e:3d:7f:ba:
ff:8e:71:ee:c0:8a:d7:ad:b8:5b:c8:ee:91:fc:82:9a:ba:e6:
1f:6a:b2:8f:4f:2e:36:0e:e0:c0:63:d1:13:7d:e7:28:40:95:
4f:fb:e0:da:1f:4d:50:cf:00:f5:3a:bd:0d:92:16:e4:41:01:
0e:27:ee:70:d6:1e:54:f7:a5:a2:05:4a:9f:6f:ed:4f:ca:1c:
25:5d:d9:b8:30:e2:05:c6:88:b5:11:7c:16:36:91:d7:8c:63:
fa:90:70:98:68:43:7c:95:85:bd:13:30:65:25:59:9b:16:51:
a7:7b:8a:09:a2:0e:3c:79:ca:6c:f0:cc:f9:b3:82:6a:79:a4:
a5:13:95:01:d2:53:d1:41:6f:56:40:c9:e7:d6:ed:f3:31:24:
ef:8c:03:b0:8d:43:a5:b5:f8:ba:0c:b6:c6:86:5c:22:3e:db:
05:0a:61:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client