Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: XvA0oQRWS94nqSjh+R+x+1dYGN3JobYr24ibzqpXo/c=
Subject key identifier: A9:88:5D:81:4B:EE:B6:C0:CB:C0:F4:6A:8C:1F:FE:D5:25:28:20:FF
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 0194BC04E701A92D575A1B7536CC9DD20C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: DdyhjwN56YOAhI949wkVc1YEm3iBIw0l1EPlI70Qvz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:01:a9:2d:57:5a:1b:75:36:cc:9d:d2:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=a9885d814beeb6c0cbc0f46a8c1ffed5252820ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:6c:e6:36:c7:e6:39:18:79:e3:46:1e:2d:
8a:d8:8a:2e:53:88:83:77:ed:12:1a:f4:4c:7f:55:
03:5d:1d:41:d4:e3:ec:5c:b1:5a:c1:19:be:5c:cf:
0b:9e:c9:9c:0c:af:61:e8:f0:11:20:18:70:58:00:
7f:34:c7:6b:7c:89:d7:0b:a3:80:da:ee:8a:4c:b4:
8b:4e:21:b1:65:6a:e0:2a:b6:36:48:ef:e9:1e:e0:
26:f5:f0:13:20:b3:25:ec:c7:49:5c:3b:36:15:db:
a8:b5:33:9b:3c:26:4f:cc:8b:f4:3f:f9:58:09:d8:
88:e5:78:45:61:5e:e6:68:81:8d:a1:35:e7:68:53:
6b:c5:9d:b6:07:93:29:96:5f:4a:17:2f:2a:d9:e5:
25:8c:fe:b0:e8:51:bf:33:0c:c2:5d:9f:fc:8a:ef:
90:2e:c5:63:1b:7f:60:1e:47:f9:07:a5:9e:da:dd:
36:fb:ca:01:77:56:02:f1:05:e8:1f:d7:9e:2e:2a:
f7:4d:9b:ec:73:25:55:ab:7c:16:24:8b:f6:56:ca:
ed:80:ba:79:dc:74:b9:6b:15:37:dc:fd:50:98:8c:
cb:ba:aa:5b:68:2d:96:25:1c:cb:5c:55:81:77:17:
5a:fa:83:24:6e:69:97:cc:bb:45:4a:93:e9:4e:4a:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:5D:81:4B:EE:B6:C0:CB:C0:F4:6A:8C:1F:FE:D5:25:28:20:FF
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:85:65:17:a4:fe:0e:3f:2d:63:8f:e7:80:08:ae:c0:a1:
b5:0a:e9:ec:98:69:97:8b:5d:1e:86:74:80:57:2c:a0:a5:8a:
56:ad:0c:12:0e:c9:e5:8c:06:fc:ca:37:e1:f9:2d:ae:39:6a:
e2:58:3d:90:13:f3:69:24:c8:2b:ee:fb:c9:0e:08:4d:bb:8b:
e1:d3:9a:c8:2b:22:d2:c6:70:79:20:bb:6b:94:ab:40:2b:eb:
97:82:a4:2e:ac:63:93:c7:43:7e:d9:a5:2f:b5:79:9f:c5:16:
5e:16:0b:85:f5:0c:e1:3e:ba:42:8a:04:48:01:37:42:75:aa:
ba:51:06:2c:21:a9:75:e0:05:75:9c:4c:16:2f:42:7f:5c:76:
75:56:ab:84:da:45:f6:09:15:be:26:c3:f1:18:b9:33:f5:3b:
a1:8f:08:51:56:72:d4:ff:67:0b:73:10:6a:96:1e:97:21:f7:
e7:39:e9:02:46:d2:fa:9b:f0:a5:66:ae:1c:fa:56:85:df:28:
6d:b9:d5:2e:2e:3e:a3:07:10:da:a0:24:13:5f:5c:dc:c4:1a:
d8:25:98:50:a0:c6:c4:e2:18:18:33:3c:1f:ab:90:36:05:3b:
fe:d0:fc:49:c6:34:89:92:fa:27:f7:ac:e4:c8:d0:ae:24:95:
49:9e:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:03 2025 by rpki-client