Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: 7H22IVjbQDDaobGRWDDLo6p5boOwuFvnzvp5edqx9xY=
Subject key identifier: 70:F7:E5:DF:18:74:B4:DA:92:40:8E:A8:DA:1F:16:99:9C:67:D2:8F
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 0194BC3BEE76CC8EEB0DAA7FAD02D4AE31CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: lgK9yMhwHJWdH9Zz+J6h4+k/VM3ratnKII2jUrbBN00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:76:cc:8e:eb:0d:aa:7f:ad:02:d4:ae:31:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=70f7e5df1874b4da92408ea8da1f16999c67d28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:c9:7f:9e:2e:dc:ab:ef:fb:44:45:06:ef:
65:84:01:2e:d4:8f:d0:15:8b:c1:e6:e0:a7:31:a4:
04:d6:a0:ee:5e:9b:96:9b:80:10:6f:46:21:db:01:
81:30:be:ff:a4:f3:e4:a8:69:07:ca:6b:f4:9d:66:
76:e0:5e:45:5f:b3:96:5f:07:2a:59:18:57:c4:06:
18:4c:d8:e8:a6:aa:b1:fe:bc:50:cb:a6:f4:f2:1b:
67:7b:08:6d:0f:80:cc:b8:fd:32:0f:e5:72:fc:8e:
ea:7a:8a:0f:2b:01:fe:78:6f:fb:ae:f0:04:d7:ec:
3d:9e:78:57:01:01:b6:2b:b0:2b:5e:2b:aa:26:c1:
46:00:9a:b7:98:a6:12:27:fd:8a:a8:82:b2:84:8b:
64:7f:8f:3f:c3:cb:3c:ed:fd:f7:71:5f:bc:17:bd:
02:cb:e6:e1:70:f3:13:a7:ae:13:c2:0e:a8:44:9e:
62:42:eb:a4:cb:23:5e:e1:97:40:46:bf:c3:6a:35:
c6:61:79:20:73:0b:13:ee:75:bd:e3:2e:9b:67:89:
56:ae:29:ff:a6:0d:bf:cb:d1:0f:85:65:67:cd:22:
ae:eb:31:6c:b9:12:21:00:59:17:9a:27:39:88:15:
43:06:47:ad:94:79:40:d0:89:b2:75:d5:43:25:7e:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:E5:DF:18:74:B4:DA:92:40:8E:A8:DA:1F:16:99:9C:67:D2:8F
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:28:a1:83:7c:ad:a8:83:64:1e:6a:f2:5f:7a:4a:f3:a1:
f7:54:af:86:f2:d3:c2:7d:b5:53:ac:9b:38:10:af:89:60:45:
0f:27:25:95:19:b0:6e:af:f3:bd:ba:44:ef:74:48:43:a1:01:
17:be:f2:f7:cc:3e:71:76:35:5a:e4:9f:d0:da:7e:51:ac:9f:
4c:a3:37:ca:23:69:7a:a6:72:49:5f:61:d4:33:4e:36:4f:1a:
57:b3:ab:86:c0:4b:7e:2e:7b:20:45:dc:2c:69:d3:aa:14:d8:
c5:5a:01:9a:e2:63:63:42:d0:01:a3:f2:bf:f8:ac:8e:56:b6:
e1:68:c7:03:e6:69:c0:ec:c7:6a:ee:5b:73:c4:f3:2e:50:1e:
e1:9b:ce:f9:f2:ec:46:4a:ec:dc:54:b2:76:c0:cb:b3:02:18:
d9:e2:6d:c8:12:5d:95:25:5c:25:f1:d0:9d:66:be:e5:62:a7:
a5:92:28:2a:56:2f:65:94:a8:6c:93:90:64:e1:b6:f4:ea:98:
b5:24:7d:a0:a5:83:7f:45:90:a2:e5:b5:a6:b9:b6:41:90:58:
2e:a8:29:53:49:e5:38:19:a0:68:89:3e:40:a3:0e:2e:eb:ed:
0e:a8:2a:cb:20:92:4a:75:df:cf:99:a1:83:01:a3:4d:64:43:
fd:37:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:45 2025 by rpki-client