Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: h8q4gNEhh0l2ulEK3IKacNoGzKFvzFabNvdZpHNK5yg=
Subject key identifier: 5E:7C:0D:D9:13:90:37:55:E1:E4:FA:3F:FB:62:EC:C6:65:64:82:F4
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 0194BBCDD9F316EF1EBA16479867E66E01E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 03C8
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: G5CkqvJ2Gocq3evmZkZA2n3pAiAp2uXM2U4DD9o1WtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:f3:16:ef:1e:ba:16:47:98:67:e6:6e:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=5e7c0dd913903755e1e4fa3ffb62ecc6656482f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:a6:66:62:60:d2:42:66:31:95:8e:35:5d:
a8:5f:65:80:54:82:95:9a:55:e9:fd:da:87:bd:ac:
06:34:30:56:c8:d0:e2:d1:d2:f9:73:60:a0:6f:67:
93:9c:63:26:a0:8b:99:01:1d:f5:fe:9d:c1:f2:1e:
5b:a0:0a:94:28:1f:4b:de:87:0c:c7:3c:47:9b:86:
45:3f:be:2d:9d:b7:44:70:17:13:5d:bb:ae:8f:33:
3e:de:cd:34:92:c1:0a:c6:11:d5:68:ee:27:5c:91:
41:fa:ba:2a:cd:91:86:77:19:1e:9b:0f:72:85:0c:
52:f0:37:89:32:ed:00:4b:77:24:0d:c5:75:51:e5:
66:12:68:3e:5e:12:42:a5:78:ef:7a:99:4c:3f:73:
e1:2f:59:f4:65:e4:19:36:68:cb:06:1e:f3:37:ac:
fd:e0:26:ff:95:eb:c7:d0:d0:37:27:f4:29:83:20:
4e:64:fe:94:a2:44:1a:7e:ea:57:e5:ab:3c:e6:58:
d3:2c:91:c0:ef:05:ed:dd:c9:d8:be:43:7d:92:b2:
96:71:ac:57:d1:25:43:d7:9d:9c:d1:4d:72:77:82:
fd:87:7a:5a:cc:7c:2d:01:13:e3:89:41:f0:29:e2:
81:5a:08:bd:ad:b4:55:1f:8e:43:76:64:79:c1:c0:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:0D:D9:13:90:37:55:E1:E4:FA:3F:FB:62:EC:C6:65:64:82:F4
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:1c:f2:e6:a8:d7:f0:c4:9f:de:a4:02:7f:50:a4:bc:3e:
04:3a:2c:c9:ea:5a:ce:2d:93:cb:16:cb:80:f7:eb:74:99:ec:
1e:af:82:82:76:fd:b6:04:62:b9:69:56:68:dc:a2:c6:a2:94:
53:4b:b4:8a:fd:18:f2:3b:84:af:9a:08:61:05:bf:f4:6d:da:
45:3b:d4:ae:79:54:ef:bc:26:36:ee:67:e5:d3:0a:9f:08:99:
a9:3a:2d:ba:26:bd:5d:15:df:f4:78:a7:99:c2:ad:f7:a2:3f:
32:ad:64:27:ad:ec:29:e3:0f:f5:5f:e2:45:1c:6f:5a:2e:06:
5b:21:6b:17:da:dd:0e:dd:23:73:c6:29:76:74:12:8e:a3:7a:
bf:bb:ac:a7:b1:d2:99:4e:47:14:e1:c3:f9:be:95:fe:4e:f7:
a9:f9:91:46:66:04:75:18:8f:12:4b:d1:21:93:57:5f:ca:a6:
1f:48:da:06:1b:d1:46:24:94:73:45:7c:82:f4:09:da:51:f8:
12:dd:c9:9d:5a:2d:ba:8e:1a:30:82:a1:57:08:e9:c5:68:63:
83:8a:cb:76:0c:c2:a4:12:b1:b1:ee:6f:e2:60:68:95:cf:c9:
94:29:37:a8:7f:87:33:a5:5a:80:28:ae:d3:17:a8:aa:fa:b3:
93:34:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client