Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: l27Q+juTNreGGtXXldMNQvdDMnOiFEfijFMGeCZoQ50=
Subject key identifier: 67:CE:96:8E:FC:DF:F3:42:E7:36:05:2A:E8:24:C4:04:E1:BD:72:E5
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 0194BC3C3F9E0BE7CCD7A57AF62E5968493F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0D1A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: Uil+/17v9oLH5QmCX2/rHDZTMq6aWhGkgYOdkWZgWyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:9e:0b:e7:cc:d7:a5:7a:f6:2e:59:68:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=67ce968efcdff342e736052ae824c404e1bd72e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:bb:f3:10:c5:e2:7c:86:12:aa:c8:b0:2d:
6f:10:11:7a:75:fb:13:83:45:b3:77:b6:db:8d:bf:
09:b9:90:de:f4:ce:4c:d9:54:a2:7c:4e:7c:e2:c8:
86:e4:82:8a:d6:4a:56:9e:e2:ee:19:37:8b:cf:96:
91:cf:aa:f4:e7:ee:9a:78:75:06:a5:f4:50:ca:08:
3a:7b:2a:89:a8:14:31:0a:0a:f8:dd:59:86:df:ad:
29:1e:5f:c3:63:87:de:ed:bc:5f:f8:39:5c:35:c3:
29:55:71:ef:1c:c5:b1:93:53:c2:28:62:86:94:81:
5d:50:04:e8:e7:52:f2:1d:9b:e1:59:1d:ae:a2:ef:
1a:ed:96:dc:a5:cc:04:f6:a4:de:5c:f9:30:b5:64:
c3:2f:3d:79:52:0d:19:a7:e7:e6:c7:06:4f:69:84:
8c:5c:00:66:7e:37:71:dd:b5:9e:a6:d5:d2:cb:69:
b4:af:e8:a8:ff:55:c5:ce:de:37:5e:e0:30:89:8c:
68:1b:1e:5b:16:a7:27:5b:59:4b:be:bd:95:95:55:
c7:ef:04:6b:c7:78:8d:e1:9e:1a:fa:7f:cb:f5:e6:
7d:a3:8b:54:9c:33:1b:4d:95:e4:e1:a9:90:17:81:
d0:40:dd:94:fc:2e:38:ab:39:c5:f6:36:4a:38:99:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CE:96:8E:FC:DF:F3:42:E7:36:05:2A:E8:24:C4:04:E1:BD:72:E5
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:89:75:7f:41:b3:a6:54:07:b7:74:26:fd:fc:89:40:f6:78:
43:3b:b8:6d:c0:67:11:d2:22:95:84:7d:32:f4:2f:26:2f:4f:
56:a4:69:78:e8:5b:b0:25:b5:54:3e:75:77:45:56:36:b2:23:
d9:30:81:be:36:d8:99:64:b4:74:36:39:1b:3b:33:38:c1:29:
3f:de:5e:36:5e:1e:0a:e3:b3:23:de:4e:e4:c7:5e:58:5c:31:
21:62:22:dc:c1:7b:04:97:78:52:a7:06:b2:a9:3e:db:65:e9:
92:ee:1e:49:fb:e5:a5:e2:81:ec:a7:3f:04:a8:db:ff:80:7a:
9b:cb:d0:f3:62:2b:3b:96:af:f1:97:76:62:3a:a9:42:06:cb:
7b:28:fc:8d:ad:f6:a1:da:97:af:97:b5:05:82:db:81:50:0b:
55:48:c9:b3:93:d3:b2:30:f2:0e:39:9c:b5:41:12:49:d7:ec:
a0:a3:81:27:7a:d3:54:85:4a:7a:bc:71:67:c8:34:8e:47:26:
ee:98:bc:ee:0b:44:8b:15:6c:43:92:df:a6:b4:b3:7b:09:1c:
c2:a7:fd:1d:5f:e5:f5:ad:da:9b:f5:51:37:bf:cb:84:b7:1b:
76:fe:90:54:67:35:7c:08:a6:0b:be:f6:1f:59:e6:70:87:31:
37:e8:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:52 2025 by rpki-client