Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: SVGPjLPn5IYs6hlaFJaaQ13Z9a5LzbmY6uV/NyPTMBY=
Subject key identifier: 5C:17:51:8B:E9:21:4E:D3:54:64:33:7A:85:9B:A7:7A:87:C9:F5:F7
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 0194BD1782410A17F38A63F5E451F2CB030F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 01EE
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: I+S2vZr7uk6Rxdg/E7LgD102YTGeo8DmcABdgQjhTB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:82:41:0a:17:f3:8a:63:f5:e4:51:f2:cb:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=5c17518be9214ed35464337a859ba77a87c9f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:f4:b9:cf:9d:4a:c0:54:fc:20:60:10:67:
8a:d3:71:9a:1a:ea:97:14:b0:26:6f:44:f1:0f:a8:
ed:4e:ce:ef:58:09:4a:e7:b0:24:f0:3a:89:36:95:
50:cc:e8:5a:68:0f:22:b0:29:6c:03:d1:69:4c:e7:
4d:61:96:9f:fd:0d:c3:c4:d6:1b:42:f7:ee:74:84:
24:1e:e6:7c:e0:07:9e:30:11:5b:9f:5f:bf:d9:9a:
ca:fe:89:93:14:60:66:09:e3:d5:37:1f:4a:1e:9c:
40:49:57:35:58:d9:3a:0d:4f:45:67:6d:2d:e3:e0:
59:3c:0e:8a:10:81:74:4f:ea:07:ea:d5:d7:a8:3a:
94:79:80:21:dd:45:c6:7d:6a:00:f8:60:a3:79:a3:
6e:a5:b3:c4:d2:d8:9c:29:82:c2:f9:f6:73:9b:ca:
47:af:32:a9:a2:e2:fc:a3:41:76:dc:88:dc:a2:13:
f2:7a:87:12:35:d8:2f:82:08:3c:e8:51:82:74:05:
b1:de:6d:9c:88:9b:02:ec:89:4f:ea:c1:92:78:1c:
b0:89:31:ad:9e:a3:cd:9f:8a:a6:3f:cc:49:76:9f:
0f:87:de:fb:c8:24:44:38:4d:fb:ab:9e:70:11:1c:
01:54:73:a4:19:1e:d2:ff:09:2f:f6:6c:21:b0:4a:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:51:8B:E9:21:4E:D3:54:64:33:7A:85:9B:A7:7A:87:C9:F5:F7
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:ad:1e:e4:04:96:0d:9f:6c:17:18:35:71:07:00:35:eb:
a8:1e:bf:66:30:17:84:3e:2c:6d:ad:43:cb:3a:51:3b:bd:9f:
c5:41:6f:1f:fb:19:0b:ae:66:19:b0:4c:e9:8c:bc:01:b5:e9:
02:f1:af:6b:55:d8:05:75:1e:c1:2e:09:0d:9d:35:cf:ec:f9:
d5:d7:15:16:08:4a:11:fc:15:7b:f1:74:20:5c:95:a4:00:c5:
c7:02:53:cf:8c:3d:40:c0:1e:0a:19:b8:2c:05:8a:6b:0d:45:
fa:b8:83:92:66:1b:01:86:50:e1:2a:cb:39:3f:48:77:ef:0f:
fb:48:23:14:53:51:2b:07:be:76:da:a5:a4:75:34:8c:d9:eb:
e3:9e:d1:a8:4f:95:47:9d:be:b0:87:23:e0:b4:bf:9d:17:13:
63:4d:f4:c4:32:01:f8:11:f8:9a:ef:57:23:13:86:f5:99:10:
bd:e0:65:4a:25:26:e7:8f:b8:dc:d7:e8:1a:70:ef:98:24:52:
05:ab:b4:42:ba:6b:42:f6:2f:9c:a1:74:83:75:2c:d3:68:ed:
7b:7d:aa:c2:3f:d5:90:cc:d6:a6:f3:22:4f:23:91:3d:dc:15:
da:f1:1f:b1:80:81:97:cd:cc:df:1d:49:87:51:62:9e:98:7f:
33:bf:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client