Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: jDHDoR07kNBFmHTmu+uRDm2Udds0o1NM0TLztuvD/5E=
Subject key identifier: 3B:15:30:0C:B3:D9:EF:C7:6C:03:6E:49:ED:66:15:86:73:01:37:3A
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 0194BCE0901AA91B533972576A63BAA02A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 0xAthu916pMLSA6LAzNdYgS-VXE.roa (hash: AkpmQS7tFUygGvZU+BjPsGOPcILRyQ+KZnPhCEBla9M=)
2: 7jmf9BlNbV-fUUbiGDuTogUiPEo.roa (hash: TRehU0GSo0OYFjBdQZcn/8kKiD62iX7mi6y4Y4CJ6lY=)
3: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: 1WD49xBroWisSSkNeVusUv6OqX+MzplAsf7pXizx9h4=)
4: nF8H_i-63xsIqf6G91Sqghmhrmk.roa (hash: seOXQgoakN6MLHPcruniEufkAIlfgGYPYWwRtHa0PF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:1a:a9:1b:53:39:72:57:6a:63:ba:a0:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=3b15300cb3d9efc76c036e49ed6615867301373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:1f:4e:ce:80:22:ba:b7:81:75:db:da:8a:
c5:ed:53:6a:00:0d:b6:03:74:b4:02:28:56:3f:e8:
a7:58:ac:5f:68:b5:62:c2:8d:90:ee:3f:7a:57:1b:
07:a3:26:4c:25:16:48:4d:ba:99:2c:6c:a1:a4:01:
7c:c3:cc:f7:b1:eb:a1:02:e4:8c:4b:e9:e3:31:b2:
d0:55:d3:7f:18:74:b5:99:f0:de:10:b1:11:d4:4d:
af:ae:6a:ff:e1:4b:00:fc:3e:49:02:27:3c:ce:80:
d5:a3:d9:34:c1:32:95:2f:1c:f5:c4:55:37:93:59:
42:5d:bc:26:c9:65:39:a0:e5:71:7a:2c:2b:e1:90:
fc:5f:72:a6:60:fe:29:55:8c:69:96:6f:fc:dc:bc:
b9:7f:76:62:ce:87:f0:ae:7c:e9:90:82:33:64:b8:
3b:8a:9b:3c:cf:67:a6:d3:e7:6e:2b:47:ee:b9:54:
98:68:c1:99:d8:cf:35:72:84:ab:f1:43:8a:88:be:
19:6a:6a:4f:b0:25:81:ca:c5:53:9a:c7:0b:70:ea:
0a:77:0c:3e:f5:e2:c7:df:30:13:a0:19:65:7c:1d:
0a:15:fb:3b:a4:8e:ab:4a:ce:ab:fa:2c:78:a8:31:
95:c9:a3:7f:93:af:e7:f2:3d:eb:7f:6a:6a:62:39:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:30:0C:B3:D9:EF:C7:6C:03:6E:49:ED:66:15:86:73:01:37:3A
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:1a:93:e8:d0:e1:3b:d5:3a:7a:53:b3:c3:3c:4a:cf:f9:
ae:3f:ec:e5:4f:5b:5a:74:9b:48:c2:13:5a:38:be:d8:c4:39:
62:0f:34:fa:84:53:32:fa:63:59:4f:1a:6a:bd:8a:32:2f:7b:
14:8c:ea:ec:9c:32:d4:94:46:a8:d2:e3:2e:5d:ac:a5:e9:01:
0b:16:13:6f:f2:ed:b2:d6:f4:6a:9f:72:d0:7e:0b:51:ff:64:
f9:f0:4c:25:f6:a7:b1:5b:e8:b1:b2:1f:09:a1:9e:88:18:da:
46:53:59:60:dc:e1:e5:a1:fa:50:ac:37:00:78:5d:80:0d:0e:
00:25:51:40:d4:5b:e2:fc:17:b8:4d:da:e9:84:47:81:0e:97:
8c:de:38:51:77:ad:b9:c5:fd:ff:d6:58:47:53:0b:48:f3:00:
8e:d2:ee:da:e8:02:c9:52:d3:d6:69:0f:f7:f7:33:bd:45:5a:
03:04:6e:c6:24:c6:25:69:9d:ce:7b:64:3f:ab:b0:37:4b:c8:
86:ae:de:bb:c4:08:2d:af:3c:bd:5e:88:4d:96:23:2e:7f:bd:
22:e4:5c:16:af:ee:ac:6c:10:a4:1c:ee:12:5f:86:d6:1f:a9:
62:48:54:a7:09:c2:49:f1:c8:7a:1c:7a:ca:f6:2c:24:24:6d:
b4:a1:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:18 2025 by rpki-client