Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: lfb60ymMBVBIVuJG5tWbtoj0ADCx1JuN7YEk0K604Go=
Subject key identifier: 7C:D2:4E:7B:79:8F:03:40:18:91:70:67:0E:DC:D1:23:9C:E0:A3:DF
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 0194BCE0A02335720FAC8B307BA3A379AE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: +YB5NQwi+n3810Yp5Vmio14/LauQT2aG+LpERsi9Qh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:23:35:72:0f:ac:8b:30:7b:a3:a3:79:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=7cd24e7b798f0340189170670edcd1239ce0a3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:a8:f3:e5:d5:02:70:5a:66:45:1a:3e:d4:
89:e0:11:ef:6f:88:e9:eb:fa:1e:2e:d8:2e:ab:eb:
d1:e1:08:2d:a4:0f:95:53:a9:a8:60:ae:c5:54:0c:
f0:90:4f:fd:d6:48:e1:c9:b3:69:81:10:55:e2:81:
36:78:61:48:a9:74:2b:5c:e1:6b:ac:53:9f:39:75:
91:94:ef:34:b8:e0:49:6f:47:6d:7b:f5:90:35:e8:
be:00:29:92:d0:f0:c1:25:60:14:81:ad:5f:fc:3a:
6b:72:b1:bb:85:a4:2d:3d:46:34:a6:c1:bb:f3:bc:
b0:7e:af:59:ea:9d:ba:25:74:67:a2:56:dc:db:a2:
b4:9f:c1:07:31:2d:c4:69:a7:fc:bc:76:7a:ec:ea:
ea:c5:22:29:e2:ea:fc:a7:84:c4:0e:98:60:aa:2f:
b5:26:f8:44:29:86:ea:6d:5c:f6:10:0f:b7:90:75:
df:fd:7a:2f:43:85:ab:b9:e3:c8:e5:d0:2a:47:98:
3b:76:73:6f:04:f6:ce:ea:e2:15:fc:88:a2:9c:b0:
f7:b6:ac:52:ce:c9:fd:a6:be:a9:6f:9f:ac:4a:12:
d9:37:58:49:fb:f2:96:bc:f5:9a:94:95:ce:95:4b:
e0:f5:30:00:b0:e0:bc:bc:25:1b:1b:b1:af:90:2c:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:4E:7B:79:8F:03:40:18:91:70:67:0E:DC:D1:23:9C:E0:A3:DF
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:fc:d7:0a:12:59:fa:12:e3:55:97:b6:24:9b:b8:3b:5f:
e9:93:db:88:5f:6c:ef:8e:19:81:88:ac:11:e9:20:6e:7f:c8:
1b:6e:ee:c4:fa:27:ce:76:16:09:fb:c7:b7:10:68:7b:40:d1:
a8:cb:87:df:9e:40:71:bc:84:bd:b8:9b:52:a4:4b:e3:b1:3b:
d1:9a:ea:26:52:64:dd:62:3f:c8:97:04:5e:79:c1:93:c0:4b:
48:f1:19:73:2a:d8:42:03:fa:46:b5:23:2e:91:47:ad:aa:62:
fe:f6:02:13:1d:7c:f7:9f:26:df:15:95:23:b6:6b:5d:33:69:
ef:70:b7:ad:17:4c:70:4f:46:de:5b:fc:51:c9:1c:74:0e:43:
a5:a4:ce:63:ec:de:d2:63:dc:a8:7d:51:18:f3:19:08:af:b8:
cb:37:36:64:71:39:fc:ca:7a:a8:40:14:0d:1e:5c:37:b6:32:
93:a1:6a:ca:37:c7:bd:11:97:d1:2b:67:aa:51:a3:7f:bf:07:
fe:8c:cc:e5:41:3f:b2:e6:58:d3:44:dc:47:e7:38:87:bd:0a:
67:2a:48:5b:fb:f3:0b:5e:f2:60:9d:7d:09:69:71:43:01:12:
c4:3d:65:ee:89:26:4b:d2:1b:2c:8a:01:37:5a:32:6d:e9:0e:
c9:c7:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:49 2025 by rpki-client