Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
File: O2MTmh9PiMMM7iIckUajbbVU_3A.mft (raw, json)
Hash identifier: uhZj3IkYSB5AqWXO4kq1CDfzmOsBrqk5cItC4h2/Yu8=
Subject key identifier: A3:61:12:67:8E:C4:F8:AA:DD:EA:84:FB:6D:C5:B2:29:58:AF:B4:8F
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 0194BBCE6D407F909985F01A25866EDA3D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
Manifest number: 06C4
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa (hash: ErYlkkNh49mz7B2O46c+uSN3yYpaocdKkRzHsCd2I3A=)
2: O2MTmh9PiMMM7iIckUajbbVU_3A.crl (hash: 4zp3jioUWqRg+iXPs+GL+IwNiJlhB72Omjy63McQ8LE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:40:7f:90:99:85:f0:1a:25:86:6e:da:3d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=a36112678ec4f8aaddea84fb6dc5b22958afb48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:64:f2:39:c1:55:2b:e2:1c:91:d4:99:df:
e9:f8:ed:84:6c:bf:bc:a4:29:11:d7:47:5c:c7:07:
28:cc:9a:5f:0a:b3:2f:f0:5c:e5:4f:3c:16:e4:b3:
69:0f:d0:0c:68:e3:92:1b:38:ae:8e:34:a1:d5:16:
c7:3d:44:a7:72:d0:57:ab:15:9d:d3:36:d0:17:ef:
39:f9:5a:91:83:db:01:36:0c:ae:14:40:a2:de:fb:
8f:c1:23:97:b3:5c:fb:36:57:9f:d3:36:b3:fb:40:
63:a1:6f:2c:f2:82:b9:58:8a:22:2d:7a:14:27:29:
b8:92:b9:b2:c6:33:8c:22:dd:f2:09:76:4a:6f:e0:
f1:29:be:14:e6:97:30:53:d1:ea:fc:4f:d5:ef:93:
ea:2a:61:03:fe:29:4d:8d:ba:76:8f:0a:06:08:8a:
d3:dd:37:23:25:a7:79:97:c8:ef:55:c8:c0:1c:28:
56:53:55:32:27:17:2f:d2:1a:21:ca:a6:a8:e0:35:
10:d9:3a:09:ab:f7:ad:bd:47:50:55:e4:67:64:07:
2b:6a:cc:09:22:8f:41:8c:fa:81:a9:19:b4:ec:78:
49:2a:72:ee:6c:32:72:78:84:e7:e6:22:f1:c0:b4:
09:98:32:c1:6d:22:82:c9:b8:d6:a7:fc:6d:77:df:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:61:12:67:8E:C4:F8:AA:DD:EA:84:FB:6D:C5:B2:29:58:AF:B4:8F
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:cb:3c:2c:40:d6:1b:bc:f0:d8:71:7d:67:6e:38:75:43:
c3:43:f9:00:ff:d5:c5:09:e7:f4:23:a4:21:eb:fd:88:5d:13:
a1:46:45:82:15:9b:de:96:85:ab:61:9a:02:55:22:09:b0:fa:
02:de:b2:9b:b1:b7:93:c8:e7:49:06:33:75:f3:9d:11:9b:f4:
08:7b:d7:2c:3a:e6:09:bf:02:f7:91:29:ef:a2:e6:41:30:67:
dd:da:4d:35:10:a1:81:2c:fe:dc:41:c6:61:8e:68:ec:3d:6f:
9f:a4:08:4e:b5:cf:66:53:38:17:1d:c5:96:4f:c3:16:38:8f:
a8:e2:dc:6b:6d:8a:e4:2f:0f:0d:88:6a:b6:60:1a:a0:15:05:
2d:d1:c5:ec:83:1a:ca:b3:19:cc:61:e2:db:fa:20:cb:4d:0b:
2b:a3:e1:d3:ba:7c:c7:22:16:17:60:11:59:e7:45:6e:83:a2:
c7:65:b5:e7:15:c7:10:ab:dd:9b:de:c9:2f:7e:5b:3a:17:9e:
27:55:89:62:8d:e7:0e:13:64:03:8b:8c:a3:b1:76:86:a4:38:
bf:1c:d6:04:fd:95:98:8a:70:cd:d9:eb:cb:cd:e0:35:37:0e:
a2:c9:f8:16:a5:f0:90:9f:c4:b2:b4:e5:aa:df:a2:49:98:50:
b2:55:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:08:52 2025 by rpki-client