Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: TCJscixP/8L4Q7eNFbzcxw7u6iJqjh7gsrZLlBYK1YQ=
Subject key identifier: 7A:82:86:77:9B:54:7D:61:96:94:A2:3D:2E:52:DB:32:13:05:9C:3D
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 0194BCA9B55894C6EDC88C79216C018C500E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 1327
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: h+IVtS6NuXAVov4chcAzA5sELkABD0W7yPBTcO7kEdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b5:58:94:c6:ed:c8:8c:79:21:6c:01:8c:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=7a8286779b547d619694a23d2e52db3213059c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:d4:5d:6b:82:7a:80:ef:c5:76:2c:53:41:
ae:0d:81:96:b6:1c:f8:a5:ca:32:f7:33:69:dd:92:
4e:95:53:d0:14:be:e6:28:c1:3b:61:90:e5:2a:60:
80:0f:52:c0:4b:4f:76:7b:d6:ee:f9:70:30:d8:4c:
6e:b5:24:57:13:5d:4b:41:ab:e9:b1:17:45:b8:39:
0a:dd:88:65:c8:5b:04:6e:e5:da:32:d3:0c:21:e0:
f2:ad:74:97:4d:87:f6:81:11:ce:9d:33:14:c4:8c:
c3:b6:31:a5:f4:dc:cd:cf:d9:e1:da:54:50:fd:c0:
5c:1b:03:4b:86:44:82:3c:c4:0b:99:ba:2b:67:3e:
3d:96:50:26:ff:97:7d:af:fe:c8:bb:48:ba:29:90:
ff:e1:7d:e8:b8:18:b0:94:3c:e0:a6:71:ef:2b:e7:
93:55:ef:9f:ed:0b:14:26:65:79:a4:51:09:8b:bd:
80:42:e6:da:6f:4d:8e:48:80:1e:00:1c:cc:59:73:
a6:25:40:98:23:ce:a1:d8:47:32:60:57:2d:b9:a7:
b3:be:f1:97:80:9e:83:9d:6d:91:03:4e:07:1f:a0:
af:8b:ad:13:fa:c8:6e:df:7b:2f:6c:84:16:c0:91:
b2:68:44:70:c4:bf:cf:55:f0:78:f1:5c:5f:5d:0b:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:86:77:9B:54:7D:61:96:94:A2:3D:2E:52:DB:32:13:05:9C:3D
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:80:5c:1d:a9:dc:8f:03:7d:e1:7e:18:0b:8d:45:26:10:
0a:56:04:9d:15:fd:43:e8:52:96:e7:3c:2c:59:c2:18:5c:4f:
94:72:d5:96:ac:c0:35:96:51:d7:d9:72:92:68:71:5c:fc:90:
4a:93:f0:67:b2:dd:aa:1f:06:0b:cb:49:53:ae:0b:a7:ed:3b:
1f:6d:eb:42:18:13:a5:d9:48:cf:0e:63:40:85:38:fe:b8:09:
10:80:81:67:5d:3a:d4:ef:21:f5:5d:f7:84:d3:a4:3a:55:78:
26:71:01:25:c7:2f:5e:3b:a0:16:08:72:2a:8b:35:49:70:58:
95:65:b9:51:e4:d4:f3:7b:54:13:62:a0:9c:e2:d5:32:c2:16:
46:92:72:59:0d:b2:aa:b2:b2:eb:30:b6:41:a9:1f:d0:37:fa:
2f:a8:6b:85:2f:de:ca:96:4b:db:54:6d:8c:11:f9:ef:d4:5b:
3b:11:2b:81:35:b6:00:b3:a9:ad:ca:44:ba:2d:aa:04:57:97:
41:34:1f:b5:83:8b:e5:fe:ce:a2:48:84:9d:c4:c3:4e:c9:1c:
f8:f2:aa:56:f0:98:1f:a2:bd:c3:aa:c8:90:70:fe:a0:3c:0e:
0f:c4:9a:3a:5e:31:14:05:fa:93:f5:4b:d5:dc:76:1e:a7:31:
f5:02:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:36 2025 by rpki-client