Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: Cj+OG6fPlthvc0XCsKMwKZzHf49FdEAT8bc6S+74h2s=
Subject key identifier: 0A:85:AA:2F:C9:69:AA:E5:17:95:08:B6:F1:6D:6E:B6:92:2A:4B:15
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 0194BD4E4CB5B07C44DA5E26DB7A72B4FB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: J34FEax5wDDr8doFeio-FtYnXSk.roa (hash: BSkpMRVkkRJOnXjYlfdRciFjV87O18peqIcoYZgdhNU=)
2: SYl42DSQ15f2MkRVXhgFO_DcT3g.roa (hash: qnxKanj8UYPbp1ej9wVkGKNRD7q8MIi89cK5pEM0kaU=)
3: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: hXy33pTPQ8Stj9I0ioy7CwACQC1QWJinbAbMyILtAEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:b5:b0:7c:44:da:5e:26:db:7a:72:b4:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=0a85aa2fc969aae5179508b6f16d6eb6922a4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:be:7f:6e:f6:fe:aa:10:49:5b:60:39:39:
2b:51:c4:d2:6e:05:23:75:2b:94:fb:04:6c:eb:9b:
7c:18:e3:20:23:e8:46:91:9f:6b:76:8d:5a:80:63:
ae:04:2a:f4:53:27:7c:c9:60:e8:9c:d6:36:a9:52:
01:70:b7:33:b8:89:f5:42:78:57:f7:f0:18:aa:bf:
5e:d1:85:b3:c2:48:a1:06:a3:d4:ca:6e:fa:95:06:
0e:6a:cf:cf:26:09:6f:61:c4:ed:80:5a:70:46:63:
c1:75:75:13:d4:26:33:c2:9d:63:b0:60:cc:bc:b6:
82:67:00:56:ef:85:8b:59:af:7f:31:be:e3:84:fb:
e6:bd:f7:5c:97:5b:36:fd:f5:e9:5c:c9:bd:a1:50:
18:1a:ef:84:b4:64:59:5c:4f:8a:5f:6e:71:d1:2c:
41:0a:bb:8e:e7:56:b9:ab:56:33:ec:ef:0d:b9:ac:
fb:09:8b:cd:a5:6b:0c:14:37:c7:9b:b8:b8:9a:e1:
d5:43:2f:c8:a7:b4:56:f6:9b:59:12:16:5b:88:4d:
40:ad:0a:9e:ba:90:08:07:af:9f:d6:b5:8e:ad:c3:
1d:ba:ee:61:e2:ee:7f:7d:f9:c4:50:50:84:3c:9a:
7d:88:da:02:f9:43:af:fa:f5:29:7e:55:f6:72:77:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:AA:2F:C9:69:AA:E5:17:95:08:B6:F1:6D:6E:B6:92:2A:4B:15
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:10:ce:90:f0:a1:d8:fd:5b:d6:76:5f:81:69:c4:d9:6d:
59:06:f0:c4:14:a8:e8:9b:e1:59:9c:68:e8:2a:8e:2e:28:d1:
a6:f6:8e:29:ab:25:93:2b:d5:68:41:88:cb:52:aa:a4:65:66:
ac:6f:da:fd:9e:95:f2:4c:d2:6d:18:d7:d5:b6:2f:77:e0:ba:
ed:51:74:34:75:1f:ae:09:df:7e:08:9a:4f:37:cb:65:3d:bb:
86:e9:db:52:f8:c8:e8:d8:3b:98:05:2f:84:61:bb:de:24:f6:
32:f7:f5:f2:63:79:10:3e:63:54:1e:a4:31:3a:8f:70:99:54:
c9:cb:4c:e5:3b:65:eb:fa:ca:0e:95:e0:f7:9f:51:b2:e6:34:
53:8b:6f:25:8e:ac:76:7c:5b:de:75:a8:b5:65:08:e6:fc:a4:
90:0c:11:1a:55:63:02:51:c3:09:0f:ae:00:54:4d:2d:2f:46:
c0:2a:70:e6:84:4e:50:ce:46:0c:5a:b6:25:4b:72:f7:36:71:
db:58:97:a5:d1:cb:8d:47:3c:8c:4f:06:f6:b5:26:ae:9b:57:
ac:a6:d3:e0:d7:b8:84:56:78:30:61:1c:ab:d0:1d:6f:19:53:
d4:d9:ac:e7:4f:41:cf:2a:52:49:2d:2a:8b:48:6b:32:68:d1:
a6:75:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:23 2025 by rpki-client