Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: OwkdnhmzMk3T4qSjlVycywoFwkRbbGWOLa3TSnHw+0o=
Subject key identifier: F4:F1:9A:BC:CB:74:C6:ED:AD:CE:07:E1:A7:8A:F9:CF:D9:A0:12:05
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0195DFD987EA6B9D411EF8BB4C0E4867B4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 31
Signing time: Sat 29 Mar 2025 03:02:10 +0000
Manifest this update: Sat 29 Mar 2025 03:02:10 +0000
Manifest next update: Sun 30 Mar 2025 03:02:10 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: 6U3q22HjQMLYbgy9bWw8CLmU4MAYerc9emMFIQiyybc=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:87:ea:6b:9d:41:1e:f8:bb:4c:0e:48:67:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Mar 29 03:02:10 2025 GMT
Not After : Mar 30 03:02:10 2025 GMT
Subject: CN=f4f19abccb74c6edadce07e1a78af9cfd9a01205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:ce:e3:64:ab:a3:04:b8:4b:57:24:b2:6a:
c0:07:d6:ba:5a:60:a2:dd:bf:ac:58:00:5e:9e:91:
43:81:4d:32:3e:2c:af:57:89:02:25:ea:52:f6:7a:
c0:2d:61:88:ae:22:07:80:3b:4b:4f:5b:86:82:cc:
8e:3d:be:27:6a:a3:6f:c1:bf:5b:15:fc:4c:b1:66:
2d:fc:65:70:40:dc:11:ab:a9:db:4b:d8:0b:65:3c:
87:27:37:5a:40:e9:3a:04:0a:8c:a3:7b:0a:2f:fe:
ef:a4:a7:0f:56:33:0e:4c:53:c3:e4:50:d9:22:39:
23:1c:6c:30:ac:2e:dd:47:4f:b9:af:d6:67:4a:e4:
76:c5:1f:ff:5a:0e:07:01:f5:7c:93:8c:39:d9:e2:
38:83:e4:9e:10:be:a5:4e:9f:97:44:63:95:ae:f5:
09:4f:1c:68:5f:a8:1e:a5:02:7d:0b:aa:fc:6d:1d:
1d:fa:f8:d9:60:d1:1c:57:47:24:13:f1:ca:46:61:
15:a6:b4:92:b3:79:4b:a6:f2:4c:cc:2c:45:9d:c4:
ff:22:91:e5:4a:aa:de:ad:c1:ba:5a:13:48:fa:37:
2c:36:f6:8e:a8:09:bf:ee:a4:91:93:e7:f5:12:79:
77:2c:2b:5d:a0:57:0a:d4:2f:a0:91:8e:63:4d:fc:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:9A:BC:CB:74:C6:ED:AD:CE:07:E1:A7:8A:F9:CF:D9:A0:12:05
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5a:60:46:b2:a5:74:b1:7c:da:11:f7:6a:8a:fc:ac:14:a7:
fe:68:96:bb:51:5e:b0:d4:b2:36:23:ff:77:79:65:51:71:da:
fd:97:f1:96:1e:cd:64:72:3d:c6:47:bc:c9:30:a1:ea:0b:69:
bd:14:d5:bc:e3:2e:9a:a1:ae:fe:6e:fe:4d:30:44:44:74:2f:
98:07:a0:48:bb:bb:e6:0d:53:39:00:fc:4c:bd:99:5d:e1:1b:
cc:80:3c:9e:57:18:22:d8:4e:8c:30:b5:d9:33:01:b3:69:fc:
92:c4:aa:69:b9:b8:8e:d9:c4:8f:76:17:79:fb:48:56:c9:34:
53:4e:df:1b:47:90:8b:a2:3f:bd:56:bb:bc:8e:7b:f0:ed:1d:
d9:05:2f:7a:6c:f1:4a:3e:9b:40:33:fb:12:cd:ed:ef:7f:f9:
93:2c:60:a0:1e:cc:b2:ce:65:a3:21:de:d8:b5:1d:9f:b9:aa:
ab:79:69:91:01:bb:97:85:8e:67:14:73:65:be:b8:bc:43:02:
a2:53:96:94:30:61:91:06:c5:91:3e:5a:6b:5c:09:07:03:7e:
bc:68:2f:7c:f9:58:7a:10:aa:c8:6a:da:d0:61:9c:78:f9:ee:
ae:ea:44:23:83:b7:4c:40:0c:3e:71:54:58:5c:f6:ef:44:44:
2a:e8:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:33 2025 by rpki-client