Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: vAEkt2PT8PeO6+HPEz4oee5qu0tOGu5YJhzJt8mTIys=
Subject key identifier: CD:D0:DE:34:A1:63:8D:CE:CB:86:D7:81:44:E5:E5:EA:14:79:10:88
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 0194BC3BD81A48C00D6465F8CFDB7C32C19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: GMOXbGYL1MKJgIeF+pgeA7NnyfclhnElkiYdMbf9MV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:1a:48:c0:0d:64:65:f8:cf:db:7c:32:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=cdd0de34a1638dcecb86d78144e5e5ea14791088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:22:23:79:da:b2:14:06:c5:9d:b1:bc:e2:
9e:bb:6c:26:ad:ad:43:bb:ea:cd:3a:67:9a:c4:c2:
12:ee:fd:69:dd:0f:0e:3f:1c:62:88:43:34:eb:0e:
64:0f:7f:e2:9c:63:5f:8e:ff:cb:85:47:7a:5d:f6:
5d:2b:27:e7:57:50:88:10:43:21:b1:83:98:1c:04:
f1:da:c5:61:7d:9c:af:03:f7:f7:be:8d:2d:2c:7c:
8a:a7:e9:19:5b:a7:c4:38:c3:ed:b2:81:a3:2b:6f:
ed:fc:ba:90:a4:fe:ec:bc:bb:cb:41:62:68:f6:87:
ef:af:e6:3d:70:8c:c1:27:d0:01:46:22:87:ae:a2:
51:d9:c2:ea:68:ad:f6:fa:2d:46:ad:74:49:a5:28:
fa:e7:d1:8f:f4:93:9a:fd:26:77:44:08:cc:8f:24:
a4:ab:c5:2c:34:e2:3c:6f:90:4d:0c:13:1d:fb:3c:
dd:e8:50:f7:07:bb:db:e5:30:e4:9a:d8:61:20:cc:
19:b8:7a:31:e9:ba:c3:87:dd:53:2d:03:0c:0f:97:
a3:0d:aa:d3:08:88:ce:3f:e8:c4:ac:75:aa:6f:d6:
34:90:3a:16:bd:81:5b:30:49:24:20:1d:70:a4:bd:
c7:8b:d0:f6:99:81:d8:94:3f:76:cd:dd:81:a8:2d:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:DE:34:A1:63:8D:CE:CB:86:D7:81:44:E5:E5:EA:14:79:10:88
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:97:6e:cc:7f:9a:07:b2:74:ea:61:f8:ea:d4:61:fb:1c:56:
c1:f0:d3:67:ba:de:0e:1e:2b:11:54:52:d9:8a:32:63:6b:05:
b2:ec:97:63:31:69:20:d6:ae:6a:78:6d:5b:67:54:b2:16:f8:
2c:cc:6e:0e:3e:81:f6:7a:7a:ba:23:01:f4:ef:7f:c9:48:6b:
8a:94:ef:34:32:0d:c4:f2:d0:d0:4a:f6:92:d5:05:fe:58:68:
94:c2:86:13:cb:7d:4e:3b:4c:21:b6:00:30:ee:b1:69:2a:8c:
32:4c:38:d6:7e:73:fe:3b:fe:83:90:ad:33:ed:f2:ff:88:1d:
25:da:be:1e:0a:c5:7b:3f:40:04:ab:dc:96:dd:3c:75:ce:b7:
5e:6e:be:b9:e6:10:20:45:97:7b:05:bb:70:79:c2:53:d5:cb:
76:e4:c9:b4:a4:98:d6:a2:42:77:c0:77:52:62:68:9a:98:b8:
fb:14:da:c3:99:f6:c8:7c:ca:1c:a7:47:8e:e3:3e:f8:77:f1:
62:d1:6e:9a:38:74:3e:17:c4:ec:0d:4d:af:e8:32:ba:83:5e:
1e:a5:51:63:eb:42:c8:34:52:19:3e:8b:47:38:7a:f0:3b:62:
5a:93:5c:8f:8d:45:a4:48:6e:05:d5:b0:c6:07:6f:ea:22:6b:
e1:37:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:02 2025 by rpki-client