Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: 0Jfw3np4vPzcAZkt6kgqqKDF0ESwm4AJLreCo/rZznw=
Subject key identifier: 35:14:7B:A4:A6:0A:B2:4E:A5:B1:B3:09:44:50:3D:54:08:94:CC:DA
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 0194BC3C5BBD2E40E5FD27E8D1C168EE086D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 5FA6usbApR1_cX5AgsEzHiEcMB4.roa (hash: 7OuczURaJl5BP/q53z8kXUiqcwX3Z4OY7NVnaBx1Pg0=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: OyqzGesvvcfDVDAntoNvdlufue61G18+3jGdCouAFxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:bd:2e:40:e5:fd:27:e8:d1:c1:68:ee:08:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=35147ba4a60ab24ea5b1b30944503d540894ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:b7:e6:d4:63:1d:c1:53:25:6d:7c:10:55:
ab:8f:23:27:b0:b8:3e:c4:9f:63:4e:6f:3d:1a:da:
b9:f6:91:35:91:cd:ac:f2:5b:80:93:8d:07:ac:d5:
0d:2e:6f:53:92:59:98:a6:0b:aa:1f:2c:30:dd:d9:
a2:7f:36:6a:73:ae:45:e6:40:98:77:10:38:cb:66:
6b:be:57:61:db:87:6e:7e:19:6d:16:36:ef:cc:83:
9d:2d:52:9f:2d:8e:ff:71:d2:96:db:f4:73:b3:19:
b4:72:3a:8b:97:a1:ff:3f:31:06:21:0c:03:20:74:
95:7d:1f:dd:d0:0a:f4:69:01:2d:00:72:d8:7e:3a:
2d:8e:e0:b2:e0:7b:a2:9c:7b:db:5b:0a:d2:fd:cf:
5b:7e:d9:8a:97:74:08:57:89:6a:f1:53:b3:10:6f:
0d:2f:0e:9a:2b:10:7b:8b:3c:dd:a3:cc:20:b3:86:
e2:52:1c:36:c6:70:4a:ab:97:1b:a1:1a:9e:87:3a:
45:c0:89:f0:58:c0:7f:ae:c3:a1:5d:3d:a4:a3:7d:
07:7a:99:d4:89:bf:c9:43:02:5f:14:b6:a2:e9:69:
cb:3e:65:93:33:b0:00:e5:48:89:22:93:6f:8f:e4:
28:6f:db:40:04:41:0b:a8:ff:7e:f7:37:60:1a:cc:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:7B:A4:A6:0A:B2:4E:A5:B1:B3:09:44:50:3D:54:08:94:CC:DA
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:17:e1:d2:40:42:ed:c1:b7:e6:3b:19:af:df:39:ef:42:89:
4f:ed:f4:7d:41:c8:64:65:f7:78:32:56:ee:4b:21:aa:2c:a8:
05:1c:9a:bd:b7:85:80:23:f8:f6:11:bd:f1:ae:3f:f5:93:3b:
be:eb:a2:c5:7c:e8:89:3b:d4:0c:2a:d2:ce:69:b1:59:a0:ce:
40:5a:8e:31:51:28:57:01:0c:56:87:55:e8:71:2f:c0:50:c5:
46:d1:45:ac:44:4b:0e:f7:d5:1c:1e:b8:eb:64:ea:9c:1f:d6:
95:df:05:fd:4e:82:9f:02:5a:7e:ba:13:04:4b:5d:30:3e:de:
56:3d:6e:e4:2d:f1:58:be:43:c8:ba:d2:42:0f:13:1b:64:2f:
b0:9c:71:37:43:bb:bb:cd:8d:6c:32:eb:e0:d4:a8:51:88:19:
09:7c:d4:44:a1:51:26:eb:42:fb:70:fb:54:57:0e:38:67:25:
fe:64:2c:d6:8d:f3:d5:83:38:08:5a:06:76:ad:18:8e:72:37:
76:14:14:89:08:d2:9d:a3:b5:97:f0:d6:d3:43:ab:79:9e:0a:
50:20:50:08:85:9b:69:d5:be:61:1a:a1:2a:07:45:56:89:ad:
c2:d4:82:ae:93:1b:08:6b:81:ec:c6:79:da:bd:0b:8b:3e:2c:
26:1c:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:02 2025 by rpki-client