Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: lJP4unTS5rLY3uhFhHIgJc4Maw3lThlB6yCgq6wE0RU=
Subject key identifier: 08:6F:47:5D:E5:02:7B:01:CD:5E:D7:74:EE:C0:66:DF:1E:A2:66:A2
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 0194BD8572515B96765DD75AB41C67B78AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0988
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 73uSq-4SpKYBlu8UyOkPNp8T3oY.roa (hash: eHXgeezor68DXIBHnGvx5JBB1RTU4U01+LKJIzrEQ2Y=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: 4o3r0j2BIYnkvEAUhYe1Bnb5Uors6q7pPS/d2uGSZQ4=)
3: yJ-9j6tRpdKk-GFLV0SBT1f-MI8.roa (hash: jBvE4ke7f2F6bxOGDEJqDLyBHAXM7HnAfgODdq4G0kY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:51:5b:96:76:5d:d7:5a:b4:1c:67:b7:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=086f475de5027b01cd5ed774eec066df1ea266a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:48:11:64:c2:5a:f0:36:c7:c7:45:97:26:
c0:51:ab:9b:4d:ea:68:48:95:3d:53:a1:c7:57:04:
3c:67:8b:1d:1a:fb:fa:30:8c:ec:42:35:de:e3:2e:
1d:96:37:f0:0e:28:29:93:19:72:5f:49:56:40:5c:
a8:13:df:30:a4:67:a6:fb:ea:5a:96:6f:ba:64:01:
8d:3a:9d:3b:89:96:9f:85:b1:17:eb:92:20:91:da:
5a:9f:d7:80:56:dc:99:da:23:69:70:55:04:67:12:
19:92:10:dc:38:e8:d1:d6:a7:42:db:18:55:1f:27:
72:fa:84:1e:41:01:33:f1:bd:e0:2e:06:b2:75:29:
7b:01:26:20:2e:48:bb:52:60:13:82:a4:e2:62:f9:
c6:b4:4a:cd:d9:39:3f:45:60:da:bc:fc:e4:f1:d3:
1b:68:36:05:f4:d2:58:22:7d:58:35:8c:e4:ed:06:
1b:78:3e:4c:7a:e7:54:8e:84:84:8e:aa:bb:f7:51:
e3:cc:83:e0:f7:2a:b7:be:b3:44:6c:13:66:9b:25:
f8:3f:e7:93:5d:31:72:ac:17:ea:23:c6:9a:24:f4:
a3:b7:26:83:66:c9:30:2c:60:bb:1f:b9:94:f8:19:
5f:c5:48:d2:6e:b5:2f:03:bb:df:09:01:cd:da:6f:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:47:5D:E5:02:7B:01:CD:5E:D7:74:EE:C0:66:DF:1E:A2:66:A2
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:5f:03:c5:6b:75:0a:ce:a7:94:10:e0:9c:65:23:ce:4b:
7e:d2:b2:6a:36:23:c6:0c:10:8e:45:3f:6b:d9:04:d5:8b:5f:
41:19:c4:46:7e:26:9b:d8:99:f0:ca:ec:7a:2f:23:04:74:b2:
d3:3e:27:04:76:85:3e:55:bf:dc:5e:f9:d8:47:bc:50:45:c8:
60:af:ac:b9:0d:3a:36:29:0f:ad:a7:55:f9:4a:f0:55:dc:28:
dc:ea:2c:ff:31:ac:44:89:ef:ac:63:d1:d9:1e:6c:9c:72:f7:
95:51:b8:0d:6e:0b:f8:a8:c7:88:2c:bf:81:6f:16:60:bf:29:
c3:04:09:88:13:ad:a2:d3:e1:63:ca:f0:e6:3c:9f:aa:c6:93:
72:64:6d:86:d9:73:cf:ce:37:ff:1c:ee:c2:26:46:b3:44:84:
37:8d:56:2b:3e:9d:f8:cc:b8:ae:15:13:3c:53:d6:7b:cb:5e:
82:25:d1:72:53:5f:ab:93:c0:37:84:ce:f1:e5:59:75:47:48:
85:34:89:b8:1f:26:9b:fc:57:88:3c:60:41:ae:94:93:14:e2:
a9:fb:cc:23:60:9c:05:81:34:af:7d:ed:e0:1b:1f:50:54:42:
8e:8c:90:24:b3:63:f0:80:18:f2:f9:8d:24:0b:0b:8a:56:f7:
b6:d2:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:19 2025 by rpki-client