Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: /9FhK/pi64O85BVdKoAaaZBrPkV+U/SdLzNf4rstg20=
Subject key identifier: E5:9C:95:95:69:52:6F:04:B2:FC:67:C1:05:F0:1A:C1:B5:16:D3:C9
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0194BD1746DCF7D5AC93BE96B93117D180D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 8CKfCGUlUwTtaEr4Ux3QcB+axu1i5lsl3g+hdZHCJQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:dc:f7:d5:ac:93:be:96:b9:31:17:d1:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=e59c959569526f04b2fc67c105f01ac1b516d3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:73:4c:7e:48:9a:85:9f:18:81:be:41:f0:
48:c2:ff:78:57:57:b4:65:7c:f7:6a:c8:69:f6:b0:
52:0b:d0:f7:2f:68:6c:53:44:83:ed:43:54:0d:67:
65:4f:50:d0:e2:ae:61:4c:0f:f5:f3:c7:9d:fc:4f:
76:ea:65:4e:42:62:c0:6d:c3:dd:e7:40:19:4d:9f:
4b:50:81:bc:e2:0b:78:eb:0e:ec:c6:bd:9c:fb:4f:
b3:3d:b9:26:33:13:78:7d:3e:04:92:6d:39:81:55:
89:e1:f5:21:e9:5d:bd:31:55:29:9c:ca:dd:c4:09:
95:e2:da:b0:d8:64:8e:33:4b:fc:cb:64:72:d4:63:
da:87:fa:b3:dd:64:c1:4e:e6:1a:68:81:81:c2:62:
28:3f:e8:46:ac:e0:a4:13:3e:5f:16:9f:7d:26:57:
d7:c7:d0:0d:fb:74:66:73:81:f4:e2:8d:2e:bd:26:
99:ed:f6:d1:79:5c:2c:2c:24:07:20:36:55:2c:d4:
c0:c0:1b:b4:60:22:80:67:5e:34:61:d3:63:e4:ce:
8d:e6:e5:23:9c:30:20:c9:20:3d:fc:ca:58:a2:e2:
83:1c:e2:d5:14:c9:0c:7f:1a:2e:eb:81:40:2c:a0:
b6:e5:c8:28:c3:0e:1c:2b:15:bb:51:9f:26:6e:8b:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:95:95:69:52:6F:04:B2:FC:67:C1:05:F0:1A:C1:B5:16:D3:C9
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:7d:08:35:55:57:65:9b:94:e6:8a:ee:76:86:c0:09:db:
82:c7:b0:fa:7f:cb:36:01:ce:fa:6f:16:13:23:bf:77:55:6d:
07:2d:8c:46:98:f7:ce:b1:7a:ee:84:01:d5:b5:46:85:f7:60:
cf:0b:d3:34:d7:da:c0:d5:8a:21:c2:ec:f3:7f:9b:82:5b:3b:
b4:77:c7:51:d8:55:75:49:7b:99:bb:01:f3:66:56:9f:69:56:
55:7c:1c:04:9c:ba:e6:dd:c6:3e:71:e1:6e:40:f6:18:a9:76:
38:4d:33:9b:7e:92:15:5b:64:cb:96:95:9b:fb:ba:7a:ee:a6:
b8:bb:f9:05:6e:e8:07:70:98:6f:f8:04:53:5f:ac:7b:f5:81:
61:d4:96:f5:23:58:95:25:42:39:99:67:1b:13:68:bd:aa:17:
32:94:1c:23:ed:a0:e8:bc:59:b3:77:c6:13:51:60:b3:d6:8c:
2c:ed:d3:2b:fe:49:24:f8:e4:e2:d0:65:0f:6b:c9:de:e1:90:
e0:6f:55:b8:77:8f:0c:ee:76:98:a0:e3:7e:c1:cc:14:02:57:
8b:cc:10:a2:66:4b:19:50:03:33:42:22:41:09:7b:e4:24:0d:
fa:0e:b5:97:0a:59:fe:48:82:11:3a:1d:e3:37:3f:c5:03:74:
b3:e6:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client