Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: QF38j0nPkt6w7LIJufn3UTo+5+gzqTIS/Pqolt2+OZk=
Subject key identifier: 15:AD:80:3F:C0:F3:53:BE:85:25:65:95:CD:38:94:49:13:78:B5:25
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 0194BD4E88475EDEEFB9350BDA48AD432A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: APsUsrAn96ow-lwQ45SmC1gQegc.roa (hash: t3tVyfgAERiYm7/hAZrrvXacDVWFUchPqKdL2GXQLe4=)
2: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: gSWy+UqupKKgSDGT2gfSTAZnpwMCIXcqx7jdNUFb4/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:47:5e:de:ef:b9:35:0b:da:48:ad:43:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=15ad803fc0f353be85256595cd3894491378b525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:9f:97:3c:b1:a9:dc:3a:33:61:e9:36:07:
ed:69:3a:94:52:14:77:e9:45:4b:e4:92:a8:36:32:
15:12:96:12:34:31:34:76:07:e0:b0:1b:5f:69:95:
77:36:b5:45:ef:23:e0:3b:53:30:01:71:87:1c:33:
fb:48:07:54:3b:6a:27:c4:a4:87:0d:19:43:b6:a2:
9c:20:5f:10:06:ad:28:ed:5f:d0:74:b1:e3:6d:af:
f3:45:36:46:bf:79:96:1b:ba:a0:c6:03:ad:ae:0b:
0b:c1:65:62:23:69:3c:73:d5:55:36:5f:e3:f6:88:
6e:42:44:ad:79:98:37:51:e1:13:14:9a:33:08:18:
4d:ae:bf:55:40:82:19:67:a2:27:0a:c7:61:e6:6b:
f8:bd:cc:ae:d0:47:39:7c:8a:bf:0b:93:3b:1f:04:
0d:62:04:1c:cc:32:7f:d3:b0:33:7e:d5:c4:c9:f7:
b1:56:98:c7:fa:01:4a:48:f6:16:00:f0:e8:f9:0b:
c6:97:bc:3a:1e:07:ad:79:40:18:75:12:8b:b6:14:
49:7e:a6:04:fb:80:fd:3e:6e:59:0e:0e:ba:c4:ad:
f0:b8:ad:23:cd:a3:65:a1:91:42:b3:96:4d:97:2f:
eb:99:51:1f:a5:db:14:f4:8d:e5:41:46:82:16:d3:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:80:3F:C0:F3:53:BE:85:25:65:95:CD:38:94:49:13:78:B5:25
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:88:2d:53:35:d3:b9:66:22:66:38:04:92:42:25:17:9a:
85:d6:37:61:7b:8e:97:2b:af:3b:0a:53:4d:28:24:b8:b8:48:
a3:89:50:99:5d:60:ed:3a:e9:2c:43:58:6c:f2:53:7b:98:04:
50:d1:9e:07:09:f1:41:47:f6:47:f3:f9:ff:b7:07:7d:20:aa:
93:46:9c:30:3f:74:6a:69:64:71:2c:6d:b7:55:92:1b:ad:97:
d8:4a:48:e9:04:75:c8:9f:29:6b:15:0c:ff:51:14:05:2f:b9:
0d:3c:f6:5e:5d:86:10:b4:52:fb:2a:38:14:fe:10:7c:30:5d:
f8:e1:dd:c0:0d:c5:ea:a2:af:97:3e:e0:0d:89:dc:d0:ce:7a:
86:e1:b8:c9:45:26:87:82:f8:84:df:08:23:79:09:df:20:91:
34:e4:68:cb:93:80:4e:00:88:77:11:31:9a:c3:2e:0e:90:b1:
4b:cf:33:88:a2:40:00:c6:31:8e:71:d5:f2:ce:d3:c9:c5:6f:
57:58:ee:f3:7a:be:21:b6:19:b5:91:6e:37:c3:72:68:cc:f5:
03:aa:b0:b3:d2:24:47:70:61:fa:36:c5:b9:75:b8:bf:83:5d:
bb:73:9a:e3:c9:eb:bb:e3:7a:e7:5d:19:be:4e:b0:13:e3:e6:
f6:bf:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:42 2025 by rpki-client