Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: gooR0ZZPthPDMi6FzQFe26OQmpD/2+KCrFbR1TVFTZg=
Subject key identifier: A7:46:DF:45:E5:84:C7:98:8F:DC:80:5C:FC:E4:09:B2:09:8C:FD:3F
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0194BCE0AB735DCEF8C0330414DEA8B97AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0A4A
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: CDROyiuQtaw/OX6dmQ3aTPwU2kyzfLTAVEehwT5jWj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:73:5d:ce:f8:c0:33:04:14:de:a8:b9:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=a746df45e584c7988fdc805cfce409b2098cfd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:69:39:1a:75:07:fe:c3:c7:7f:c4:cb:d5:
eb:84:fa:6f:ee:d5:ea:b9:8e:d5:58:40:c7:e1:b3:
d8:a9:d3:53:2c:db:5d:01:13:27:bd:89:1e:aa:99:
de:a0:e0:8d:ed:ec:85:57:81:67:7d:4f:c6:fc:4a:
65:55:78:25:b6:5b:db:1e:17:91:c8:ce:bd:63:c3:
8e:e7:1e:e1:c8:74:5c:69:5e:ce:1e:10:4e:03:2a:
d1:6c:1f:17:ea:e6:28:1a:b0:5e:9e:dd:d8:a3:5c:
d7:35:1f:48:80:78:4a:90:35:18:ac:d7:9c:98:4b:
71:75:2c:dc:d2:41:b0:15:90:68:16:b1:19:e1:df:
c9:e5:f8:c8:2e:84:22:f4:40:d1:a9:61:9b:75:43:
30:b2:9a:bd:fe:39:a4:9f:26:31:c0:ad:a7:17:57:
13:1a:bb:a4:28:5e:f5:b2:3e:54:a1:c0:b8:4a:b5:
7e:a9:e4:a4:f7:4a:7c:3e:2f:32:01:44:23:40:d9:
30:01:92:5d:ca:b4:bf:c4:f4:ed:59:51:cf:95:2d:
17:4b:d8:38:a8:5a:de:30:a1:17:b9:fd:61:ab:35:
4a:4a:32:23:26:8a:53:6c:70:fc:e9:98:20:fb:e5:
88:3f:cc:7d:21:7b:9a:13:f4:ca:02:4b:e8:5e:06:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:DF:45:E5:84:C7:98:8F:DC:80:5C:FC:E4:09:B2:09:8C:FD:3F
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2c:b8:be:4e:17:e1:64:4a:90:72:5a:5d:88:03:41:e4:15:
e1:5e:75:ba:51:8f:2a:81:bc:d4:50:b7:32:73:b7:cb:7f:e5:
4c:bb:99:32:60:49:cf:1e:c4:92:b3:6a:8b:08:10:49:37:06:
0f:4a:d5:a8:9b:7f:0c:1d:66:38:c2:96:a3:ad:b6:66:e1:b0:
e4:5d:12:1f:31:fc:08:ea:8e:10:dd:6d:c2:b1:07:31:cc:db:
e4:09:76:f3:c1:9c:5f:7d:ac:1c:6b:23:ce:36:07:88:8a:1a:
53:86:7b:6b:3e:22:24:3a:6e:38:fa:41:3c:28:fc:27:e5:f5:
71:06:9b:0e:d1:65:92:28:8e:23:31:eb:74:2f:2d:cb:12:61:
30:6f:32:37:6b:db:c8:e5:a0:2a:64:ae:f4:79:6b:d1:7b:2c:
62:c2:f7:0f:e9:b2:16:08:62:52:a7:9e:f2:21:cd:40:8c:51:
a4:6e:1e:46:31:75:74:7b:97:80:97:cb:34:16:23:8f:72:93:
77:70:fd:c1:ca:f8:c4:fd:56:c0:65:73:b5:8a:14:10:1c:f8:
80:a3:a9:66:31:b3:21:5b:9e:74:cb:d7:ad:5b:71:2b:bc:7e:
cf:37:00:d8:67:49:3d:05:a0:a8:e8:4c:93:3c:29:19:f5:0a:
ca:4f:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client