Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
File: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft (raw, json)
Hash identifier: shhsQAqFoq4SCn09ovYMKyGw3GRhyafkLwaZqG/Kuvw=
Subject key identifier: FC:EE:91:20:93:85:F5:B1:0D:8C:43:B9:C0:89:FB:ED:6E:81:05:9F
Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
Certificate issuer: /CN=a09fda047b3a0b1c820435e699388660da32c63f
Certificate serial: 0194BC0518E82447C502AF9588615CFAD014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
Manifest number: 0385
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: FfIlEvStYRtAHT_4tgisj2sboIA.roa (hash: u8VtTRQomqZri4fvKgtiux4C4c/ZHFagnd78Z59URa8=)
2: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl (hash: 8b7lUvylU/RanPADT+ZDHEyo+xfwiCXfvANMfI4NfsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:e8:24:47:c5:02:af:95:88:61:5c:fa:d0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=fcee91209385f5b10d8c43b9c089fbed6e81059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:b1:91:82:bb:98:26:fe:b2:63:83:8c:5f:
42:f5:6a:e1:92:06:c8:18:92:31:21:20:b0:aa:0f:
04:2d:5c:3d:47:8a:9b:0b:ed:ea:cd:06:95:5c:e0:
5a:f4:de:79:bf:8c:44:e9:ac:b3:f3:af:9e:7f:41:
1d:e6:46:2a:4f:c8:ff:9f:06:a4:20:25:0a:23:d3:
66:e6:4d:2f:68:94:b1:76:7e:ac:13:ee:5c:20:58:
c2:00:79:f6:8d:af:3b:8e:0f:70:fc:5d:68:a0:b6:
b8:cb:f5:eb:d1:55:6c:ce:e7:ae:18:13:cf:35:cf:
f4:77:89:ef:48:69:f5:a6:90:98:f8:d6:36:fa:87:
36:67:bd:0e:fb:68:29:88:92:f4:fa:01:41:58:24:
ae:09:c3:ad:a5:c7:ac:26:cd:73:a7:92:3b:a8:2a:
d1:b3:28:ab:c6:e4:18:a1:ee:7a:3e:26:e6:d7:f6:
7c:65:da:d2:48:6c:df:7a:a1:f7:05:eb:49:12:17:
ce:8f:7e:ca:d3:df:05:53:5a:ac:97:29:d2:85:77:
7d:0e:b9:d7:51:0f:61:3c:0d:51:29:41:4c:c4:35:
6e:7f:e4:0b:f6:3d:fd:58:70:d5:79:7e:5d:13:19:
af:ac:f4:8d:2e:93:85:5b:a5:7e:e6:a4:f9:ad:84:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:91:20:93:85:F5:B1:0D:8C:43:B9:C0:89:FB:ED:6E:81:05:9F
X509v3 Authority Key Identifier:
keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:f7:42:d5:33:1a:cc:30:ce:a4:c5:08:bd:4f:24:ed:8d:
e2:fa:da:fe:4e:5c:ec:af:7d:6c:84:47:ff:c9:7b:3a:90:75:
29:a3:84:7b:92:c1:f3:ef:db:2e:3a:63:76:6a:9e:e6:61:c1:
41:c8:b4:81:e5:47:9b:fd:b8:f0:3e:9a:a5:4b:bf:1a:9c:f0:
8d:b8:c6:29:79:22:9b:e4:53:75:d5:62:42:e0:3d:a1:cd:fc:
66:74:45:63:a4:87:20:6c:1e:e3:83:b8:b8:e0:b0:e5:a0:d8:
11:03:f8:fb:6e:33:c6:7b:e6:99:9f:48:a6:67:61:2c:11:39:
41:22:84:7a:e1:fa:70:f9:b0:56:bc:5e:ed:1c:59:98:2d:14:
82:86:46:a6:2c:43:6c:a0:e0:d5:4e:e5:ac:98:fd:0f:f0:cc:
ac:a9:e4:97:6e:b3:26:a8:fa:14:27:83:4d:91:97:45:b6:76:
73:7d:d1:58:cb:ff:0a:c2:5a:6e:2c:86:f3:7a:9b:93:c9:00:
31:6c:30:ab:3a:e5:97:4c:89:f9:67:c4:3c:7e:d2:ba:cb:7e:
95:f1:a0:4e:71:c8:3d:7f:01:66:43:e4:a3:02:d4:d3:d7:6a:
c1:81:6f:cf:47:79:3f:57:ac:41:d6:d2:2c:cd:f5:03:e2:cd:
fc:c5:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:40 2025 by rpki-client