Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: dN4aeahz5sqbPaS/G5oQhHhgWPxobFHlYuqESyCU63c=
Subject key identifier: A2:A1:A9:99:B9:A0:B5:43:72:7E:96:B5:25:C7:2B:DD:96:92:C1:EB
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0195E159E52F746E4FCD1DAB998A914C9A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0819
Signing time: Sat 29 Mar 2025 10:01:59 +0000
Manifest this update: Sat 29 Mar 2025 10:01:59 +0000
Manifest next update: Sun 30 Mar 2025 10:01:59 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: F5u/Y1ESeRUXBNWGrkwJjBT8x54A/yHVGRkifOpY4pQ=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:e5:2f:74:6e:4f:cd:1d:ab:99:8a:91:4c:9a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Mar 29 10:01:59 2025 GMT
Not After : Mar 30 10:01:59 2025 GMT
Subject: CN=a2a1a999b9a0b543727e96b525c72bdd9692c1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:47:3f:16:2b:c8:9a:72:3c:d7:b7:e1:55:0b:
2f:eb:ec:84:0b:c3:12:9e:60:90:6e:56:30:f9:8e:
73:5f:ca:69:57:a3:c3:dd:6b:e6:d2:d5:6e:93:c5:
3f:b4:fa:fd:dc:60:42:78:e1:dc:2d:d5:03:61:7d:
64:ea:12:9f:d5:8f:bb:ec:bc:2e:a3:39:ff:c6:60:
5e:81:07:d4:df:51:b5:f9:dd:c0:97:01:3a:5a:81:
8d:76:e8:b9:1a:14:f3:96:29:5a:5e:f5:75:9f:35:
47:e3:18:0f:af:2f:96:dd:1f:af:ac:3f:74:24:37:
46:ce:79:1f:77:cd:e7:80:97:f5:3e:4e:3b:81:e8:
df:54:37:fd:ed:87:27:db:2f:5a:9c:a5:7c:f6:0e:
e4:1b:f4:00:f7:a8:73:39:0c:93:16:fc:4f:e3:48:
bc:59:d5:39:82:92:50:5c:3d:8e:f2:25:e5:2a:d9:
fb:51:7d:5c:fd:27:22:01:42:2a:c6:ed:41:a2:7c:
9e:7d:10:a3:6b:90:23:20:54:05:b9:04:da:e2:55:
ef:76:e9:c9:7a:54:0f:95:cd:a7:d6:fc:34:3e:ad:
eb:c2:4a:c8:37:57:d2:7f:7f:bc:82:12:29:b4:f3:
ff:f3:d1:ae:e8:21:e8:bc:b3:91:58:66:2d:7e:b9:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:A9:99:B9:A0:B5:43:72:7E:96:B5:25:C7:2B:DD:96:92:C1:EB
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b5:83:ae:33:26:6b:3d:35:dd:c5:15:a7:42:e0:77:6a:06:
08:4b:97:e2:8b:82:82:4d:41:98:10:05:df:9f:da:3c:04:7a:
cf:81:ed:03:7d:6e:2c:8a:b4:f6:3f:20:31:52:a9:53:5c:e8:
00:9b:d9:a2:4b:8c:cd:9b:20:01:bd:8f:7c:cb:53:8a:42:33:
1f:ad:c9:c5:2f:45:eb:01:05:87:4c:82:69:be:09:be:2f:5a:
b3:44:37:ec:b9:00:fd:c7:32:e6:34:d3:21:69:b7:19:83:b4:
ff:9c:cc:d3:31:06:97:12:65:7a:82:de:d3:45:3a:92:99:40:
20:3b:cb:59:7b:62:74:93:1e:98:47:ad:ce:fe:a7:9b:d2:50:
2f:51:ff:6d:a4:d2:eb:f5:aa:eb:fe:c3:99:a3:59:08:cc:28:
4d:86:84:74:31:34:b3:42:0d:97:fe:89:34:80:66:8a:c7:93:
38:23:3f:d3:1c:46:3f:c5:52:15:c6:9e:10:12:5c:0f:27:3e:
f9:d8:0c:51:7f:74:c6:95:81:f1:58:3a:95:55:bf:ac:60:99:
5a:fa:82:c9:bb:94:3b:56:6e:a2:c4:f4:64:8e:6a:be:72:e5:
21:04:58:52:9b:96:80:a5:2e:f3:e5:df:7d:06:d5:06:a1:c6:
21:c8:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:23 2025 by rpki-client