Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: 1dwhEvavchwKtENZ1Z4eYHi3nQFDEV8VpKaar83xqII=
Subject key identifier: DD:AF:C8:C5:37:48:ED:37:92:B3:CE:FF:C7:DB:B5:05:80:0E:30:04
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0194BC730F2E266A2A56DD3C74A3C8C29943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 10AE
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: c/VLVr6KUZN4TnopVKa9zDWEst18qXW2GW3K5/BehAs=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:2e:26:6a:2a:56:dd:3c:74:a3:c8:c2:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=ddafc8c53748ed3792b3ceffc7dbb505800e3004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:d1:fe:a2:aa:fc:de:d5:cb:8d:48:84:5b:
ff:6e:2f:61:05:27:08:57:80:e1:ef:59:24:80:bb:
b9:1a:58:ba:41:4e:b2:9a:8a:3d:70:a7:9e:b9:25:
d3:d6:7e:96:f6:9e:d3:1e:09:1e:3d:77:6a:8d:31:
89:84:1a:3b:f0:a7:a7:f2:6d:d0:3b:2e:db:bc:64:
f5:a3:cd:32:84:e9:11:2f:a1:a1:91:2c:87:50:6a:
d7:43:10:58:80:2f:86:40:4a:61:e2:7e:51:77:66:
9f:96:b9:f7:82:f5:d8:f7:99:f3:95:75:af:b4:bd:
21:4b:03:34:13:40:e4:6b:bf:67:36:2a:8a:38:4e:
0f:ca:f5:57:8f:4f:6c:f8:01:8f:73:3b:d3:c6:64:
b0:c5:2c:09:2e:92:ca:11:b9:89:4a:ed:83:b9:bc:
64:ca:28:9f:d6:a4:13:de:c1:4d:73:69:fc:46:e6:
42:ed:2c:ac:7d:17:27:f5:4e:55:7d:ab:f4:7d:5f:
b7:e6:8e:d5:ac:37:ab:66:d0:40:2d:57:13:a4:e3:
7f:63:49:a7:de:c7:dc:2a:c7:fa:9b:3a:41:1e:b3:
9e:38:71:7d:a1:27:b8:a6:0c:72:08:36:1b:b8:eb:
49:65:21:44:f6:5b:f5:dc:d0:aa:37:42:10:d0:ca:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:C8:C5:37:48:ED:37:92:B3:CE:FF:C7:DB:B5:05:80:0E:30:04
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:bb:c1:1d:6e:af:52:bc:1f:ba:f6:4a:dc:cd:c2:5e:4d:
31:a0:37:26:88:cc:ed:aa:9e:81:10:3f:91:d6:8e:f8:dd:40:
de:9a:a9:eb:22:a1:6e:fb:aa:ea:81:7c:43:18:4d:37:9e:a7:
e8:25:e3:49:18:95:4c:9f:b5:c3:44:de:ed:d2:c5:8e:17:95:
21:44:4c:02:fe:c5:d8:ae:80:17:d3:0a:f2:2d:be:fc:e1:8a:
a5:44:b1:53:51:7e:f4:30:b6:e8:97:20:e2:57:43:00:ce:76:
45:86:e0:f0:2b:4d:5c:bf:8b:2a:39:91:67:1f:0e:42:ac:40:
95:d3:25:a0:0b:cd:dc:b4:cc:ae:f8:59:73:7c:2b:af:e7:8c:
9b:45:64:be:e2:2a:9e:40:8a:65:32:17:3a:d0:a8:ba:2b:f3:
dc:c0:e8:c3:f8:a0:4b:e7:21:cd:c7:b4:60:9b:c9:6c:ba:e2:
66:31:8e:44:47:cb:80:39:4f:4e:31:7f:ca:73:7c:52:a1:a2:
d3:c4:9e:59:8f:08:c5:00:c7:ae:de:02:7b:44:7d:e8:18:ef:
7d:69:56:97:15:c3:c0:07:f0:21:93:be:d7:45:1f:86:aa:65:
c3:51:a5:03:04:b1:10:e9:30:75:76:22:08:2b:d6:be:0a:46:
5d:66:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:53 2025 by rpki-client