Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier: nbPfHpPewuaQNour47MuEj4aJ7WiIfcLhjTPcYvq7fA=
Subject key identifier: E7:9C:7A:DB:7F:D9:49:D5:75:3F:FA:0E:6F:33:BF:0D:9C:88:94:02
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 0194BC72D334C4A45E7AF38DE07D7D01439C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number: 03ED
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: dwa1SVgeAHbSLLwbTRR7yyl10Qo.roa (hash: EOG7RhGAZwKSmeitaUimX8BvHbJofF1Pbz7/6Kkc5lA=)
2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: Wq9/MHInAGK5Ooy02U7JdiepNMQUazmtMteBVEHGJPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:34:c4:a4:5e:7a:f3:8d:e0:7d:7d:01:43:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=e79c7adb7fd949d5753ffa0e6f33bf0d9c889402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:67:3b:be:07:5b:33:bc:ba:79:29:99:f3:
97:b6:1d:8d:85:6c:22:68:ce:36:41:47:b2:dd:82:
bf:9d:93:93:04:7b:28:4d:86:b2:ab:66:38:a9:61:
b3:19:78:ee:52:61:c3:3d:69:19:24:e7:ea:e6:de:
34:d0:2a:fd:93:fe:c6:be:f0:d9:f4:6d:22:8e:ba:
41:16:dc:48:64:10:d3:da:bc:9d:82:3a:c1:4e:91:
3d:ab:41:63:c0:fa:37:60:6c:0a:c8:6a:dc:76:3b:
3d:3e:ca:42:a6:49:8d:0a:dd:71:24:8c:0c:3d:4c:
b5:d8:40:fd:ac:5c:b9:d9:a1:8e:55:cd:e5:b5:cb:
a3:d8:53:0f:75:99:45:0e:08:65:28:83:e6:fb:e6:
53:9f:cc:b8:d8:96:f7:87:4e:9a:67:96:b3:4f:ca:
e6:f0:93:b7:96:6d:15:6c:80:ae:23:95:e5:40:fc:
49:43:95:ed:ed:98:16:f9:92:fd:05:e6:d1:3e:2f:
39:c9:c9:f6:fd:a2:fd:d9:e1:e1:db:0a:12:09:09:
6c:89:c1:ae:4f:de:fb:6c:8c:01:9e:81:22:07:82:
f0:36:b3:63:53:68:80:04:69:38:09:a8:d7:14:24:
90:e3:da:ff:81:01:8f:48:ff:66:21:32:8b:19:7d:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:7A:DB:7F:D9:49:D5:75:3F:FA:0E:6F:33:BF:0D:9C:88:94:02
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:94:39:29:4b:e2:e5:43:02:35:4e:83:b8:73:a5:a6:ab:
71:55:af:07:60:4f:32:ad:e7:dd:6b:24:b1:3a:b0:4b:33:fa:
5a:96:7a:4a:13:1e:b4:69:b4:23:7f:d2:fc:51:c4:92:f6:77:
28:2e:63:3a:07:5b:32:58:0c:c6:cd:8b:44:d6:67:d8:77:45:
15:25:13:a5:40:00:29:8f:d6:e2:03:8a:a5:2b:00:6d:86:6c:
fd:71:ba:48:1f:35:e8:06:4d:51:e0:cb:ef:2c:2f:b1:69:18:
d1:03:69:47:6a:4a:a3:26:c0:eb:c7:c4:55:0a:15:c8:3c:e7:
fc:8d:57:2d:6d:95:d4:d5:36:58:16:5e:46:dd:e3:23:88:93:
28:a2:80:12:6f:9f:0b:a9:b3:20:bb:2c:c1:2d:0f:fc:10:76:
32:74:ee:1c:ce:c2:47:29:95:65:33:c7:cc:61:26:a4:3f:15:
82:b0:8c:3a:4c:70:bb:da:7d:74:e2:b2:7f:ec:95:1e:56:b7:
d7:15:b7:cd:84:42:1b:e0:ca:ac:e1:89:9e:fc:b4:95:13:0d:
3e:c9:ae:a7:9d:f8:94:fd:96:3e:01:49:26:e3:a1:9c:59:7e:
bf:cf:ba:83:08:52:56:0d:9d:5a:85:13:62:c6:89:cb:0a:c9:
1c:2e:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:41 2025 by rpki-client