Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: 2eaENMserooObkdMKc4ysNaJ5mfV5dgG3+ShUYlZFBk=
Subject key identifier: FA:0A:82:AD:8C:C2:42:94:1B:D7:67:E2:0F:1E:56:EA:69:8F:8B:26
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 0194BC3C0471E6178C986F0ABCCF6C7B62C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
3: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
4: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
5: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
6: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: BawqROvD/ce3czDIy6ku2TUZcXxBRaJEvYPKCb3xzrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:71:e6:17:8c:98:6f:0a:bc:cf:6c:7b:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=fa0a82ad8cc242941bd767e20f1e56ea698f8b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:63:a9:88:3a:1b:47:4e:e8:25:39:4b:8e:
22:89:a9:43:d3:c9:bc:ed:58:5f:96:59:48:17:77:
14:5a:63:22:f0:70:f9:23:f3:ed:78:57:6b:3c:a5:
0c:5d:e0:73:23:39:bf:92:5c:c7:90:32:73:4c:99:
82:f1:ae:d1:1f:5f:64:66:29:9d:25:d9:b2:03:70:
80:aa:e5:0d:32:0a:8e:51:9b:26:3d:d2:64:4d:e6:
ec:2f:42:c7:dd:68:ac:13:36:f1:e6:ea:a1:03:7e:
dd:80:f4:15:b6:c9:fd:43:c0:08:b1:f4:ff:e2:11:
dd:b0:f2:dc:04:b7:31:dd:58:d7:e9:44:21:76:c9:
30:81:10:68:f8:e4:32:c7:22:8b:36:49:62:cd:a0:
e6:fb:d6:5a:92:bb:6e:db:1d:91:1a:f8:aa:8a:fc:
c0:61:40:f6:d6:20:ee:20:99:25:c5:3d:7d:6f:53:
7c:e7:a8:34:b0:a3:e8:28:98:e1:f1:f6:de:30:95:
c0:87:43:f6:88:b9:5d:29:a5:df:67:dc:a2:98:c4:
14:73:b2:3e:2e:26:57:de:35:0b:1b:9f:d2:22:e5:
8c:ab:b7:af:d0:6a:9e:3e:b0:fc:9f:74:c6:86:d3:
08:f6:43:15:bd:bd:fc:26:af:24:d7:d8:a2:13:16:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:82:AD:8C:C2:42:94:1B:D7:67:E2:0F:1E:56:EA:69:8F:8B:26
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:e7:53:7a:5a:5d:4f:85:52:ba:72:03:04:9c:6e:ae:10:
7c:bc:ad:c3:35:2b:4c:79:c1:d9:66:e7:b4:15:f7:74:22:7d:
ff:2a:0b:71:2c:7c:1b:9e:83:a1:de:6f:ba:31:6d:31:4d:ac:
7d:38:fb:d6:10:d4:00:4c:6a:86:e1:c1:56:34:6d:77:ee:e8:
f3:c4:15:6f:ae:59:08:d1:56:bf:08:66:b5:fa:cb:2c:bc:eb:
b4:b6:b9:ce:da:bc:3c:aa:36:08:66:5d:7b:c5:72:dd:8a:b2:
42:8e:9f:f2:f7:9e:81:df:1b:78:b5:46:16:e9:81:00:8c:db:
c9:dc:3c:2c:58:02:03:54:0e:ff:6e:21:09:1c:13:66:e0:69:
e2:ab:dc:ea:01:e3:16:5e:19:7d:a7:23:a0:e5:fa:9e:2f:b4:
7a:29:86:a4:75:8c:d1:df:b8:b0:fb:08:0d:0c:92:e6:91:96:
c1:de:a2:16:a6:d6:f0:7e:fb:cf:99:12:52:6c:8a:d9:c3:f5:
66:e9:57:ae:ba:7f:88:27:2f:86:8b:18:4b:5d:aa:ad:30:d5:
5a:17:62:c9:87:51:fd:e8:68:45:7e:05:dd:fc:63:02:6a:5d:
b4:cd:b6:01:c3:38:dd:ef:dc:bb:e5:a8:24:a7:e9:4e:db:f3:
b6:0c:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client