Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: wmpvrd1O+X2bWXL+xetU4gWVVOyJ10JeweAEJbrN/lk=
Subject key identifier: C0:A9:DA:2B:BB:81:94:D8:F4:CC:90:9C:30:DA:58:71:E1:48:32:50
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 0194BBCE77D9BB37CD19C4E23404CDBAC095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 01F2
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: QbHddjIygrfpuenbW3nICsv0ee9g7sA+lrdXvZhOrXk=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:d9:bb:37:cd:19:c4:e2:34:04:cd:ba:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=c0a9da2bbb8194d8f4cc909c30da5871e1483250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:30:e3:97:86:a8:4f:fa:ba:46:59:b3:2b:
b1:b2:06:1b:a8:3d:c1:12:b0:86:70:e0:da:cc:44:
30:63:fc:c5:87:cd:44:0f:a6:45:61:1d:62:fe:77:
ce:1c:cd:dd:5b:b0:f1:a2:71:a4:2e:84:d7:78:5e:
a1:d4:40:3c:e8:60:3c:2b:47:20:6f:e4:75:37:2e:
27:5a:7f:3b:1a:1d:80:06:15:6e:cd:23:33:6c:36:
9c:2a:4d:7f:0d:52:57:a5:5f:c5:f4:f6:e9:db:30:
3a:83:4c:0d:7b:3d:2c:f0:fd:89:51:c9:6a:85:83:
5b:bd:e9:cd:b6:36:3f:96:3c:8d:0f:6c:04:db:d2:
ea:45:68:93:e8:34:aa:22:c3:3a:d3:3a:53:28:6c:
3e:fc:e8:02:71:12:63:4a:3f:31:ce:ce:30:e5:2b:
d0:01:e3:0f:fe:e2:ef:29:4e:84:ca:f2:86:e3:31:
a5:07:60:39:ab:8e:a4:31:49:b0:fb:6e:be:70:08:
aa:33:05:49:d4:91:84:59:fd:6a:32:8d:25:5a:8c:
2e:eb:9a:3a:f1:0b:93:3b:b0:9f:be:9f:32:90:53:
2e:ba:28:c5:fb:b0:6d:0d:95:c3:47:7b:29:c6:75:
84:ef:7d:12:4f:41:a4:4f:7b:4e:7f:db:fa:a9:f3:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:DA:2B:BB:81:94:D8:F4:CC:90:9C:30:DA:58:71:E1:48:32:50
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:4a:a9:45:31:e5:6a:04:f7:60:a3:7f:35:48:6a:82:02:
69:6b:41:2e:df:70:7f:7b:38:13:7c:1e:be:3b:a9:4c:22:22:
c5:47:71:2a:da:2f:ed:0f:8d:6c:e1:e8:cc:8f:e3:84:d8:f3:
66:b0:9b:a3:95:97:cb:5f:64:10:43:ac:b9:48:e8:6e:f7:9f:
e4:5d:cf:4b:a1:f1:fb:4e:f2:23:8a:50:16:83:a0:4f:cb:36:
c6:44:3c:42:f1:83:e4:07:df:12:b4:a9:52:02:80:b2:eb:a4:
a0:3e:89:34:d5:22:4f:6f:38:21:be:ba:6b:e9:f6:59:df:22:
43:fa:c1:e3:36:82:ca:51:f2:aa:4d:dc:04:f5:ef:4e:b8:46:
04:81:72:3a:b9:59:e5:c0:8d:d5:b8:f4:56:e9:cd:15:ee:80:
5e:98:41:36:d8:37:3d:1e:a0:7b:9e:f9:31:56:77:31:24:dd:
d9:22:b6:29:60:50:93:57:fb:08:23:68:8d:33:f6:da:33:c2:
ae:f1:ac:75:48:00:c6:dd:e3:4b:d7:1b:9b:80:8e:78:17:dc:
5b:91:ef:38:42:56:f4:36:d0:e1:c3:b8:bd:78:bf:fe:ae:6c:
57:73:b7:4f:5a:f9:4b:4f:3b:70:88:0f:ab:ad:15:85:71:66:
5e:8a:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:50 2025 by rpki-client