Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: j8Lb+UnAMkAlBpDh1zPfy9JNMCMrCOqX0giNqmkRXqI=
Subject key identifier: E0:CA:47:B1:10:EE:76:92:D9:EF:1E:6F:21:92:87:45:98:D7:F4:2D
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 0194BCA98BFF850EACE8D70ADABFE51E9E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 0FC2
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: eGI6gL/2s9H+L3bqvQw/s2yAvTiaBrKeiXHTawnkb1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:ff:85:0e:ac:e8:d7:0a:da:bf:e5:1e:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=e0ca47b110ee7692d9ef1e6f2192874598d7f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:35:2d:f3:66:15:c3:68:95:32:43:27:a2:
86:ec:ff:4d:07:b4:59:13:36:76:30:f4:e5:91:b9:
fc:15:c5:db:43:66:c1:b8:d3:20:b5:60:3f:67:46:
ec:04:0f:9f:59:a3:e8:d6:1f:b9:ad:46:8f:9b:23:
8e:d4:c2:a9:7e:48:7b:28:c2:3e:9c:1b:96:7c:9e:
6c:91:59:cc:9d:01:2a:a4:5f:e6:04:1c:cb:71:ab:
49:3a:25:2d:56:ed:68:b5:42:64:8b:e8:3c:2d:8a:
3f:4d:e0:86:5e:1a:85:a8:46:7c:8d:d6:fe:fb:8c:
b5:89:c5:09:3f:a7:eb:58:09:62:6a:9d:57:6a:20:
f2:7d:9a:3a:7f:34:05:df:cc:7f:5e:01:b7:af:a7:
30:bd:91:e2:3d:0e:a9:5a:04:c8:23:12:90:22:dd:
31:c3:84:64:d6:f1:cb:a1:25:5c:a5:ec:7a:14:0d:
8b:e1:8b:c6:fa:d9:c1:70:fb:c4:30:10:e8:b8:88:
fc:ad:90:f3:8d:22:03:88:c1:31:7a:51:66:36:a6:
f9:6e:1e:91:4d:f9:c6:07:56:e3:97:de:31:0e:f1:
88:2b:f2:33:92:28:2a:d3:3a:81:85:63:d8:45:05:
9f:c6:39:bc:36:46:c4:1d:40:81:50:36:b1:e6:80:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:47:B1:10:EE:76:92:D9:EF:1E:6F:21:92:87:45:98:D7:F4:2D
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:1e:0e:c9:30:4f:35:95:e1:a9:be:2a:41:9e:28:23:b4:
d0:70:52:d9:6b:d0:7c:e5:85:b5:57:a8:2d:10:c6:c2:74:e4:
1b:91:d5:ad:79:45:d4:d4:ff:70:cb:ff:02:d9:f7:55:5a:07:
f0:77:1a:79:3b:4e:30:7e:50:20:55:c4:19:08:c6:6a:79:07:
a9:8c:cf:54:db:64:c0:40:8b:1c:b5:82:ba:e2:71:c5:73:12:
20:68:e2:7a:3e:3a:d2:e9:94:c6:f0:e2:b0:ce:1a:d2:8a:8a:
e3:be:a3:66:da:66:14:f1:e4:d7:af:b7:72:f2:56:e3:70:53:
5e:2e:5b:00:ff:a7:8b:c5:04:82:48:2a:68:1c:2a:5d:83:3a:
05:71:72:08:f4:21:21:19:de:dc:45:d7:e5:7e:65:e3:9e:f1:
e2:fa:85:89:94:6a:87:72:78:04:fc:2f:e5:db:e6:7e:7c:f9:
98:b7:a0:b4:a8:06:fa:a0:29:2e:6a:89:b4:91:73:b4:23:13:
59:7c:ca:f9:9d:5f:41:63:6c:ad:ba:20:1f:f3:b3:63:5d:63:
ce:29:31:76:39:9e:e7:87:91:d7:8c:8c:95:f3:68:ee:25:b1:
21:76:72:33:ca:50:1f:35:cb:6f:51:fc:47:4d:2b:69:42:f7:
0f:0c:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:01 2025 by rpki-client