Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier: GL7YGKT2g+YxxNLoirSpHYqZEdDfhQKCYjnLpd7Q89o=
Subject key identifier: 29:33:24:A2:D7:41:2A:87:D3:4B:AC:4A:FD:53:1E:2E:C2:47:B1:37
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 0194BCA9A38D9F983E3E083A367F3869F6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number: 0DCF
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: 4JOdBSVojDJlQ5TQXs0CVBrw1SpIv5B+1tfMddzGrtc=)
2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a3:8d:9f:98:3e:3e:08:3a:36:7f:38:69:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=293324a2d7412a87d34bac4afd531e2ec247b137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:54:2f:94:71:4b:50:e2:95:f0:6a:a9:d9:
66:45:55:99:1a:36:30:c9:39:67:18:2a:3a:23:55:
ba:6c:a3:88:aa:34:d5:79:da:30:82:b2:91:39:69:
50:ed:6d:c0:e2:09:d7:b9:5a:17:73:21:8e:bd:f6:
25:e6:e7:74:5b:3c:a4:4f:1c:cb:4a:61:22:5b:08:
e4:5b:28:2b:23:d8:38:d8:95:1d:26:9f:50:e0:29:
c7:33:dd:58:0e:01:fa:18:7e:b6:e5:ac:ed:82:7a:
be:46:07:5f:dc:71:ff:88:c3:3e:99:fd:6b:93:44:
7c:17:ff:15:b9:c5:61:d8:b4:29:a7:0f:9c:ae:61:
c1:1c:55:8d:95:ee:20:24:47:2f:60:1d:40:a1:76:
8c:c6:b5:59:3e:73:a5:b2:36:97:ab:d5:c5:e5:eb:
2b:6b:d5:a0:44:b2:01:4b:fb:8d:fd:88:fa:be:18:
f4:6b:77:c7:17:75:c5:da:aa:e6:a0:17:29:75:f4:
2a:5a:5b:42:18:51:48:a9:1a:9b:4c:5a:8b:93:da:
be:25:f4:84:fa:3b:95:f6:d5:db:11:06:79:6c:ec:
be:8c:1c:30:18:5b:d9:b8:0c:d0:5a:d6:59:12:ab:
e6:6b:8c:9c:2d:eb:43:75:b1:9d:c3:fe:c7:0c:58:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:24:A2:D7:41:2A:87:D3:4B:AC:4A:FD:53:1E:2E:C2:47:B1:37
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:7b:69:06:8e:97:76:e7:5b:39:b9:1a:bd:a0:70:3a:8a:
b9:12:53:db:ea:17:92:d4:ea:c0:58:21:2b:90:55:92:eb:93:
f4:3a:c0:bb:e7:17:8a:65:ef:9b:4e:b2:8b:01:2f:73:24:b2:
df:42:ed:2f:7d:60:e0:f9:af:9b:ff:80:bb:07:ca:a0:30:5f:
96:18:70:0c:f0:e4:13:8a:31:0b:29:02:8f:fb:99:3d:e3:d4:
b5:c6:e8:4f:4b:06:42:81:cc:cb:4f:fd:6f:4a:5c:5b:9f:31:
a3:53:35:c2:c9:14:f6:20:e8:d3:eb:56:43:19:e5:c8:11:0f:
66:67:a4:3c:9b:22:23:48:d1:4c:05:c3:76:19:17:6a:dd:68:
12:6c:15:0f:19:d7:2f:16:25:3f:c4:4a:40:50:a2:88:a9:b8:
e7:a4:da:5f:94:5c:d1:5e:93:6f:64:34:24:0b:18:97:df:d2:
b2:99:8e:e8:aa:27:c2:c7:ab:ae:26:1b:3d:95:82:2a:b1:32:
97:d6:82:58:af:46:69:7e:80:35:18:a5:80:1d:52:96:a9:04:
dd:21:e2:7b:a0:e5:5c:79:3b:f3:3b:74:8a:ae:53:2d:f8:83:
22:25:c0:b6:91:b8:28:d7:66:32:b0:61:7b:ba:2f:ef:c6:e9:
c3:ca:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client