Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: 8yn6NF0bnTfjx6yzni4Z7jf0KTfBD2AIMzcIvfe5czc=
Subject key identifier: 55:DF:76:BB:60:02:FD:74:34:08:6C:28:FF:95:D2:FB:25:E3:D7:D7
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 0194BBCEED63231C0E5A2AF1299DF8ACEF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 031C
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: vahr8StPJ8OxTDRGrxcgXOAvrWHY3RZY/mRDe6BIG7k=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:63:23:1c:0e:5a:2a:f1:29:9d:f8:ac:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=55df76bb6002fd7434086c28ff95d2fb25e3d7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:97:e8:85:3f:a3:2d:ed:93:64:e4:eb:9c:
45:3b:52:0b:35:32:70:90:a8:70:19:76:92:d5:0e:
65:e4:02:39:3f:cd:06:63:11:9a:9f:bc:4c:df:d3:
29:f3:45:92:4c:48:05:cd:69:7b:36:e4:60:c7:a0:
a7:d8:2d:c0:0d:aa:73:fd:eb:a0:76:fc:c6:28:0a:
72:6a:d2:74:c9:7d:96:31:f8:25:34:22:e3:86:34:
9f:cb:7d:0a:3b:d0:02:96:95:ac:03:4f:66:c5:ce:
1f:26:99:19:39:56:22:88:b1:a6:7e:13:bc:55:8f:
b5:d3:fc:20:1b:87:bd:f4:47:9a:dd:ca:8e:34:db:
ff:ab:9b:b6:99:80:10:75:30:2f:fe:ee:fd:29:2e:
0e:8d:79:51:72:95:c2:0a:5c:85:52:e4:e0:f7:a1:
5f:79:0c:b2:41:5b:c8:b5:f3:05:28:0a:07:37:50:
e0:8c:9c:45:ec:ac:4c:74:23:02:33:38:c7:1c:7b:
24:3e:2b:0f:57:04:d9:f9:4e:4e:47:29:74:68:0b:
42:67:c3:68:75:a6:16:bd:73:9e:73:5d:22:f9:2b:
ff:2a:52:87:39:b5:64:1c:2f:9b:d9:bf:26:9a:9d:
30:40:c5:b9:fe:4e:9b:9c:88:b7:39:b3:bb:c6:ce:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:76:BB:60:02:FD:74:34:08:6C:28:FF:95:D2:FB:25:E3:D7:D7
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:aa:13:ef:51:e8:21:14:92:ec:44:41:2e:eb:75:4c:b0:4a:
65:d3:54:96:bd:d8:08:e2:41:82:7b:9c:ed:69:47:a5:76:69:
15:12:39:ae:e9:36:dc:6a:db:66:b8:b3:3e:24:28:4c:f4:d6:
18:d7:34:5f:a9:60:a9:8c:2b:64:61:da:55:75:bf:74:ea:5d:
bd:a6:84:f9:c7:22:c6:4c:e7:da:2e:70:99:76:49:08:38:0a:
dd:25:86:5b:b0:cf:a8:dc:6c:53:64:c0:d1:d7:fb:bb:5e:76:
8c:04:6f:ed:41:8f:3c:d9:88:6c:07:cb:b6:da:0b:13:df:dd:
6a:12:44:d9:4b:8f:8e:b9:cd:af:87:8f:b3:72:d3:31:d8:ba:
f8:85:84:39:b1:1b:66:d3:ab:02:b7:71:bc:0b:96:78:71:9e:
c7:e7:39:cf:af:29:f1:91:7d:a2:f4:83:30:2a:d3:a2:fc:ca:
ef:2c:9e:5f:4b:19:b2:bb:d1:96:e7:aa:c7:76:36:d3:b5:ba:
c6:98:1b:c9:bb:76:ea:0d:d2:15:6e:89:a0:f1:73:a9:9a:02:
7c:5d:6b:e7:49:8b:90:65:50:c5:45:c5:a0:8b:0f:28:1b:9a:
31:7e:54:7f:1d:6d:7c:65:b8:67:45:a3:03:17:86:f2:b1:76:
30:c8:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:15 2025 by rpki-client