Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: OT/qh+OVy45MOB/w4u/nDME+3DcLBG/1l5+inI0NJPQ=
Subject key identifier: 4C:11:2E:23:39:48:C2:B0:F8:0D:3D:DC:89:ED:F3:F9:42:33:0A:8B
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0194BD17A7947BAEE9B7A65350950AF99FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: A9
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: bUMCLOVSu9KYR00tkOZkj30fo3oy2w/G9uk4NUm0WmM=)
2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
3: ojtOox8Wt7SMQ6_zO5wsZAGpkD4.roa (hash: peaSBJk7FlakYQEu3Xb5IumLjSrReNSbyW/hip0rUPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:94:7b:ae:e9:b7:a6:53:50:95:0a:f9:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=4c112e233948c2b0f80d3ddc89edf3f942330a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:7e:f3:e5:11:55:f0:ea:b9:c7:fc:c3:6c:
83:99:30:93:2b:d5:e0:5f:f7:b1:8f:d7:3d:bb:85:
42:3a:a8:7a:26:9b:eb:36:46:03:d5:10:9e:1d:8d:
5f:cc:1a:4c:8d:b8:a2:55:18:82:d0:e7:5f:a7:db:
c2:82:b2:5b:a5:0f:c3:1c:3c:fb:6a:e9:ab:7b:95:
2c:8c:9c:a9:fa:98:b7:a7:d1:30:2e:ea:7c:d8:ea:
68:b4:0e:d6:bc:73:ca:2f:0e:d7:27:4d:02:b3:27:
36:da:6d:d4:d2:0d:44:1f:56:27:bd:21:6f:38:96:
9f:56:a8:04:b5:9a:20:28:12:d9:71:11:61:f0:93:
a7:eb:50:42:00:43:85:a9:76:93:eb:6b:c8:18:0a:
9a:3e:e5:0d:2f:6a:a4:b3:e4:8c:7f:5c:e2:88:d0:
20:66:73:c5:41:62:7d:18:26:1c:c8:3a:72:fc:04:
30:59:82:38:48:75:13:50:6c:73:ed:7e:cc:51:37:
5a:7a:7b:8d:e7:e8:71:ae:06:8d:32:9b:13:a9:80:
21:51:c4:f4:58:7a:34:39:ed:1e:87:8b:08:55:15:
4e:18:38:16:a9:f8:88:0b:a1:d0:97:13:37:0d:2d:
1a:80:db:42:f1:4c:4c:ea:62:5b:5e:4b:1b:d7:a9:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:2E:23:39:48:C2:B0:F8:0D:3D:DC:89:ED:F3:F9:42:33:0A:8B
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:58:ce:9d:58:56:52:b2:02:09:03:0c:bb:c4:b2:83:21:d7:
34:50:ad:5d:68:1b:c4:7f:ee:7b:48:19:f4:80:be:3f:57:39:
3a:87:35:81:f6:fd:b3:ed:3b:ce:ff:02:68:ac:ce:8c:71:4e:
72:4f:00:59:cd:16:cf:41:41:01:82:87:c4:f1:63:c6:42:16:
22:dc:db:48:ac:46:f3:3b:08:ac:f0:23:12:80:c8:9f:2d:be:
1c:6c:cf:93:4a:6a:ac:34:f9:e5:05:32:52:2d:46:e8:01:0f:
4c:b3:52:9c:29:87:05:a0:26:96:44:01:88:b6:63:fd:13:2d:
7e:97:5f:86:e2:f5:7c:25:9a:20:b8:c4:42:61:87:2a:12:42:
cf:66:7a:4d:4e:b5:ea:0f:0b:ea:b3:dd:ee:e1:2b:e2:42:01:
b6:9b:d0:cd:5c:62:64:84:ad:10:59:3f:04:68:fe:4b:d6:20:
99:ca:96:9e:c0:01:ad:4b:ff:59:0e:9a:6d:1b:ab:45:4a:42:
0e:02:7b:7a:12:45:2a:89:75:08:ac:04:a8:57:33:b0:ea:c0:
69:38:2c:b2:ae:22:99:c4:25:f4:ed:93:2b:0d:65:de:07:38:
1f:8c:a5:a6:58:f3:29:fd:7e:e6:be:d6:3f:8f:b4:97:4d:66:
4f:0c:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:41 2025 by rpki-client