Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: cH719Go1S47h4ZeH4fkLxxqjBYnOKDin2jW9vKeWfgk=
Subject key identifier: 08:26:07:C3:E0:B3:35:0D:54:12:EF:7A:89:48:C4:FE:18:BA:26:5A
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 0195E0463B01DEB29BC6C1A5DACCC16254CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1280
Signing time: Sat 29 Mar 2025 05:00:53 +0000
Manifest this update: Sat 29 Mar 2025 05:00:53 +0000
Manifest next update: Sun 30 Mar 2025 05:00:53 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: zna8OrHW1PnYwZSqzGXw4Ux9rgoPWMJIVa6FWeBPtLc=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:3b:01:de:b2:9b:c6:c1:a5:da:cc:c1:62:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Mar 29 05:00:53 2025 GMT
Not After : Mar 30 05:00:53 2025 GMT
Subject: CN=082607c3e0b3350d5412ef7a8948c4fe18ba265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:c5:d1:e1:e8:05:11:cb:93:fd:01:97:7d:
74:72:5e:0d:08:83:1d:a8:06:d3:5f:d6:7e:9e:62:
13:7f:34:b1:d2:0f:e0:c4:2e:a0:20:90:18:29:e9:
9e:2c:75:c5:2a:a2:88:7d:54:d7:15:c4:2f:aa:54:
ea:96:ff:4e:19:26:70:a9:e4:a4:be:86:90:8e:d1:
d6:e8:8c:50:84:98:04:5d:37:3a:20:ce:da:f2:6a:
02:e7:94:3e:ba:5e:b4:5e:71:51:ab:8c:79:d9:a2:
df:54:b6:57:5e:2e:5f:34:4c:fe:ec:92:f6:2b:28:
c7:fd:d1:e5:49:5f:7d:5c:d6:28:b4:f9:97:ca:69:
4e:57:08:c3:db:c6:5a:48:29:66:2e:b1:76:dd:18:
73:46:b1:a5:9a:23:8d:0f:1e:28:21:d9:b2:e3:e3:
d1:90:cd:98:83:42:0c:b2:6b:df:e7:62:2f:82:32:
85:7b:e8:fc:b7:6e:f2:88:32:17:26:c9:49:59:76:
5c:2e:bb:69:4c:17:11:13:ce:fc:12:5b:f1:31:96:
e6:66:f7:9a:c2:81:9d:f2:f2:a3:a6:6e:f0:1b:17:
d1:79:fc:2b:69:b1:57:b8:16:c6:00:89:12:5e:58:
56:7d:df:82:0b:7d:c0:b8:3a:0a:c1:03:d9:e6:9b:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:07:C3:E0:B3:35:0D:54:12:EF:7A:89:48:C4:FE:18:BA:26:5A
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:67:ce:b0:e9:d9:e1:de:49:04:01:6a:d0:bb:99:8c:7b:
5a:19:3d:9e:3f:e4:bb:be:20:87:50:b1:f1:ae:1a:56:ad:29:
97:15:57:15:39:3a:8e:6d:4d:81:47:9a:7b:3d:a9:14:f0:c5:
5c:48:43:54:48:a4:52:12:44:ad:2b:11:6a:a1:11:ca:91:99:
c2:f8:6f:cb:78:01:24:01:9c:70:9f:73:87:3e:85:f6:b6:5d:
91:5d:17:b8:6c:83:b4:95:76:38:2d:d5:65:6a:f5:fc:38:47:
1a:86:74:3a:28:59:14:cf:46:3b:80:5c:0a:01:83:94:a3:94:
22:11:31:e4:93:80:14:40:70:63:2f:b0:d9:89:0d:8a:b4:aa:
a0:c7:1c:e8:16:84:3e:ef:be:41:41:20:f6:e1:36:ca:c6:cc:
ab:06:b1:d3:bf:7e:3d:2e:45:a4:f5:04:e4:9b:50:8e:2d:41:
a1:07:d0:13:6e:ad:3c:12:dc:15:df:c8:ce:b5:c5:ab:ea:bf:
fe:9f:9c:17:9b:4a:f8:10:9e:f3:72:36:c9:34:b9:cc:84:b5:
9f:99:17:e3:25:17:71:93:23:30:99:0a:e0:8b:ce:80:14:04:
0c:8d:86:fa:8b:ab:15:13:0d:00:02:28:f6:0f:71:2e:3e:64:
a4:a2:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:47 2025 by rpki-client