Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: CUgyqY6IiNbVnBspI35kfZ2VvBBtlAjs+wa7xEtRJUA=
Subject key identifier: 48:57:B0:54:B5:0C:70:2D:17:2C:70:41:34:8D:08:74:CF:FB:B6:CF
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 0194BCAA17B2976E8FFE78232C6EBF171B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: 6gf3zNORL51xp3G6QjMGwy1gZyydIaESn8uEelaIpaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:17:b2:97:6e:8f:fe:78:23:2c:6e:bf:17:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=4857b054b50c702d172c7041348d0874cffbb6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:ad:89:4b:d6:11:b6:ac:a0:f7:59:d3:10:
cc:75:77:bf:99:46:d6:a1:0a:ef:ad:9c:8d:cd:c8:
fd:9c:09:1e:0d:e0:79:e3:57:22:b1:2a:89:d4:43:
0c:9d:8a:b1:51:7f:60:a0:51:6f:e5:b8:1e:98:9a:
a8:95:3e:8c:2f:71:20:ec:4b:e5:b1:f8:9c:2e:7a:
8e:b6:a4:7c:9e:47:ef:56:b1:d9:16:c6:a9:9f:82:
69:83:d6:93:3c:9e:db:e1:01:8a:95:66:d0:3d:df:
56:3b:23:aa:9e:b2:23:21:7e:96:02:3a:ed:40:6b:
59:9f:44:98:88:5b:fe:e5:af:7d:d2:08:4f:4d:04:
1d:0a:80:d9:69:12:83:0f:47:3e:ac:ed:10:0c:e9:
4a:d5:1d:da:85:91:3d:12:f5:4e:2d:6f:13:01:25:
53:6a:d9:86:b9:62:e8:66:38:03:5d:f1:d4:3b:3e:
47:78:3e:4a:3f:06:e8:9b:67:fe:05:ec:1f:09:5e:
64:0f:69:35:6a:79:d4:48:47:68:eb:3c:4a:a2:89:
78:b2:89:3c:61:94:44:fc:37:2f:01:e3:13:5f:22:
7e:43:f6:7a:a2:35:b2:91:a3:5a:23:39:92:87:4d:
cb:42:a5:58:bc:6f:69:85:28:71:39:d8:1e:76:51:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:57:B0:54:B5:0C:70:2D:17:2C:70:41:34:8D:08:74:CF:FB:B6:CF
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:f9:e1:5b:ac:03:17:32:bf:5c:82:6e:73:ff:e1:95:a6:
3a:d7:a6:4a:67:83:d0:3d:0e:23:3c:77:ff:9b:d9:50:a9:d2:
54:67:69:e6:6f:f6:51:75:f6:d6:7e:ce:d7:0d:fe:4f:b0:1a:
38:ca:d0:34:b9:3c:17:6d:76:90:2c:ac:a1:22:e2:3e:9f:58:
0f:33:f3:22:7d:28:76:3f:76:4f:04:bc:d2:51:e5:f2:79:41:
b4:3a:32:10:13:f1:44:a1:42:99:6b:3d:66:86:a3:7b:b8:d8:
43:9b:01:1c:b8:01:ae:10:bb:f5:7a:f4:61:8e:5a:cd:4c:91:
e7:b1:4e:64:28:a5:7f:88:f2:91:bd:e2:7f:29:de:de:ce:1a:
0f:94:23:aa:f0:d9:df:a6:b8:67:27:d4:65:30:30:6b:35:0d:
54:50:64:f7:ce:06:87:73:b1:d2:da:11:05:4f:f5:2a:c7:66:
96:45:5d:51:7e:16:af:16:8b:17:34:08:6d:5d:5d:26:7b:bb:
75:da:7c:b7:0a:79:d0:4f:43:d5:aa:96:b3:22:7f:f6:2f:d1:
4a:4e:47:89:0f:16:c8:b8:cc:02:48:3c:56:09:ed:4c:7e:b8:
69:a7:41:ce:8c:53:60:b3:0f:11:64:93:91:db:c1:d6:e1:56:
da:c2:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:35 2025 by rpki-client