Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: c/hwpyGBTGnDhhxIKhbm3Q3uCVm1qsz6XN5O45P24gY=
Subject key identifier: 86:20:FE:98:E4:57:35:A9:E0:AC:EB:5A:01:3C:E6:BF:09:0D:AF:80
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 0194BCE0D83ABE2A74CCB08F9864D079970B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: m50G2xjf4eko7b4H4T04QnFfNVk.roa (hash: GGKv2wzF1TvAhDLfkaO5+AkkZcueQ+luEbM0QfwqNgs=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: +D7sUKE0RGE/AgN8rfHpVnlcgMg8PIyRuWn6+tfQD9s=)
3: sU9Gf8xtIizGCx3n2mNvIY0L-S4.roa (hash: 9lLK6NJxBVPn0bXzjcavrpReTIaQOByvwj845Zkopcs=)
4: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:3a:be:2a:74:cc:b0:8f:98:64:d0:79:97:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=8620fe98e45735a9e0aceb5a013ce6bf090daf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:7c:f2:ab:05:e1:9a:dd:bf:30:b0:cc:bf:
95:13:0e:e5:ff:21:69:36:42:39:00:21:54:16:38:
8f:62:52:52:d7:7d:93:d9:22:21:bf:6c:2e:61:97:
80:3e:01:ce:c9:bb:5a:ab:8d:bb:2d:f8:75:79:01:
74:76:7b:c4:cb:1c:2c:36:77:2e:0e:4a:7f:af:6e:
88:e2:af:66:af:e0:1f:7a:77:49:72:8b:fe:52:ac:
1d:20:52:42:6a:28:2e:5c:22:26:51:6a:73:ac:11:
87:a5:30:3e:cc:30:6b:58:ed:8d:57:4d:65:a0:4b:
03:df:4f:ca:0d:0d:8d:94:88:e2:71:a0:59:61:76:
dc:31:ef:d9:5b:bf:af:c6:65:64:57:09:fa:2f:78:
3e:4c:51:c9:d9:e2:be:d2:df:16:ee:a5:5a:1e:6b:
41:24:0b:61:b7:10:4f:24:04:10:64:d9:e9:a8:6e:
5d:42:3a:1f:e7:95:cd:99:60:03:4d:c5:c3:5f:59:
6b:8b:7d:25:3d:8a:0f:3d:8c:79:91:69:73:dc:f9:
48:13:54:75:e9:37:fb:0d:77:c0:8b:ca:b1:05:6e:
da:49:67:d4:5a:e9:2e:02:99:41:07:01:b0:15:d3:
01:c2:3d:57:2a:d1:c5:ab:f3:34:6c:44:e9:d4:f9:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:FE:98:E4:57:35:A9:E0:AC:EB:5A:01:3C:E6:BF:09:0D:AF:80
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:df:28:4a:a2:8a:66:f1:8a:46:19:d2:a8:d0:db:a9:04:f8:
c2:19:38:c5:e6:1b:12:8d:4d:dc:19:93:23:c6:2b:58:38:ae:
1e:26:30:d2:b8:75:5c:17:50:d4:fa:b5:98:d8:99:10:86:34:
c7:c3:88:d3:a6:27:4c:ef:4f:0e:97:70:84:8c:9b:c5:45:31:
a0:68:45:77:c0:55:de:1f:58:86:81:5d:5d:32:9f:ce:08:8f:
01:6c:51:50:d2:d0:ea:7e:04:3b:a4:ba:f8:a1:0d:85:63:ab:
ea:8a:a3:1f:63:88:ce:b7:24:85:ee:57:80:91:5a:52:72:b1:
9b:87:3e:71:f1:bc:d9:11:4c:39:2d:99:37:1e:73:ce:db:45:
a6:b5:90:84:5e:1c:e6:e0:d6:32:97:e7:23:e0:a5:73:6f:35:
f0:1a:ce:5a:34:cc:01:36:09:82:51:a5:0a:68:89:ba:28:e1:
67:8c:81:17:e8:92:3e:8c:26:96:0e:4f:71:a5:f2:3c:be:da:
fb:74:7d:b4:2f:cb:9d:b2:30:1a:85:de:7c:8f:3f:9d:3f:09:
71:d3:8e:6f:6a:17:ea:2d:8d:2f:21:e9:06:1a:4e:06:6a:36:
5b:51:4d:a1:3e:a1:13:c7:a7:95:20:d4:e0:98:78:a2:ea:51:
de:81:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:23:00 2025 by rpki-client