Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: LC5Bw8wcDiXN1cuf2qtjt6xzwoa8VXVtUKFwqhE2sy8=
Subject key identifier: 59:6C:9B:8E:2C:08:0F:39:CC:34:DC:8D:9E:97:24:9C:42:41:1D:6C
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0194BD4E8090F66BC82819EBFF0CE58E109D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0281
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: 9nS83K42pEZN6TZO2GdPXnqomdNWsTwxIc8dvipN6+k=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:90:f6:6b:c8:28:19:eb:ff:0c:e5:8e:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=596c9b8e2c080f39cc34dc8d9e97249c42411d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:89:f6:d1:f4:13:c7:4f:08:bb:d6:25:30:
a2:d4:26:a5:80:7c:13:4a:f4:5d:d3:55:7d:36:97:
d5:e6:8a:57:29:d9:20:b1:db:b5:76:db:24:53:52:
e1:4c:df:ca:71:a4:64:31:36:d0:a6:e5:62:d7:2b:
ce:4f:39:85:25:9f:b5:55:f0:2c:e7:e9:eb:66:de:
d6:2f:36:0f:54:95:2c:60:d4:4e:ee:63:ed:03:87:
6a:4c:1c:b5:1a:de:ee:93:42:ea:4f:bf:ef:b2:95:
22:4f:d6:fa:4f:55:d8:44:83:0e:32:be:c7:0b:c1:
e6:21:e7:6b:f4:16:29:25:66:67:a7:a0:26:26:6d:
58:8b:13:82:c4:6e:82:65:8e:3a:5e:d1:c4:42:18:
00:c4:e2:3d:b7:bf:c3:19:d5:6d:88:67:86:9b:8c:
ed:5c:6c:d9:62:c8:1f:98:43:30:c9:5e:65:2c:9a:
38:a4:da:99:35:3c:d4:dd:f6:b1:cb:b8:a3:c9:dc:
2d:ac:36:c4:44:9f:02:43:ff:00:cb:6b:07:5c:ca:
4f:ad:5b:17:99:59:5b:2d:64:23:cd:9f:00:13:92:
61:c2:bd:ee:47:28:04:89:7c:ff:4d:71:8b:05:f2:
4a:d4:68:7a:f5:67:9c:d6:8c:39:09:64:3c:c4:1a:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:9B:8E:2C:08:0F:39:CC:34:DC:8D:9E:97:24:9C:42:41:1D:6C
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:80:ce:5a:19:84:d3:93:17:b5:fe:da:65:86:7e:3b:fc:
4f:fa:da:6b:32:d9:1a:99:6b:70:89:17:1e:c9:8a:63:1c:d1:
8c:d4:31:48:37:d1:79:ed:64:1d:a8:00:94:5f:9f:7c:d2:07:
6f:61:91:9a:e5:be:e9:ed:5e:7c:8e:f0:8d:13:10:f4:12:c7:
e5:26:c8:e1:e2:10:9b:ec:0f:6e:50:d2:11:91:bd:fb:79:99:
67:40:d1:df:a7:13:7b:94:13:c9:1e:dd:92:98:4f:c9:11:ab:
21:69:a8:d3:2d:80:3a:27:e8:13:30:ec:55:0f:78:d6:51:1f:
1c:81:e2:df:74:b4:68:44:51:8a:ab:03:b2:59:58:07:35:d8:
32:5c:12:8f:cb:26:50:61:c1:f7:8e:78:f8:48:be:27:5c:5f:
f3:1c:d9:ea:64:f6:d3:39:c7:3c:75:4d:6e:92:c0:13:4a:d4:
c6:76:67:4c:88:f4:ee:f4:af:01:1f:60:07:d5:16:ec:49:80:
75:f3:ff:80:e7:29:c1:bf:d7:6f:51:13:ef:23:f8:39:3b:b7:
02:80:40:ec:64:45:f4:6d:0b:ca:74:67:1d:e1:cd:fe:05:90:
df:2b:83:ce:ac:9f:94:ea:b5:e8:c7:c3:61:2c:05:f0:07:cb:
c0:7a:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:31 2025 by rpki-client