Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: e1fJ50fFMC3FguCkeoCnvRdhlmybpRosBS3ZGkJhlAw=
Subject key identifier: B0:06:B6:FE:0A:60:E9:4C:D1:BD:67:1E:A0:37:34:7B:31:5C:0F:C8
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0194BC04E00ADEC4A844980DC28E3DA3C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: Tl_webQ5I-DDAwk6Q7C0T4lb5FI.roa (hash: MF9LLchDBDAd+l8ruEGLs1nd4dvQqzLq8td2H9Q2vZ0=)
2: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: 71KS4pkgXfCMH5V/VNL2BKfz0qn5Aq1UHeO1uid/40c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:0a:de:c4:a8:44:98:0d:c2:8e:3d:a3:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=b006b6fe0a60e94cd1bd671ea037347b315c0fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:ab:2d:41:f4:62:d0:4b:aa:d4:d0:e7:ea:
81:ad:c8:6b:3d:c1:76:6a:b1:1b:74:98:c3:cb:12:
db:51:f6:d6:b4:dd:44:c7:d9:7a:6a:5c:c0:1e:57:
8b:e7:9e:ec:82:19:57:2c:82:87:ae:5f:e7:66:b0:
29:b4:4c:f5:f9:57:a8:6f:0a:80:b2:22:d7:58:11:
a5:ae:e8:93:19:86:85:0f:d8:79:2d:43:1c:03:a1:
82:55:16:2c:ec:1a:77:86:79:09:02:2e:39:d4:f4:
f3:8f:e1:57:3d:88:88:ed:70:3c:13:18:7f:6c:aa:
3d:16:48:40:e4:bf:11:30:80:88:ae:44:d7:d2:63:
6e:50:cc:8c:04:0b:6d:25:51:0e:7b:70:bc:e8:4d:
eb:ea:7c:ed:c7:b2:99:99:e7:71:2b:c6:40:2f:3f:
16:53:f6:5e:74:e1:ac:ee:01:ce:0c:ef:49:62:40:
c3:34:6e:a4:b9:07:33:06:51:65:35:75:b7:b8:1a:
ce:f9:7a:90:c0:2d:12:72:a7:0c:9b:04:68:2e:b7:
d1:92:6b:61:29:71:0d:77:24:2a:f4:ce:0d:eb:50:
39:88:26:c6:bd:18:29:6a:b9:fc:8b:99:1c:61:1f:
71:f9:ae:fb:bf:f9:38:bb:05:66:64:dd:a3:06:94:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:B6:FE:0A:60:E9:4C:D1:BD:67:1E:A0:37:34:7B:31:5C:0F:C8
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:af:6e:18:d6:3d:b1:f8:15:96:83:65:34:be:cf:dd:b0:
d9:77:d8:b1:21:a2:e4:d5:41:d4:ff:8f:7a:7d:62:04:30:aa:
d2:ed:93:8f:01:56:3a:4c:ce:8e:50:dd:f9:5f:62:a3:59:d9:
40:a2:8c:f4:da:77:66:47:38:c8:50:ad:a0:46:10:91:ef:8d:
92:e9:34:35:b0:75:c9:3b:81:46:c5:9b:d4:79:ef:45:6a:85:
33:ea:9a:6b:c6:ae:ff:22:ea:98:56:fd:55:aa:4d:e3:d0:ca:
17:cf:77:58:4d:11:8d:54:88:4a:ff:ef:f4:7a:ca:c9:47:ab:
31:16:c3:c5:8e:ce:69:d5:a1:01:04:ee:aa:60:3f:3c:9e:90:
d5:93:2f:4e:de:4c:8d:55:0c:9b:a7:51:87:69:8f:d4:dd:f1:
7a:6b:ce:34:fb:cb:f9:e6:ca:e3:8e:ef:60:63:0c:ea:92:87:
09:31:0b:b3:f7:d7:87:f4:92:67:62:0b:d8:3d:a0:87:a9:09:
b7:a5:a3:05:e6:88:12:d2:22:90:a2:44:07:d9:1d:ea:a6:da:
47:88:02:81:db:d6:91:3a:c8:62:c1:1c:62:f3:3f:5f:6e:07:
83:2a:b0:bf:d2:32:3d:6e:56:a9:d2:39:c2:59:5d:15:e8:90:
b9:ec:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:30 2025 by rpki-client