Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: 2HdRQvl0WGqI7shSy+jmw2mP8OTPVaEa49T+tSyu2lc=
Subject key identifier: 9B:82:07:DC:31:9A:31:75:7F:3A:BB:64:8A:56:4D:9F:16:DF:08:3F
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 0194BC04F9ACE710932407FE9935601C9845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 01EE
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: E7zGKhtGIL0cZs4oUND/qa4MdX5yY8ebMart4B9gz0I=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:ac:e7:10:93:24:07:fe:99:35:60:1c:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=9b8207dc319a31757f3abb648a564d9f16df083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:68:40:f5:c3:bd:0d:cf:12:b6:98:4f:aa:
38:1d:0c:c6:50:e0:7e:e1:34:82:db:e3:8b:f0:35:
c8:4c:9f:b7:74:2e:91:63:93:6f:b4:99:91:f7:d6:
84:b3:11:b8:28:66:62:74:86:14:3c:6f:e6:16:1b:
c7:89:2a:e8:b8:d1:44:19:82:25:87:b6:0a:3e:83:
de:0c:bb:59:d1:c6:6e:8b:70:8c:4e:18:32:02:e9:
11:55:23:46:28:c9:d5:7b:c0:12:f8:d6:10:48:7e:
30:d2:c0:e5:98:10:be:37:ac:ce:dc:8e:c6:e2:eb:
59:fb:97:88:71:25:77:76:54:60:6b:ba:91:12:f5:
1f:8c:eb:f9:a8:50:72:1d:5d:1b:6c:a1:b8:16:d2:
8b:15:46:86:e6:f0:9d:11:9e:db:8c:c1:23:1e:8b:
98:45:8c:97:f6:ed:ac:a7:4a:d8:22:c1:3d:39:f9:
a3:80:a0:45:3a:8c:6c:ec:64:14:79:cd:14:9b:0b:
4d:03:d1:c7:46:28:c7:18:78:a7:98:ce:62:62:5d:
37:5d:ae:5f:0c:f7:2f:7b:23:4a:49:78:a2:2e:c1:
57:c4:4b:37:8b:d9:56:81:17:25:a9:2b:50:76:d0:
2a:22:b3:e8:ec:e0:56:ad:6e:cf:fa:a7:aa:86:ac:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:07:DC:31:9A:31:75:7F:3A:BB:64:8A:56:4D:9F:16:DF:08:3F
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:70:c0:4d:01:d9:b8:0e:ae:d3:f7:54:f3:2e:1a:60:90:7d:
8d:58:39:46:e8:9d:45:df:61:5d:ab:b4:46:3b:70:e6:47:37:
1c:b4:2d:71:4c:95:a5:77:92:0d:2b:60:fe:3e:64:52:1c:aa:
ef:c6:17:1d:44:7d:16:d6:1a:c9:ff:2b:80:1a:79:44:ec:e6:
25:9c:fa:01:7d:3d:9b:01:9d:4d:ef:cd:77:49:23:13:b5:18:
cc:cc:69:5a:57:ff:38:ee:80:96:9d:da:62:d5:42:d7:71:b8:
4e:08:a7:bf:52:19:8f:62:7d:0a:9f:05:80:9f:78:51:36:8e:
68:78:77:ad:bf:48:4e:02:ff:ca:4b:5a:76:b3:37:aa:0e:6f:
5b:28:69:bd:d9:93:b9:0f:8b:b3:06:83:ee:4b:e3:89:17:36:
b5:26:2a:16:17:b5:02:64:5c:fc:d8:da:6e:4c:a5:68:4a:bc:
e6:d1:12:d3:8d:6b:9a:9f:00:6f:90:c3:32:3b:19:2b:48:11:
cd:17:a9:4a:7d:48:2c:28:ad:52:6f:6c:7d:1f:07:79:a2:ad:
a1:04:77:8e:a4:77:b4:44:3d:2b:ff:6e:fb:b1:92:2c:82:fb:
63:7f:91:a0:a8:8c:15:74:c4:1e:1e:6a:32:73:c4:39:c3:08:
42:cb:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client