Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: YcExYN3moPBkq0A1KChSgfeZdC8pL37FxWIpu0KhhAc=
Subject key identifier: 74:F4:65:4C:EF:F5:E5:E0:20:29:FD:7E:FA:2E:07:30:FA:B4:F5:58
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 0194BC3C16C68DFA6094DB6CBE4F2F4CC7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: ISEk6AwP8AXJaggT8Uvd/5fCD6o5Fr3yx5teBNu/i/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:c6:8d:fa:60:94:db:6c:be:4f:2f:4c:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=74f4654ceff5e5e02029fd7efa2e0730fab4f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:9b:f0:73:2f:62:3a:b6:60:16:d8:5c:41:
7a:49:f2:e3:3c:4e:10:69:65:ad:da:f8:a4:0c:f5:
76:17:93:cb:54:44:4d:4c:a9:13:48:48:44:d1:2e:
3c:6f:81:a9:c2:21:1e:f3:87:59:91:a7:4c:33:7b:
c5:96:86:54:49:ab:06:15:e3:64:5e:12:3e:8d:77:
db:97:13:1f:3a:77:04:c5:f6:b1:6b:2e:03:ca:0f:
3a:09:b8:8a:43:d6:6e:28:98:cf:df:6c:94:0f:c2:
28:d8:a8:88:31:4a:37:1a:68:d8:f6:bb:70:5b:24:
2f:6b:f3:76:0e:7b:67:c1:d0:bb:93:21:36:1d:c4:
c6:d7:10:a0:80:84:9f:23:2f:a2:68:34:d8:6c:b3:
28:0b:19:70:3d:3c:95:83:54:b1:69:67:e9:9f:2e:
62:32:75:48:0d:10:13:9b:24:ba:9f:6a:44:5c:5d:
1c:59:e1:d1:84:60:bd:85:f8:a0:12:4e:5d:44:3e:
00:e9:f1:22:90:b8:29:13:0f:80:04:23:40:14:82:
ce:90:7d:f0:79:93:4c:1c:04:4a:a7:35:42:f3:75:
10:aa:48:98:d9:43:cf:ff:a3:fb:f6:3f:49:81:20:
5f:dd:05:de:92:7c:11:46:51:39:6c:5d:a6:e1:66:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:65:4C:EF:F5:E5:E0:20:29:FD:7E:FA:2E:07:30:FA:B4:F5:58
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:1a:f3:e8:eb:ba:ce:b6:05:a0:76:10:3d:6a:78:c3:70:
8a:c3:28:e4:00:6b:70:02:fa:9a:99:ae:df:27:62:d7:1c:31:
c6:4b:65:00:e6:f2:e6:92:61:55:75:f2:96:f9:5b:0a:c1:b3:
2a:ec:03:4f:21:3a:a7:14:b1:1a:d7:ac:2b:c0:37:a1:fe:b8:
af:97:39:8f:ac:eb:7d:32:91:1a:54:12:15:35:fb:d4:b7:e1:
49:cb:09:e4:6e:4d:b3:8c:fc:ac:ee:4c:12:28:11:c9:38:12:
a4:c1:71:ba:4f:94:cb:d1:8a:c1:92:36:4c:6f:39:f0:38:9f:
de:d1:6a:55:a8:8a:1c:3d:88:39:2e:07:da:9c:68:f6:48:c1:
df:d9:b6:d8:c6:76:c8:40:d8:94:4c:08:a8:3f:11:21:4c:b6:
ae:eb:7d:8f:2f:ea:3d:06:4f:43:86:4c:58:ad:81:1f:6b:08:
3a:ae:f8:a9:28:92:14:78:e0:ea:6d:07:e0:f6:ad:8d:3b:e1:
6a:3f:cf:b0:df:78:80:f8:08:bb:d9:24:cf:ac:bc:dc:2c:9d:
6c:3f:49:51:02:97:59:41:5a:13:f3:a1:4b:42:da:ff:40:60:
0a:60:46:7b:f5:83:83:57:a5:b0:8c:44:34:aa:3f:38:64:47:
6a:ad:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client