Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: aGk0JBzyeb101GNzmrab4A0QqE7YmU5GBe452Gextho=
Subject key identifier: E4:79:13:BA:D6:7C:28:95:8F:2D:67:F2:13:29:BE:AE:25:88:38:3B
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 0194BC3BF383BFC88B678DFE702142B9BC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0AA8
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: kHwmnPP+wyvImyksQEeOgFaUCTS2jTwQPtUI0Xm8/Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:83:bf:c8:8b:67:8d:fe:70:21:42:b9:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=e47913bad67c28958f2d67f21329beae2588383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:78:1b:05:d3:22:22:2f:2d:55:2d:93:85:
a3:d7:0c:a6:a6:18:89:5d:94:14:13:81:2e:79:ed:
62:fa:06:73:f3:88:83:62:78:36:5c:2a:2e:e2:46:
2f:59:17:8f:bb:ec:0f:1b:80:30:43:b9:a3:af:f4:
1e:b7:c3:7d:a2:87:1a:5c:fb:f9:2a:43:5d:78:49:
cc:0f:bf:f2:bc:3a:69:48:27:26:94:76:73:02:b0:
60:7d:25:ba:80:c1:11:dc:0d:dd:a3:89:43:99:31:
22:8c:5b:4f:2d:b8:86:26:c7:b0:e9:1d:22:57:48:
09:b8:04:3c:2a:c9:7d:57:29:c5:5c:36:16:2d:4f:
a5:99:53:b5:8b:26:f3:03:48:a8:35:b2:02:4f:8f:
c7:7a:f4:c9:8e:6f:74:12:9e:3c:cf:87:92:aa:f7:
70:39:2b:57:c4:e1:22:88:d1:4a:55:09:69:f8:31:
11:47:1c:c4:0a:f5:9b:9b:f5:42:06:45:72:93:f2:
d5:ff:4b:c2:41:d5:11:11:4c:e6:ee:da:19:a2:a9:
8a:81:2c:57:95:86:8d:29:b0:8b:78:2f:2f:1e:70:
60:5d:12:07:9f:85:40:57:44:de:73:2f:f7:e7:92:
82:6b:95:43:43:ee:65:b5:7e:c0:b9:c8:72:87:83:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:13:BA:D6:7C:28:95:8F:2D:67:F2:13:29:BE:AE:25:88:38:3B
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:d8:c9:56:52:1b:2e:8b:10:23:63:da:76:a1:05:9c:b5:d0:
95:1a:4c:98:9c:2a:1c:4a:47:52:30:7f:5f:56:ce:59:e4:9c:
87:15:f7:aa:e6:ce:32:35:55:82:10:a6:7d:07:bb:c8:cb:9f:
63:aa:0b:d4:93:95:6f:5b:9e:81:00:b0:70:60:09:b2:80:dc:
3e:d7:8f:d4:c4:98:3f:d2:69:44:b1:19:83:14:e0:18:ef:98:
8b:d2:0d:2e:5a:78:7e:b6:b7:f3:4d:28:58:87:37:a8:cd:26:
2f:6a:1d:a3:cd:cd:39:eb:1a:64:0e:0f:92:bf:15:52:57:c8:
bf:d2:31:6e:2b:9f:4f:a7:17:22:3a:62:8c:c5:db:e5:c5:e7:
76:b3:7d:31:19:d9:4f:31:fe:4b:63:5e:4f:7a:80:51:f6:2d:
9f:fd:11:bf:a6:be:f1:58:e6:cc:0e:92:61:2e:ac:99:10:97:
ce:00:06:89:0f:1a:4f:df:eb:16:d2:5a:24:d3:74:60:a6:68:
12:ee:dc:cf:83:e7:f2:10:36:8c:69:a3:b2:7f:80:89:a1:45:
f2:f5:6d:0a:da:40:23:85:f8:9c:37:44:1d:07:84:6b:9b:d8:
fd:0d:2d:32:21:d2:a2:67:42:18:46:44:78:5a:ea:bc:e2:88:
fb:66:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client