Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier: ieAXc20QRtTHnL09MlWyUCMLJgLGI/ihAnn9eQjxKr0=
Subject key identifier: BD:01:BA:2A:AA:3E:D7:22:8E:F2:3A:9E:FF:68:58:D7:CF:51:66:4A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0194BCAA2C761B535B3A7D82B5E6A7AF9DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number: E8
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: us+1hNPQjZNnIh63S++LTsi6yW4H6Lee2vVZhxLZa+E=)
2: ENvbvgI_AcAljgQ_ijDO_xrpJ5I.roa (hash: zAbTH6jIaUntXEMTu7Wz3A1VsZEdBdRzzUXRhwpzd98=)
3: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=)
4: YDFeVGcfCRWwkla5yvVihURp96w.roa (hash: KXYzCuBnwDyE4MCQIyptZv94ewf8cBJZDBMejoQRhWY=)
5: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
6: rxVj7HxUdpCbEmncDNwlrERybAQ.roa (hash: lGsN4Soe7emS1tDACEfDPVW5uJ4WgQ8icgYo5G8FKks=)
7: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
8: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:76:1b:53:5b:3a:7d:82:b5:e6:a7:af:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=bd01ba2aaa3ed7228ef23a9eff6858d7cf51664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:cd:e1:f0:35:4c:10:51:00:7e:6e:74:79:
b8:78:82:e1:f5:be:6d:c7:ba:b6:e4:35:d8:b3:08:
a8:46:56:78:35:38:89:96:49:0b:8a:7f:c3:3b:6b:
7a:e3:ff:9f:7f:ec:71:93:6d:e7:f2:af:88:bc:e6:
05:7e:d8:5f:ce:5a:78:d4:a3:d2:8e:35:82:77:62:
5e:66:00:18:88:c1:3c:cf:eb:59:21:20:00:05:9a:
eb:8b:0c:d2:af:37:c1:5e:e0:84:2d:4b:99:e9:a8:
ae:2d:f8:ac:fd:43:23:35:bd:7f:96:b7:28:0c:d8:
c1:e5:40:62:7c:ba:00:1c:f9:00:a5:89:10:52:a2:
64:20:24:82:d2:ce:56:91:4d:7c:04:6a:b5:de:bc:
4d:e6:5f:36:fd:d1:b2:0d:3a:c8:88:8e:e4:21:24:
86:bc:61:6c:82:72:13:25:a0:38:24:60:69:e8:f2:
41:8f:74:c2:ec:17:36:00:ac:b8:41:ef:13:26:b1:
ef:ec:77:bc:2b:03:22:12:2e:cf:bc:b3:ac:48:7d:
ca:79:9e:41:52:8d:57:50:4a:77:83:cd:b0:8b:27:
13:35:22:88:1c:1b:02:f6:e0:af:db:4c:f8:1e:20:
82:ee:63:69:cf:05:72:f5:dc:d9:09:fb:8b:6d:66:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:BA:2A:AA:3E:D7:22:8E:F2:3A:9E:FF:68:58:D7:CF:51:66:4A
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:be:84:c3:df:10:e3:b8:a0:90:ea:72:48:af:24:5f:8d:c0:
d4:ad:03:a9:ee:70:4c:ef:2e:4b:e2:d9:eb:04:cc:8c:19:9b:
a7:22:f0:7f:af:8b:79:78:69:31:a9:78:cb:a2:c6:be:a8:47:
95:ef:09:92:e6:5d:98:32:56:50:c4:80:8c:6f:b7:f6:c6:9f:
38:70:5f:0c:0f:f2:b3:39:d1:d2:44:fa:24:ab:3b:c3:04:85:
a7:52:ef:4a:16:2a:1b:c0:af:29:74:9a:6e:a6:70:6f:25:a5:
84:3d:dd:f1:8d:6a:37:66:a0:cd:af:3f:87:f2:2b:df:fe:95:
2f:05:7b:45:12:31:28:04:a5:fd:8f:42:b7:33:91:c8:b0:54:
6d:68:f7:e1:7f:0d:4e:78:79:b1:a9:ef:02:9e:42:bd:16:53:
4a:10:60:ac:28:b1:14:3c:6d:3f:bc:21:1d:97:ea:99:f2:ac:
48:0c:79:57:1f:0c:a5:7f:61:75:6b:05:f7:a7:0d:36:4b:bb:
0c:e2:3c:1d:a2:30:10:3c:72:68:a3:2a:4c:a6:1e:8e:e3:dd:
a5:9d:59:bd:d9:4a:47:e1:36:82:f8:10:23:36:b5:49:bf:e5:
62:60:10:9a:95:06:8e:d0:d3:ca:0b:03:19:93:a1:91:64:67:
27:71:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:30 2025 by rpki-client