Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
File: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft (raw, json)
Hash identifier: IiY6CqQLiWpElWYp+fMU6SDBRaS1opKBTWN92ghpHjc=
Subject key identifier: 15:E1:65:9E:C8:22:9F:FD:28:66:AB:A2:19:F3:4D:1D:FD:0F:07:5C
Authority key identifier: 38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
Certificate issuer: /CN=385e4d3a6709740dd91b98f5590687b5d596d806
Certificate serial: 01957DFF48556CBEEF377DE833E8FD79C21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
Manifest number: 07CF
Signing time: Mon 10 Mar 2025 03:00:36 +0000
Manifest this update: Mon 10 Mar 2025 03:00:36 +0000
Manifest next update: Tue 11 Mar 2025 03:00:36 +0000
Files and hashes: 1: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl (hash: eDXMeLasIsnVvqnzKOf4qtL//3jCL+xTcPK2EA3tvEQ=)
2: TVBkLaoLTbZvpjLbalS7glwR5v0.roa (hash: NyRdJ1RerGLrv+6c6D9h46guT6HckjnV+W2YgJhma+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7d:ff:48:55:6c:be:ef:37:7d:e8:33:e8:fd:79:c2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385e4d3a6709740dd91b98f5590687b5d596d806
Validity
Not Before: Mar 10 03:00:36 2025 GMT
Not After : Mar 11 03:00:36 2025 GMT
Subject: CN=15e1659ec8229ffd2866aba219f34d1dfd0f075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:1d:74:06:25:fa:d5:fd:a6:cb:96:6b:fc:
de:7d:ee:e7:60:b2:7d:5c:3c:e2:ff:d1:d0:dd:6b:
73:fe:e5:7c:73:57:4b:f3:2d:2a:55:3b:d1:c5:b9:
cf:c5:cb:27:96:96:a2:47:9a:b9:be:fc:d8:1c:7a:
7b:d7:aa:28:68:19:70:17:9c:ed:3f:b2:4c:61:bf:
c6:2e:db:b9:a9:25:87:e7:2b:c7:84:e1:f4:88:f4:
75:9e:6c:b7:7a:5b:fa:fb:19:cf:60:2c:98:02:4c:
02:ba:3e:fd:d5:c0:b3:fc:ef:c1:f5:64:ff:2e:f6:
85:40:fe:b7:e1:1b:70:40:39:2f:e6:5b:0b:4b:16:
51:9e:e0:d9:1d:f1:81:5f:a0:bb:59:03:04:23:ed:
04:ac:f8:e3:a6:23:27:98:22:72:34:b5:a5:0f:33:
95:86:11:93:86:95:50:4e:1d:06:e1:76:0b:e2:53:
eb:bd:a9:ec:a8:d0:5b:a6:a7:63:bb:50:81:49:8e:
06:5a:84:52:34:ec:cb:24:91:28:1d:bb:50:94:e9:
1e:84:d5:34:f0:60:6b:47:e6:bc:bb:76:cf:86:03:
4c:62:74:a7:43:31:ad:0c:b8:d3:d6:39:59:4a:ea:
1d:c4:b7:d8:e1:28:3e:6b:d7:e7:15:8a:3e:79:e7:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:65:9E:C8:22:9F:FD:28:66:AB:A2:19:F3:4D:1D:FD:0F:07:5C
X509v3 Authority Key Identifier:
keyid:38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2e:78:d5:f1:f6:da:cf:e3:5c:66:54:07:83:6b:a2:dd:13:
c9:ec:23:89:12:02:89:d6:54:09:a0:54:4a:76:9f:8b:60:ff:
27:fa:f7:0a:43:1e:3d:58:b6:27:ff:6e:e4:81:15:06:c0:6c:
d9:bc:eb:41:30:d7:5d:3f:fc:42:28:f6:79:32:4b:d8:27:c2:
3a:f5:d3:30:13:53:67:43:0e:f3:69:72:c1:d3:4d:43:73:26:
4f:dd:77:88:99:6f:ef:f0:98:86:a0:32:77:cf:4b:f7:68:34:
2b:7b:46:84:03:b9:0f:a9:49:79:cb:6a:4e:ee:4c:d9:ae:c7:
d9:f4:17:e5:70:b4:a1:56:62:2d:d1:e0:ac:f8:59:d3:ce:80:
d4:36:ba:b4:ab:74:e9:6e:6b:10:9c:25:da:37:8c:94:fa:6a:
55:1f:0a:4b:e4:d5:3b:99:72:58:f4:1b:38:da:69:93:77:9a:
fe:3f:92:c9:1c:c7:f2:30:8d:ef:fa:af:ed:d8:96:21:21:3f:
aa:b5:45:82:74:e9:e6:e9:10:c4:6c:a9:dc:3a:7c:cf:b2:24:
dd:30:5e:6f:b8:fd:a4:fc:0e:5e:25:5e:09:53:c1:d3:c8:89:
a7:05:a7:6d:7b:7c:30:b3:f3:71:a1:be:24:aa:23:a5:d4:38:
ad:8e:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:19:48 2025 by rpki-client