Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: 0NutqTvRHWarr1CV9nvygPwL9dJvgQDwmnva2fiYewE=
Subject key identifier: 44:4C:FC:CF:7C:16:4F:BE:BE:08:A3:6A:F1:62:34:99:61:2D:42:AE
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 0194BC72999EF52CDDE42043E5D71019CC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: jvTz8KSxBwLivbszGOpAqAWFc80dopJKShPQSU2oCqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:9e:f5:2c:dd:e4:20:43:e5:d7:10:19:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=444cfccf7c164fbebe08a36af1623499612d42ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:da:97:13:84:de:7e:73:8f:0f:81:a0:73:
8b:c5:82:48:72:df:7c:cc:ff:11:80:9a:e0:37:c4:
14:01:44:e4:e5:94:9c:e4:de:11:ea:fd:8e:a5:77:
71:9f:e1:80:81:73:f4:de:dc:87:7f:1f:97:51:1f:
51:45:d1:fe:8b:c8:ca:a6:b7:b4:d8:fb:e2:6c:7e:
ea:ad:c8:9c:61:76:22:f7:14:7a:39:c9:f5:94:15:
95:bb:52:82:01:06:ca:ef:6e:c9:a5:6f:e8:43:a7:
7b:e4:5c:9e:75:e7:90:80:b1:ac:0f:ff:d8:48:c7:
cc:d7:e7:4a:d2:6e:a1:6d:ff:86:18:0d:94:37:1e:
02:6a:d0:f1:f6:95:56:3f:52:7b:7b:f2:98:bb:63:
57:ae:f4:f7:9f:77:d9:d5:b9:16:b7:2c:88:0d:4d:
71:7f:12:d6:c1:75:3e:cc:ae:a9:72:e1:3f:64:40:
bd:5e:8f:4c:dc:51:7d:8e:b7:4d:fe:3d:6b:a2:df:
fa:a9:08:8d:35:cf:86:4c:39:8c:fe:32:6f:ed:0e:
62:45:46:fe:d3:5d:4d:35:4d:9c:b1:d6:78:96:72:
b1:5c:94:45:e0:fa:8a:5d:f0:d4:69:8d:6d:c7:89:
2f:8a:49:c0:a0:62:b5:5b:f3:db:b5:c8:95:0f:c5:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:FC:CF:7C:16:4F:BE:BE:08:A3:6A:F1:62:34:99:61:2D:42:AE
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8b:90:77:2c:68:a5:41:58:06:f9:3d:0f:fd:0c:ae:77:6b:
d2:0d:1d:ec:3f:fd:a3:a6:b4:05:de:38:b5:ad:b2:1e:1c:19:
d8:7f:40:cb:9e:05:5f:b7:f5:82:8a:50:96:e0:51:ae:53:e2:
a0:69:41:8e:8f:be:61:7f:df:96:e4:41:95:0e:a2:09:5a:42:
43:3e:97:ec:c1:c6:41:9d:2b:59:a7:80:ea:29:0a:89:40:bd:
5e:f4:f6:bb:24:04:23:79:bc:6b:0a:8c:3c:95:88:7c:f8:13:
52:6d:8d:16:fa:8b:2d:b7:89:dc:43:b0:2b:a6:09:41:dd:9c:
2d:92:1b:23:69:df:a3:cd:bf:93:01:50:fb:df:4b:a7:38:81:
87:22:d6:a4:9b:b4:a3:99:41:66:46:4e:74:bc:7a:cd:00:7e:
2d:78:f8:6e:7f:83:3e:b1:1a:76:39:de:27:bc:4d:8d:31:cb:
97:fe:58:85:04:f1:f4:7c:d0:7d:86:de:60:b9:e8:6a:06:1d:
10:3e:5c:73:95:77:c9:50:ed:df:bc:a5:06:00:a3:3f:c0:7e:
1e:12:b1:7b:8e:5e:3f:9f:7d:e1:de:a9:8e:75:a5:93:47:20:
cb:66:ac:be:2b:52:ff:bb:6d:5f:9e:c0:3a:d5:d1:75:e8:61:
9f:e8:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:06 2025 by rpki-client