Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
File: O8iOk9iVAzFkvO-XU52MidZxfas.mft (raw, json)
Hash identifier: TH9v5y/TITB4DivU1sEKqtVvi7eqCHRTcw71et3q/BE=
Subject key identifier: 7D:C5:5D:72:13:15:0D:CE:9A:A4:73:81:9B:07:3F:8A:DB:FB:09:6E
Authority key identifier: 3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
Certificate issuer: /CN=3bc88e93d895033164bcef97539d8c89d6717dab
Certificate serial: 0193B906B5EF89CC8D9F402DFBD31C67E7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
Manifest number: 13A2
Signing time: Thu 12 Dec 2024 04:00:44 +0000
Manifest this update: Thu 12 Dec 2024 04:00:44 +0000
Manifest next update: Fri 13 Dec 2024 04:00:44 +0000
Files and hashes: 1: GqdYxxm-z9v5v0Yj8m-6Y9VXjjg.roa (hash: KYzjTpHmjuq4/Y/CcyOvng8tF2cucBkxu+/DmHWpgIE=)
2: O8iOk9iVAzFkvO-XU52MidZxfas.crl (hash: N/EEWgtTl6IHQuOXAFL7QJ6qL88VgEvB3twaE+XmWUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:06:b5:ef:89:cc:8d:9f:40:2d:fb:d3:1c:67:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc88e93d895033164bcef97539d8c89d6717dab
Validity
Not Before: Dec 12 04:00:44 2024 GMT
Not After : Dec 13 04:00:44 2024 GMT
Subject: CN=7dc55d7213150dce9aa473819b073f8adbfb096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:37:9b:86:f0:f7:e6:a1:e2:9e:75:c4:0a:
18:d9:c5:1c:1f:4a:d5:52:06:0d:8d:86:31:53:ce:
ce:24:f1:df:28:a3:f5:7d:1b:bd:31:77:a3:68:e0:
02:27:ad:bc:96:42:f2:0f:3b:b9:8c:3a:54:da:43:
54:e8:b5:eb:d1:30:64:fc:d2:54:db:5b:54:72:db:
31:b4:50:90:90:01:94:67:9d:7b:59:66:e6:22:6b:
a0:c5:62:f9:ae:64:6d:2b:69:db:25:96:f4:23:2f:
a2:90:75:24:3a:49:42:23:4d:dd:97:fe:de:43:00:
39:f4:2c:cf:f6:42:11:4e:1e:fd:39:6d:a9:63:15:
b5:69:ea:9a:da:a4:f9:93:74:e4:ec:3c:28:6b:bf:
61:78:2c:3a:95:df:21:4c:17:7f:90:b5:63:73:ca:
7d:a6:fc:59:8c:74:47:df:48:e8:c4:04:91:35:1c:
32:9b:ad:73:c5:4d:b8:96:76:7c:53:d1:42:12:b0:
58:3d:54:07:09:f2:30:c4:27:4e:62:e5:9b:42:5c:
b0:01:1a:d2:16:8f:6a:12:26:a5:b6:a7:2e:96:21:
03:09:ed:c9:00:eb:a5:98:cd:7a:d3:a2:19:97:c8:
b7:0d:b7:40:74:6b:dd:40:d5:b7:a6:94:1c:ae:d7:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:5D:72:13:15:0D:CE:9A:A4:73:81:9B:07:3F:8A:DB:FB:09:6E
X509v3 Authority Key Identifier:
keyid:3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8f:62:ed:6c:79:27:23:ff:58:15:88:61:a5:61:62:df:24:
aa:3d:b6:15:13:c8:6d:95:56:a5:9a:0d:3e:c4:52:63:65:97:
37:3b:89:c5:38:51:53:94:62:29:31:d5:8b:73:21:d3:ba:9b:
cc:5c:e5:7f:0b:4d:65:67:68:6b:c9:97:93:6c:89:bf:13:c2:
bc:c0:52:a3:18:dc:73:1f:9a:04:c8:49:05:79:32:fb:c9:61:
94:db:77:4b:85:0f:13:f7:7f:51:5e:7d:8c:c8:77:c2:5e:fe:
bc:1c:9a:cc:76:b4:fc:17:7e:4d:d2:fb:ba:66:8c:98:2e:f6:
be:5c:ed:69:16:b0:89:82:cb:8a:97:fd:89:90:66:a1:f8:dd:
17:bb:4b:84:b8:07:77:3c:57:50:ed:05:58:8c:e8:33:45:91:
51:a0:46:fe:76:65:3b:a5:01:83:a0:e7:f4:ff:21:7b:b1:db:
f6:96:67:40:ec:31:ae:c1:b6:aa:27:b4:0a:60:5f:3d:2f:5b:
1a:b5:40:9a:d2:4b:62:0e:77:d4:aa:68:e8:73:03:cd:7b:41:
1d:72:4c:80:60:65:dc:6a:a8:ef:32:a5:b6:61:81:8f:85:29:
cb:54:5e:e6:d0:02:1b:03:fd:05:fa:7b:b9:9d:67:ef:31:27:
b9:d2:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:08:53 2025 by rpki-client