Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 3ChSENdJea/sBa83ePDA9uOA+xiOzLOmpKE4DnqmGkg=
Subject key identifier: E4:C8:C4:91:7A:B1:67:25:1E:6D:21:37:F8:2D:F3:78:F0:C4:88:F5
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 0194BBCE73B6FCE178C9CE2C99870605DDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 03AF
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: vAZheci5NrOcwaIH0/EtccVV1xZM17dZc7eTrRdTKaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:b6:fc:e1:78:c9:ce:2c:99:87:06:05:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=e4c8c4917ab167251e6d2137f82df378f0c488f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:d4:58:22:f3:8d:e2:80:09:b3:80:fd:9b:
fd:da:02:47:34:8f:96:d7:fe:2d:fb:ec:a4:e7:94:
29:75:bb:9a:6d:fa:25:97:05:07:9e:fb:9d:83:26:
34:9f:a5:0c:0d:d7:65:1a:a5:e1:6d:4b:cc:d7:61:
59:73:51:c1:fd:1a:2d:26:3c:ff:c2:ea:84:e8:c7:
6f:3e:8b:a6:d7:1c:05:02:7b:1a:48:80:11:a3:2a:
cb:00:11:e5:a3:57:03:13:e3:ea:87:e3:06:29:57:
86:c6:61:22:ce:2d:9b:91:91:a3:4a:8f:6a:f0:02:
b2:72:e4:9a:ea:17:e8:7c:16:12:da:94:b5:a4:08:
23:5c:30:53:3a:4c:fc:f2:18:1b:18:64:f9:a9:2a:
be:e5:61:a9:2e:b8:2f:d4:0a:49:ee:01:97:df:73:
4a:d5:13:38:6f:9d:33:3d:7f:d1:db:3e:27:77:78:
9c:ca:0e:11:7d:c7:06:4d:62:e2:b5:86:22:c6:2c:
df:ab:e9:94:6e:77:a3:a3:5c:d2:05:87:5b:fa:5f:
05:2e:22:f3:52:d0:6e:2f:6f:63:3f:72:82:d8:51:
70:e8:96:1c:3b:ed:56:fb:24:0c:f7:3c:80:a5:88:
99:e8:65:15:0c:5b:98:2f:01:0c:43:ce:ea:1b:c1:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:C4:91:7A:B1:67:25:1E:6D:21:37:F8:2D:F3:78:F0:C4:88:F5
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:e5:61:c5:51:da:a5:b1:6f:86:14:73:32:46:12:5b:05:
67:af:7a:78:fb:76:b0:cf:9b:52:d1:4c:c1:ec:1f:88:a8:20:
27:50:6e:dc:a3:eb:b0:65:75:70:80:be:0e:7f:d5:63:11:d1:
94:23:c4:69:7a:62:6a:f7:03:65:6a:ce:44:26:c4:24:32:04:
cf:46:02:be:78:c1:fd:c4:a0:c8:71:d0:7e:99:5c:84:3d:3f:
4a:b4:b3:43:54:8a:8d:dc:5a:65:02:b5:db:4e:a7:e6:ab:f9:
59:a1:f0:11:dd:3a:a0:02:28:dd:55:78:f1:9b:7b:12:ef:c1:
1a:d3:d6:bd:e1:51:b4:80:f9:0e:ee:cf:40:57:90:0b:b7:83:
79:f0:49:e0:2a:ff:12:c0:69:64:23:79:2a:03:4e:8a:df:f2:
d7:0d:53:5b:f8:35:cc:a7:97:25:01:c3:62:6d:fd:ca:16:c9:
4d:b7:d9:c1:f5:cd:64:3d:c3:10:0d:2d:e1:2e:30:5a:7c:d5:
64:15:19:56:cf:d5:ee:40:82:8d:90:3c:8c:94:75:9b:3b:fb:
3c:c1:48:e8:79:8b:8b:ac:26:37:17:0f:33:42:3d:3b:62:82:
02:85:42:40:68:59:5e:ca:11:29:8c:26:90:3a:a4:d9:09:a7:
17:ad:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:43 2025 by rpki-client