Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: lEmxmzYbzgnl9B0cAxLLgVy8MKcjqz17Wf2xGl1b5j4=
Subject key identifier: 01:CE:1E:B5:77:E4:02:A7:E7:12:09:A7:4F:95:F7:B2:F4:88:03:AE
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 0194BD4E3E7D90D6D00483036E3477D85468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: TEO5UnnhegAxcR+str/0w2I2KyhuTPUdgrlfJ44T23g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3e:7d:90:d6:d0:04:83:03:6e:34:77:d8:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=01ce1eb577e402a7e71209a74f95f7b2f48803ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:0b:21:b7:b0:7e:6a:d6:3d:04:16:10:c8:
47:10:25:5f:de:fe:02:c0:38:88:42:5e:8a:2d:18:
f5:69:2e:39:f0:20:43:c2:63:70:8b:54:28:26:05:
86:85:59:65:e9:67:f9:3f:c5:15:16:60:a5:71:dc:
80:0a:99:68:51:af:37:b9:70:44:eb:dd:fb:26:d1:
75:ec:85:33:61:57:e2:92:d2:76:49:97:df:02:6a:
0b:10:4c:4e:3e:05:1f:ee:b2:a7:1f:4d:42:af:8b:
40:3e:e3:77:81:50:a5:04:c2:33:22:f8:a8:0f:58:
7a:e2:41:e2:f4:08:df:cc:ab:da:de:8e:93:a4:1c:
e6:d4:39:a3:6a:1b:49:08:7a:8a:81:59:6c:3f:ca:
75:37:4b:ca:e0:f1:c3:a5:33:49:94:4f:bf:6f:69:
ec:cb:8d:f0:50:d8:35:a8:30:64:ad:ac:f9:e0:82:
3b:7f:9f:c5:a7:33:f9:98:2a:16:47:b1:69:86:1f:
0c:32:5f:72:af:92:c2:18:45:8f:d1:cd:31:a3:16:
2e:21:51:fc:ae:ff:5f:a7:52:23:d3:77:f8:9b:b4:
90:86:22:71:cc:b8:e1:73:fe:0b:67:6a:a0:ae:6a:
ef:96:55:03:b5:b5:26:5b:63:8a:0f:57:4c:77:54:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:1E:B5:77:E4:02:A7:E7:12:09:A7:4F:95:F7:B2:F4:88:03:AE
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:f3:f6:f2:cf:54:34:1a:a7:1a:8e:80:ab:4f:50:c3:23:
ed:3f:4c:e8:b4:72:a0:7a:76:49:54:27:1c:f6:fc:de:65:c7:
a5:a2:3d:d4:c8:eb:d0:24:77:10:af:62:00:ab:ba:bb:66:4b:
60:ed:68:0d:d6:e1:94:e5:73:a3:06:4f:bf:a1:b5:9e:4c:fb:
9f:e1:9e:6d:29:dc:2a:ef:e9:4a:41:0b:26:47:7e:a7:e5:6a:
31:ef:fd:fa:9f:e0:92:d6:3a:ab:52:73:9e:60:eb:18:85:41:
16:ca:9b:01:96:b0:d5:2b:c8:72:ad:33:20:5e:3f:1a:5a:db:
42:89:20:12:ae:a9:70:ca:59:24:cd:19:20:c0:4e:da:c5:6e:
ef:d1:19:2f:06:e1:2e:80:f4:0b:ab:da:3a:53:7f:6b:b7:47:
eb:99:e9:bc:98:97:4e:38:29:d2:c2:aa:2d:7b:bb:40:d6:28:
5c:ca:b6:a3:cc:4c:c7:56:81:84:c2:b5:87:86:4c:d0:8c:b3:
6a:b3:97:02:4e:a9:97:97:aa:fd:c9:f1:33:83:9a:b3:3b:4a:
e5:8c:7a:04:d0:f9:61:db:69:c3:75:c4:2c:9f:fb:39:02:42:
8c:51:b7:ec:f3:ae:f9:9b:a8:c6:7c:93:1a:89:27:60:e0:1b:
2b:ba:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:06 2025 by rpki-client