Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: pzbyJ5SfvZLWHJZ5aGClE5ZnmFVYMbi8jsvA/7iIPv8=
Subject key identifier: D8:6E:29:AD:1D:21:B2:A4:30:4E:51:94:1C:8C:73:BB:07:82:5C:E2
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0195E046A2A526A30ABA78F3766793BE9680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0424
Signing time: Sat 29 Mar 2025 05:01:20 +0000
Manifest this update: Sat 29 Mar 2025 05:01:20 +0000
Manifest next update: Sun 30 Mar 2025 05:01:20 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: t8/25GPJM41xQo/cQAbWtSWsW192Q3zyba9+toNduEk=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a2:a5:26:a3:0a:ba:78:f3:76:67:93:be:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Mar 29 05:01:20 2025 GMT
Not After : Mar 30 05:01:20 2025 GMT
Subject: CN=d86e29ad1d21b2a4304e51941c8c73bb07825ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:d8:6e:bb:b1:16:90:a6:94:05:83:25:db:
17:f3:d4:84:34:f3:ef:36:a2:f6:93:f9:47:ad:5e:
52:4a:d6:64:cf:09:82:0a:78:8a:ad:8b:24:94:2d:
90:16:23:43:0b:2c:c7:30:f4:d7:f5:66:fa:dc:d2:
cd:95:38:f7:32:5e:57:f6:38:74:66:b9:6b:80:39:
1d:7f:d4:e7:b8:f8:7f:69:59:27:95:c0:21:08:6d:
c2:59:16:af:2e:06:fc:ff:b4:df:c7:81:a5:f5:27:
fd:6a:75:d6:76:c8:f2:a3:4d:dd:ce:04:82:c9:99:
3a:d3:b7:84:66:50:26:37:e1:bc:c4:34:99:43:87:
0f:1e:bd:89:95:7a:72:9e:43:bb:66:87:3d:00:ac:
63:0b:c8:44:1b:59:9b:8d:f3:65:fe:25:70:8a:99:
e3:9b:2d:e7:70:de:15:36:fb:a2:4f:29:27:fb:12:
09:f5:88:cf:5a:86:4a:18:a7:da:94:70:c9:76:8d:
38:0e:42:32:32:03:76:2c:84:59:56:5d:3b:f6:5f:
82:05:96:3a:b6:89:f8:05:bf:ac:5e:38:a9:32:bc:
38:65:53:1c:5f:d7:2e:cd:e8:9c:73:3f:a1:95:1d:
9f:b7:d8:0e:e4:17:6f:80:be:90:b5:d2:ec:ca:9f:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:29:AD:1D:21:B2:A4:30:4E:51:94:1C:8C:73:BB:07:82:5C:E2
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a8:db:86:c9:9f:30:4c:94:91:46:49:cf:34:a7:44:0d:d2:
0c:0e:97:f0:12:68:3e:6b:d3:93:dd:d0:58:da:95:f4:47:95:
f0:81:0e:6f:e1:83:82:61:5d:0c:00:68:bc:96:08:69:6a:e7:
7e:71:40:27:18:2b:9a:a1:4d:f7:03:77:b2:5c:bf:70:8e:6f:
f5:bb:80:5e:d2:67:2c:39:94:d4:54:07:28:2e:6d:21:f0:4f:
03:cc:3d:0d:ef:18:4c:50:e6:ed:80:c7:cb:63:39:e8:fd:e9:
9f:9f:73:15:97:cc:84:c4:d1:d8:31:27:ca:e4:52:0a:eb:3b:
01:36:de:4a:b1:e8:ad:9b:fd:a7:4d:aa:8f:99:03:1e:96:f9:
38:e2:51:e4:28:1b:33:48:ab:fc:75:c4:a4:77:26:7c:85:d8:
14:be:a3:d7:22:14:c5:1f:a2:50:82:9c:ae:64:18:a9:5c:c8:
a8:7d:c9:73:07:13:55:d1:71:db:82:a8:b9:21:dd:fd:33:b1:
cc:c8:ee:ca:be:f7:e9:9a:af:e3:08:1e:4e:39:27:85:f0:57:
7b:6a:41:55:f9:a3:9e:5b:87:cd:48:7c:57:13:d8:14:fa:c3:
45:30:4c:f9:50:a2:9f:46:95:6f:fb:f9:b2:a4:8c:e2:85:c3:
74:9c:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:16 2025 by rpki-client