Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: PMz2R5g7Mf4u73utLOqV9OkVdFcFCaT9MIbn0rF2sqc=
Subject key identifier: 46:9C:4C:90:DE:75:0D:24:82:14:12:D4:6B:F1:21:9B:DC:7B:53:FA
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 0194BC051991640993DBA49610A78D41689F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: e7noKfAbhqxWKb_WV7vm2kP8eVk.roa (hash: hWpS0joUiL0TvCY+c8SO6LZjwhfmBfd8ch+Qp+RpKHk=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: Wez4N0FMfcgu9xhcAgPmDCS42Zh6/rkvdsLF6IpJFCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:19:91:64:09:93:db:a4:96:10:a7:8d:41:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=469c4c90de750d24821412d46bf1219bdc7b53fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:ac:5d:d2:d8:b7:21:00:01:b0:ea:fb:b4:
d5:35:1b:c7:1d:a0:88:7f:c9:90:4d:13:2a:d7:78:
13:b2:98:58:8f:aa:95:f2:10:3c:a3:3d:77:73:4b:
b0:9e:03:ae:18:7d:73:fa:b1:e6:cb:0f:70:87:ac:
fc:f1:b4:2d:ac:bc:9f:f9:01:76:b8:0b:7a:bb:57:
5d:d7:92:ac:78:c3:55:8f:e1:08:aa:c7:5d:56:3d:
5c:f0:1b:90:67:97:c2:91:14:30:1b:ce:08:0a:84:
d0:a5:f6:91:6f:58:c4:91:1d:be:59:73:44:60:e8:
d9:c4:b2:e4:9f:e0:ec:2d:ef:df:4c:8e:bb:eb:07:
3b:c2:e5:8f:08:f5:c0:63:10:2f:f5:2d:56:8c:3d:
45:da:bd:99:59:1d:22:1a:d7:ce:df:31:a0:29:7b:
86:f6:5a:da:02:1c:f6:99:b0:e5:94:bb:2d:52:e9:
df:04:73:2f:c2:71:6f:99:07:84:fb:51:25:28:26:
cb:e0:53:f4:31:8c:f5:ca:21:7d:55:57:ef:7f:c3:
e1:ed:62:60:9a:3b:66:59:ed:f5:66:24:65:68:c1:
76:f6:e0:26:12:32:14:ee:ce:66:79:f2:4d:67:e7:
98:6a:21:d9:95:fa:40:17:dc:89:bd:8b:0e:e2:9d:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:4C:90:DE:75:0D:24:82:14:12:D4:6B:F1:21:9B:DC:7B:53:FA
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:03:eb:10:3c:1d:e4:3f:3c:2c:8d:10:91:f4:25:01:04:19:
67:78:92:72:b4:25:82:f9:c9:c5:ad:56:0e:f9:07:42:92:7b:
c0:c1:8f:2a:1c:8e:87:dc:d7:9e:35:3e:29:a9:89:70:b3:6f:
92:79:c0:8b:20:a0:70:5b:3b:eb:4c:24:78:9f:f4:f5:e2:2a:
25:19:4e:8f:f3:cf:78:f5:82:e7:ce:d2:f8:35:a6:dc:b4:71:
72:bd:a4:76:58:ff:46:a5:27:86:19:c8:f6:06:27:9a:2d:c6:
23:dc:b1:cb:47:20:63:b8:7b:4e:39:fc:c3:cb:79:14:65:cf:
89:80:a0:d5:c5:24:fa:3e:7a:a8:8f:59:38:0e:7a:02:08:5a:
3b:1f:ec:42:0c:85:9a:7e:2f:32:38:98:49:89:9b:48:a0:11:
83:5d:89:63:e8:f9:74:c9:f5:63:5b:80:a4:2c:c9:2e:c6:03:
05:3e:78:05:9c:75:83:e1:a1:06:00:72:d7:08:fc:88:7a:bd:
4a:a6:52:ea:86:c4:ef:c8:b6:5e:04:fb:ff:cf:98:51:be:3a:
1f:d6:73:a6:ee:40:61:1c:bf:82:3c:81:71:fd:72:b9:a9:ce:
bc:cf:8d:b1:e7:fe:bc:93:57:f6:9d:76:88:5b:b2:94:42:8f:
6f:cc:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:42 2025 by rpki-client