Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: UNoibOhGWtxkf5//VgHaeRXn5FDQ5ZhJAY5lXss8R98=
Subject key identifier: 2C:47:6B:BE:A4:07:69:10:5A:A1:C9:9A:98:AF:C1:72:F5:40:CA:DC
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 0195DFD8F00D0A514ECB2A4B2B51279B9EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 0E64
Signing time: Sat 29 Mar 2025 03:01:31 +0000
Manifest this update: Sat 29 Mar 2025 03:01:31 +0000
Manifest next update: Sun 30 Mar 2025 03:01:31 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: UYnKux8P24/wuvPZzR0F/PwVup1T+F2RGjbw8UY7Og4=)
2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f0:0d:0a:51:4e:cb:2a:4b:2b:51:27:9b:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Mar 29 03:01:31 2025 GMT
Not After : Mar 30 03:01:31 2025 GMT
Subject: CN=2c476bbea40769105aa1c99a98afc172f540cadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:3c:a1:36:d6:0e:d4:da:83:e5:e6:e8:df:
d4:a7:d9:d1:73:b7:ce:9d:8b:6e:df:d6:11:a6:ac:
2b:b1:76:1a:1b:f9:f3:98:30:d0:09:82:d1:62:c5:
00:b3:23:74:a8:a4:a6:f4:56:e3:e0:f5:39:8b:56:
53:7b:9d:93:2d:56:81:a8:19:18:a5:6b:e2:14:fe:
25:48:5d:d0:d2:db:96:c5:bb:c5:f5:89:79:84:b6:
48:6f:04:da:d9:ac:93:8a:b5:da:5d:1f:c8:9f:f5:
87:e0:50:e9:22:4a:83:26:66:5a:2a:9e:bf:ba:4f:
f7:07:4e:9f:22:aa:88:fd:e7:d0:b9:97:6e:75:ac:
70:d7:72:e6:b6:0f:7b:3d:ed:f3:50:30:8e:fc:b6:
9e:01:20:ff:b5:ff:e2:53:05:6d:6d:7c:ce:93:fc:
f5:b7:4c:b9:4b:77:3b:6b:f7:d2:be:6e:a3:06:7a:
d8:23:cd:7d:65:ff:8a:bf:f9:37:2e:fe:f3:31:6f:
70:42:09:c9:a6:69:af:22:dc:f2:a9:76:92:87:2d:
d6:c2:7f:19:39:f4:d3:7e:28:09:4d:30:d9:ff:ed:
69:87:83:ef:bf:58:4f:29:ca:05:a7:56:2d:ae:0c:
34:39:d8:49:5f:6e:cc:ac:80:b6:0b:e2:a0:7f:26:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:6B:BE:A4:07:69:10:5A:A1:C9:9A:98:AF:C1:72:F5:40:CA:DC
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:66:f6:e8:ba:30:1a:fc:15:02:10:ef:97:81:43:d0:88:75:
db:b4:f6:86:06:88:61:f4:11:97:aa:5e:b9:a3:3b:4c:38:8c:
0f:b7:e1:b4:64:d2:11:43:cb:55:29:2c:c0:c4:37:5d:df:ee:
a9:67:3e:5b:49:0e:58:e7:a3:a7:81:4b:68:f7:6a:93:ae:67:
0d:42:75:ce:4d:9b:07:46:07:4d:68:6e:29:16:61:d2:e4:e6:
e2:3e:29:64:61:dd:cc:19:2e:48:09:ec:c8:51:24:5e:8a:fc:
e9:36:3e:a2:f4:68:46:57:eb:87:c1:85:b3:4a:9a:f8:f3:7d:
8c:51:93:77:ef:d9:49:05:97:35:4f:2c:c2:60:7b:21:ff:e6:
cb:ac:df:81:06:60:03:83:32:0c:a9:36:ef:5b:3f:09:14:47:
1e:89:52:ee:ab:0d:5e:46:8b:f5:78:02:b6:ca:05:af:10:e5:
0d:88:4a:99:9c:8a:77:38:7c:8a:a5:9c:3d:1d:83:f2:d2:73:
a9:eb:2c:a0:8e:9a:95:4b:52:e4:a9:70:d7:94:5c:10:c2:56:
28:12:2e:bd:1b:4b:72:d6:15:68:bd:b8:ea:2d:53:be:c2:cc:
5a:20:81:19:1b:89:c0:74:04:1e:03:55:eb:ff:db:af:7a:1e:
61:d4:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:44:44 2025 by rpki-client