Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
File: onxkG1MKfGuiNAIuMyckYjI2cQA.mft (raw, json)
Hash identifier: L19JAkT+QOKQIIpqwOL9YiHLcJIRWtEx3EVx+9o5u9U=
Subject key identifier: 27:E5:26:C5:4E:CC:A7:BF:75:54:86:9D:94:11:6C:B1:35:03:63:BD
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 0194BCE0B4B13659C8CAD089789AD486B629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
Manifest number: 0971
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: QxhZicwGUVQxP9IW9_Bs3YT2TWA.roa (hash: BTcN4T7DZ6v6RQWA7fyITvrdQwjA1FWvrUllA9/iU9g=)
2: _CJ0ryZ88cYP589Qq2Z03nLVv7o.roa (hash: d5daN2lzwzk4YGoTznQDsoSXMlAa1gaQph+9wl7kXiM=)
3: onxkG1MKfGuiNAIuMyckYjI2cQA.crl (hash: emQoGkQup26ApL7tnKKy5lsSKllC9T4LV56VJxbE/LM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:b1:36:59:c8:ca:d0:89:78:9a:d4:86:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=27e526c54ecca7bf7554869d94116cb1350363bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:a1:72:47:87:2a:ba:13:3e:5e:5e:33:fd:
98:03:46:8c:bf:43:99:90:24:8c:9b:30:63:b7:08:
f1:32:a7:26:45:34:9e:af:3d:81:7e:56:6f:1b:34:
f9:d4:dc:34:9e:41:89:2d:13:b3:2f:fc:85:14:8a:
15:eb:9c:fb:83:f7:be:c1:1a:63:ce:dc:3a:c2:33:
1b:d4:ca:9c:b9:48:61:fe:ee:02:c8:7b:c5:5e:c2:
b3:68:96:6d:46:cd:14:c0:e1:dc:2f:5f:c2:fc:1a:
e9:59:ad:e4:97:3b:59:be:bb:d8:2a:ce:24:1f:96:
44:08:10:70:ba:75:28:54:4d:a0:51:16:6b:cf:5c:
da:ef:1e:97:22:06:41:7b:46:ac:f1:e6:1a:43:14:
6e:86:86:bf:22:0f:67:eb:d9:d0:2e:2e:63:db:fa:
93:70:2a:83:5c:a3:13:93:22:8c:1a:35:74:b4:ea:
48:88:75:23:ef:d8:86:1e:79:ad:9d:70:25:d3:44:
81:e9:0e:4a:47:c8:b3:55:62:27:c7:e1:ff:98:a7:
af:27:ff:95:4e:a9:0a:66:17:57:b1:8a:2e:d9:2b:
21:52:a5:02:97:c0:07:b1:bb:9b:c0:1b:0e:f8:7d:
bf:e6:b5:da:e7:db:cf:2d:cf:7c:ee:d3:6b:5b:23:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:26:C5:4E:CC:A7:BF:75:54:86:9D:94:11:6C:B1:35:03:63:BD
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:18:a3:00:20:a1:51:fa:25:4b:13:db:47:cc:2b:81:90:
07:6e:a5:f4:a7:89:76:44:29:5f:c9:77:73:bb:1f:41:f2:07:
d8:0b:77:3d:58:07:13:ad:ec:81:98:f1:3d:d9:46:63:5b:3e:
bd:94:1a:60:cc:6e:ee:b5:bb:b6:56:08:f5:36:4f:26:ca:67:
26:ea:13:b0:4f:bd:0d:6f:5a:96:41:32:25:f9:46:45:3c:e6:
67:ad:2a:10:91:38:a4:0b:3d:23:3a:4f:b0:fd:bb:22:92:40:
fc:3b:5d:92:82:00:69:d0:6c:3f:0b:f1:a5:8b:81:f7:aa:65:
18:d3:96:f2:61:ad:e0:92:3a:6f:eb:5c:e0:c8:7e:78:68:c0:
bc:ba:0b:d3:75:15:71:4e:36:af:33:cc:c1:40:e7:b3:00:51:
45:7f:d3:f7:0f:bd:d6:15:47:39:8a:02:2e:4d:01:9c:01:5f:
12:0c:60:6e:89:1f:fc:f3:a0:4c:13:d8:57:b8:9d:c9:dc:17:
bf:53:2b:d2:a4:b2:15:97:bb:dd:09:47:ae:a9:41:d3:97:e4:
6c:20:cb:0e:df:dd:36:9a:43:e7:37:fc:1c:9f:bf:a1:26:02:
f5:3c:cb:f8:40:80:6b:15:d2:c5:8d:e7:85:b1:51:a1:4f:66:
e1:5a:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client