Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: sVWPWRPOUnIk4QkCjg5xmTd7QJnTIaBtJaXefmEMO8c=
Subject key identifier: FA:4B:6E:01:72:87:58:FB:15:7A:78:B3:5E:8F:4A:E0:BC:3D:D1:66
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 0194BCE067037F22F2ADE66D2B3CD49AED8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0B1E
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: UoB5sQt6n5lWQo6SRuTsppo5nLaOkW+VVerWwZzHOlA=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:03:7f:22:f2:ad:e6:6d:2b:3c:d4:9a:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=fa4b6e01728758fb157a78b35e8f4ae0bc3dd166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:1c:e0:fa:fd:2e:18:3b:25:71:13:4b:db:
5f:93:f8:0d:a9:36:cc:9a:9c:4f:95:86:92:8c:f7:
3e:12:81:fa:c1:b5:c3:71:c7:b7:22:ed:11:6f:d6:
60:eb:1b:29:36:ac:89:35:e3:86:79:b0:7b:30:ce:
d3:ab:88:3d:2a:9f:f6:06:45:58:8c:ba:99:66:cc:
10:f2:a0:77:82:36:b8:5b:21:ca:ae:c9:20:ff:97:
a8:13:6a:aa:8e:49:d0:f0:1c:6f:ca:fc:2d:79:45:
c0:bf:a8:25:a9:fc:95:ff:56:8e:96:a8:90:2b:af:
a8:d8:63:22:55:9b:30:c3:85:63:73:87:e7:9e:ad:
a2:a8:48:80:68:85:34:23:1e:41:d8:ab:32:27:91:
ba:e9:5e:87:ba:53:ef:e6:7d:4f:ac:23:1f:d3:67:
55:1c:e3:93:bf:0f:85:a0:a9:34:a2:2a:6e:1b:16:
ef:d2:b4:bb:e2:74:3c:37:a9:89:99:26:e4:ef:28:
94:f7:c6:9d:c0:d1:5a:71:57:e8:2c:47:a6:75:10:
8b:f4:1d:80:58:cf:53:80:68:4a:d7:97:ee:4f:89:
71:c8:58:ff:c8:65:2d:72:ea:24:0b:c8:4f:29:83:
68:6f:d4:d9:0e:c1:88:b5:f7:62:c9:d7:78:8c:ed:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:6E:01:72:87:58:FB:15:7A:78:B3:5E:8F:4A:E0:BC:3D:D1:66
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:b7:ac:b4:00:6a:ad:42:c8:0c:2f:42:14:26:7e:52:ff:
90:6a:b0:01:00:74:65:62:3d:fd:fc:31:dc:a4:19:5b:6e:84:
69:b3:76:7e:37:eb:b3:28:0d:8e:07:2d:05:ae:08:3e:d6:67:
85:4b:1f:49:b6:72:89:b5:d7:31:0f:62:05:e3:cb:6d:d9:b8:
1f:13:ff:b0:dd:b3:f1:cd:86:a2:8c:ef:a8:39:69:1b:f8:ab:
fd:4e:4c:81:c5:64:1e:56:e7:09:24:e2:e3:99:e8:d4:cb:49:
68:a5:c7:9e:f6:47:2a:65:49:fa:0b:fa:19:94:10:0b:68:44:
49:11:e7:9b:8e:78:f0:3c:cc:05:95:3e:b1:21:2e:04:9d:d4:
9a:95:da:55:08:54:1f:95:45:d1:16:7a:8b:23:d6:91:5f:dc:
31:b8:de:56:89:24:93:65:f7:d1:23:e6:08:fe:a3:5c:a6:7c:
9d:32:11:d0:9c:58:1b:da:ab:f7:1e:c4:c0:70:25:3d:0f:38:
a2:eb:4f:b3:d8:02:f9:1b:cd:8e:23:88:b7:ab:fc:31:02:3b:
af:f0:82:e5:42:3a:cc:27:6b:66:18:15:33:c5:b0:55:53:24:
31:99:1b:27:2d:a3:0b:8e:a9:32:d3:c3:2c:a5:99:5a:2e:26:
90:5e:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client