Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: y8mtdmkZBHmV73c6OfGNyE0v4lObFw3OM7MdGFyYMyU=
Subject key identifier: BC:6B:A8:43:8B:20:4D:37:A9:11:F5:AD:0C:CC:DA:8D:31:B1:91:93
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 0194BC729FA31347944DA4B7AF71E8F20AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 11CC
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: nNUcq19TfqA3/e8Gq04yn15JGw2eh2rTNyZSwMMt5dQ=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:a3:13:47:94:4d:a4:b7:af:71:e8:f2:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=bc6ba8438b204d37a911f5ad0cccda8d31b19193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:29:28:18:e6:e1:95:74:a2:f8:31:43:56:
47:19:ab:65:54:de:fc:4b:55:39:29:23:af:d5:f8:
fa:a4:ad:36:c8:04:69:d4:00:59:1e:5c:e8:26:45:
68:48:31:d6:ac:f3:75:f7:cb:fb:d3:d4:14:f1:be:
f2:61:76:9c:56:02:34:88:87:8a:56:ee:de:7b:cd:
a3:01:e7:62:bd:92:fa:7a:c8:12:cd:32:de:36:c7:
d7:15:33:61:c9:fa:80:5f:35:f3:e6:d4:5f:59:7c:
b7:f8:04:cc:c4:9f:9d:90:d2:67:6f:b0:bf:fa:1b:
33:62:d0:c5:e0:fc:e9:8c:c5:01:f9:12:21:3b:f9:
c5:3f:0c:50:fd:de:f0:e1:02:cf:19:29:05:a2:36:
53:4a:91:d3:41:1d:99:ab:3d:87:ca:cb:8b:e5:c0:
17:e9:a2:36:be:48:3a:7a:7a:a6:71:27:90:31:c9:
4b:5b:3b:dc:ee:ac:b4:e7:a6:de:db:2e:6f:ac:41:
2c:18:5f:dd:06:cd:5d:81:95:7a:ea:80:7d:e9:ea:
28:5c:25:de:c0:34:f0:51:ea:a2:4f:85:20:dd:1b:
e3:12:5c:13:34:c9:82:15:12:b8:6c:a8:0a:ea:5e:
8b:05:53:1e:76:1f:b2:74:f7:d2:0b:0e:6d:f6:37:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:A8:43:8B:20:4D:37:A9:11:F5:AD:0C:CC:DA:8D:31:B1:91:93
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:c2:4b:f7:ef:59:84:55:80:db:e1:3a:6f:1f:82:bd:7f:
58:d3:68:bc:6c:25:d7:3f:32:92:59:45:0a:f3:2b:62:24:c9:
c5:1b:d7:cd:4b:48:87:f5:3b:a4:bb:1b:90:ba:ff:6a:0d:d6:
09:1d:a3:14:b3:d1:fd:cf:c4:fc:34:bc:71:f1:a4:b7:b4:e0:
5b:46:b8:79:81:78:28:c6:ff:e3:8a:de:d5:c0:69:23:80:45:
6a:ec:89:4f:6e:83:82:f8:9d:29:24:ad:6c:11:8e:ff:14:0d:
3e:96:66:ed:83:4b:58:21:93:ae:a6:ec:7e:39:5a:48:0e:e8:
a5:6a:4f:d8:b7:d9:e2:f7:da:b9:99:c5:c4:1c:81:d7:3a:2a:
d0:f1:01:eb:42:84:4e:29:3e:48:a1:6e:82:d1:94:64:ec:42:
e3:31:77:22:6d:4f:e3:71:5a:06:1c:3e:33:e9:71:63:72:d5:
f3:ce:c6:ac:17:fb:54:8d:34:b4:d0:86:bf:ad:82:c7:7d:2e:
d3:74:d9:6c:db:5d:0e:f3:19:fe:d7:de:80:a8:fe:9e:59:cc:
b8:49:e7:19:ce:f4:0f:78:39:e9:fe:88:c5:31:a0:38:10:59:
87:fd:98:25:7c:12:2f:1e:aa:0c:73:b9:a4:48:2c:86:e8:0d:
85:ed:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client