Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: hdy8MMxvRL19zdK8tpbWgGXJVrQD4Y4X+a3CZnkG6og=
Subject key identifier: B5:11:11:F8:C2:D4:17:E3:BC:9F:18:05:7F:6D:CA:3A:03:BF:92:52
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 0194BC3C3079CDD54E7C487EABA3925A5DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 126F
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: y9QJlE9NQKP4VlmfwzLS+4EDCHnIwQf4puCesq/S6ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:79:cd:d5:4e:7c:48:7e:ab:a3:92:5a:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=b51111f8c2d417e3bc9f18057f6dca3a03bf9252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:86:83:9e:5b:62:dc:44:c8:30:3b:7a:85:
88:6c:2e:55:1a:1a:58:1d:cb:a6:d0:a8:3a:60:7c:
d5:a8:95:a9:ba:a2:1a:22:88:51:e1:93:a0:02:ac:
04:ca:7b:7e:6a:7d:d5:bb:6c:46:e3:ef:c2:c9:b7:
8b:f6:6a:9f:80:db:6a:82:94:b0:ea:03:3a:dc:86:
0c:6a:d4:29:6e:e6:a4:b1:fd:11:9b:58:97:d6:35:
b6:04:28:1e:39:ed:02:0a:ce:ca:da:4d:db:c3:11:
75:95:cd:f5:5a:bf:b8:1d:18:6c:9e:c8:e6:70:f0:
83:ca:2b:b4:5c:96:c6:b2:60:4d:50:05:28:ca:d0:
cc:64:6c:3a:a9:b8:bd:c2:09:35:30:19:a5:e8:3d:
c2:8d:76:e5:ec:75:15:a6:49:c9:41:47:76:ff:18:
8d:56:4d:24:fc:f2:76:f7:28:23:9a:28:a7:9a:42:
6e:a5:27:9e:34:d8:aa:ab:62:0f:12:16:6a:6b:c8:
97:d4:25:18:6c:7f:2e:75:96:46:a8:d1:f5:a0:47:
de:c6:ef:cb:2e:b8:7d:64:02:8d:23:fe:ca:ee:41:
5f:93:ae:ee:15:69:b7:f1:3b:7c:39:b0:80:f7:47:
cb:c6:e4:ae:9b:a0:4a:e2:90:c4:7a:13:21:9c:5f:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:11:F8:C2:D4:17:E3:BC:9F:18:05:7F:6D:CA:3A:03:BF:92:52
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:b2:e1:54:5e:5b:79:59:ae:8a:b4:dd:b1:1e:fa:b9:d8:
82:4e:3f:53:3d:fa:f7:90:56:59:e7:50:ff:a5:8b:73:c0:1a:
30:dc:22:c4:7f:d6:61:c7:3b:96:ea:6c:7e:11:00:8e:e9:e9:
53:10:30:95:73:2d:42:b1:5b:f0:e8:cc:c2:2b:29:ba:9a:39:
44:92:c6:a4:1b:75:83:d5:ab:5c:30:5e:4e:d5:ef:a1:36:49:
1f:fb:07:cd:14:a8:bc:53:e1:5b:f6:42:d8:4f:79:c4:22:a7:
a8:d4:1b:bc:98:08:e6:20:91:46:50:5f:43:62:ac:a6:c3:e4:
cc:c3:f7:5b:39:97:2a:d6:46:da:50:91:87:b9:38:c5:b1:91:
f1:1c:22:28:c7:b8:e3:d5:c7:60:ca:a7:df:09:18:b7:2d:6f:
48:be:48:c8:6e:13:3c:31:dc:e6:3e:42:de:68:d9:ba:34:bf:
45:6c:08:8a:f6:de:be:e3:fa:5f:b5:de:97:34:c4:a5:5b:e0:
82:a2:c6:43:7c:67:f2:8a:3d:9f:3b:ac:9a:58:14:e7:fd:d3:
cf:86:05:60:a0:08:5b:6f:aa:dd:6f:c9:36:91:bd:92:98:ca:
ec:21:8f:f1:9f:8a:57:4e:1a:c9:56:f0:2e:12:18:e7:20:a7:
ff:f8:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:21 2025 by rpki-client