Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: G7P6P88um4BjnOgFvUv0OUcO6f2cRGDQTB8Xt7OdC4A=
Subject key identifier: DA:0A:56:BB:D9:DC:1A:99:DB:EF:0E:12:60:68:E4:2A:1B:9C:53:3D
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 0194BCA9F4F759EED7F61BD5D7C2B45768D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: C1dhFc+tJMwzdYvn6sGj/8HyhPkehgWNX9r82dnRVyQ=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:f7:59:ee:d7:f6:1b:d5:d7:c2:b4:57:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=da0a56bbd9dc1a99dbef0e126068e42a1b9c533d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:8e:65:97:b3:a4:30:92:41:7c:7b:45:69:
f1:13:29:51:26:ba:6c:99:b5:c5:2a:04:72:ea:da:
51:c3:33:d6:77:98:26:9c:c7:fd:ff:93:be:25:c0:
a4:fd:41:01:0b:cd:93:fc:ed:06:f7:67:56:fb:d7:
13:80:a6:20:ee:f5:a4:36:bf:69:63:3e:6c:58:9e:
d2:7b:89:7a:0e:c7:c3:3f:33:9f:88:2b:08:74:89:
0b:9a:b1:e6:ac:8d:e9:c7:d7:10:64:40:02:3e:39:
cb:6b:f9:8b:a0:07:0a:27:c1:e5:4b:3e:87:ba:0e:
9b:c2:08:8a:5c:68:de:e7:3c:28:52:e8:e9:6a:4a:
58:4a:9d:f8:73:60:9d:84:4b:c6:75:15:27:f6:8f:
8b:32:5b:0b:03:66:d9:f1:70:fe:62:ba:4a:15:dd:
96:f9:90:0c:fd:cb:1f:72:04:11:01:dd:cd:54:39:
37:94:bb:c8:f8:78:08:01:54:38:42:a0:29:f5:31:
3e:01:d6:73:2d:3a:5d:b1:50:67:89:25:29:4d:8b:
ec:d6:ad:7a:24:b6:43:7b:8e:2a:d9:50:19:f2:d4:
63:27:94:33:8e:49:15:f5:a9:58:ce:9b:c4:9b:e5:
b0:ef:26:40:42:57:d0:0a:f2:17:01:9d:dd:7d:16:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:56:BB:D9:DC:1A:99:DB:EF:0E:12:60:68:E4:2A:1B:9C:53:3D
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:12:b3:fe:1b:86:5b:13:29:11:89:21:39:75:d1:de:c7:58:
69:c4:b3:7c:5c:02:97:20:2b:a9:9e:10:53:47:2a:f4:ed:fb:
fe:7b:d2:f2:c0:85:51:e5:4a:62:26:f1:37:b5:08:29:d1:2c:
e0:08:a1:c0:fd:b2:9f:bf:fa:91:92:00:19:20:e6:65:6f:84:
5a:53:c7:b0:2b:0b:35:b7:80:d6:91:f7:22:90:eb:cf:81:9b:
d6:31:a6:61:41:63:88:1c:59:f2:dc:9f:f6:84:43:06:49:46:
c1:c6:47:2e:12:b1:0a:55:a0:cf:c6:ed:17:7b:cc:e3:2b:ec:
2f:fe:25:1f:09:82:f3:8c:0b:3a:4c:17:a6:41:9b:d8:53:e5:
34:20:ba:62:cd:fa:e5:0c:53:71:97:37:76:6a:7f:f3:a5:b2:
b4:2b:1c:31:3b:4d:c7:f5:73:50:f5:ce:d7:4a:a4:7d:0e:22:
27:f6:82:5c:b5:9f:87:ba:36:fc:a5:a6:a4:69:74:12:af:be:
50:3f:25:e3:ba:f1:60:0b:05:ab:94:96:4a:99:67:a2:4e:6f:
d5:5e:bb:da:0a:07:5e:1b:0d:1e:a6:71:1d:88:70:24:eb:c9:
7e:3f:5b:44:3b:45:de:39:16:18:05:8c:f3:ca:24:bf:24:91:
fa:56:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:42 2025 by rpki-client