Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: /qTrDWSQKSxIf3kBMdKiEQXYY9mDtPOhSvkY67x8e3c=
Subject key identifier: 8A:C9:16:98:70:9D:63:D1:82:48:81:11:32:8E:A1:B6:AA:89:8F:81
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 0195E1905040363E8719C5770D5F0716265B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 0536
Signing time: Sat 29 Mar 2025 11:01:26 +0000
Manifest this update: Sat 29 Mar 2025 11:01:26 +0000
Manifest next update: Sun 30 Mar 2025 11:01:26 +0000
Files and hashes: 1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: WW38RME1lkKus2q/4mKaadKdpNr65Ee8dPZpMrGQ6TA=)
3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:50:40:36:3e:87:19:c5:77:0d:5f:07:16:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Mar 29 11:01:26 2025 GMT
Not After : Mar 30 11:01:26 2025 GMT
Subject: CN=8ac91698709d63d182488111328ea1b6aa898f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:9e:47:70:0c:ec:3a:44:c7:65:54:1b:15:
fc:94:c0:16:ff:6a:62:27:cc:b3:80:1f:2a:e5:ad:
d0:5d:4d:81:b3:13:b1:df:36:e5:67:02:1a:1b:2a:
43:1e:72:7f:a7:23:75:62:3b:e7:2d:85:0b:27:46:
af:69:6b:29:f4:e2:c3:fd:ef:00:44:f6:81:0b:50:
10:76:60:b5:ee:59:7f:60:90:90:97:72:c4:87:8f:
09:0c:7b:56:0c:6d:22:e0:e0:51:29:2c:21:db:b8:
2a:bf:96:e7:dd:06:2b:2a:de:c9:5a:19:ab:c7:f6:
47:19:33:2b:65:ae:ab:ba:74:f2:ef:b7:3f:9f:5d:
86:34:d2:ea:40:b8:0a:bb:23:ff:01:61:8a:d3:6b:
79:46:72:81:04:0e:af:c5:da:21:67:a7:16:c5:7a:
92:8e:40:c3:61:62:12:2f:2a:65:65:7e:9e:01:b3:
ec:56:4f:ba:ae:38:3b:10:44:0b:9b:9d:4b:b2:50:
b4:4f:42:c4:1d:08:0d:ae:49:f4:b8:91:d3:1e:40:
9b:ee:9d:b9:d3:a7:78:82:a1:28:6b:2c:e2:75:fe:
79:ca:82:42:53:a7:3e:3b:b4:94:56:47:cd:b4:b0:
bb:58:9e:2d:9c:46:3d:48:cc:80:d2:c3:0a:f8:7e:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C9:16:98:70:9D:63:D1:82:48:81:11:32:8E:A1:B6:AA:89:8F:81
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:1e:ba:3e:91:79:46:d5:ff:45:85:3b:94:35:5b:05:cc:
6e:77:03:3e:e6:9c:53:a7:87:fc:ca:ec:07:d1:36:49:33:f3:
b3:98:72:99:5f:fb:4f:5d:f9:8e:40:81:98:bd:c9:1b:56:07:
65:01:bf:64:fa:92:aa:51:19:fd:cc:74:4c:c2:77:be:c9:30:
61:00:31:3b:38:50:cf:67:89:e1:47:08:48:16:d2:f6:ab:27:
fb:f6:d4:d3:ed:21:8f:a0:89:26:09:e0:16:35:e1:04:09:03:
46:87:4c:6b:e0:9e:63:91:1b:51:b1:84:77:9a:c3:28:f6:6b:
f3:05:ff:a7:95:5e:aa:98:e8:bb:5f:dd:e2:4a:72:27:6b:2c:
5e:2f:64:40:d5:fe:14:76:e9:8c:12:e8:f6:12:fe:90:cf:1d:
ef:a7:ed:a9:b4:e0:fe:10:e9:94:1f:54:1e:62:8d:73:71:16:
8f:e5:31:e1:9c:6f:a8:e3:53:cc:3d:a0:85:06:f6:69:2c:5e:
a2:b5:72:98:3d:d1:cd:31:a3:1f:a6:8a:2b:bf:85:96:49:9e:
fd:01:db:b1:c4:a3:1a:b0:01:ca:ed:c1:ae:75:68:b1:c3:ef:
0e:18:c6:81:db:1b:31:ba:54:76:78:8d:fa:0a:3d:dd:b2:7b:
70:ef:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:15:29 2025 by rpki-client