Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier: /mqhAQYNWeNo9RyNE3Txv6/n68l82/YKPnruExTDBuE=
Subject key identifier: 7E:F3:3F:1B:17:2E:A9:22:96:5D:A6:CB:70:1D:98:2D:E5:E2:AE:20
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 0194BD8569ACF4EA704A3F5B3BED40CE7DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number: 0B52
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=)
2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: +mMJtmhaDR8QiJxguc3bA1OAJIClvJvRlOkhwbi4sDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:69:ac:f4:ea:70:4a:3f:5b:3b:ed:40:ce:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=7ef33f1b172ea922965da6cb701d982de5e2ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:fe:26:74:c4:8b:31:2f:96:a0:56:ca:69:
a7:60:e5:b1:61:a5:95:d2:13:5c:41:de:91:df:c0:
f2:75:27:54:83:64:9e:6a:a5:58:27:01:ac:b9:b9:
80:bf:8e:1b:be:4c:53:ce:3a:50:c0:4f:62:06:78:
43:f1:ea:e3:9c:7e:eb:77:df:e3:1b:69:5d:8d:8a:
9e:93:55:f8:ba:d7:75:58:12:33:8a:47:48:34:e9:
71:9f:7a:32:94:fb:ef:0b:98:56:55:6e:e7:5e:bf:
e6:40:7a:29:24:a6:2b:d4:82:0a:93:31:94:e5:5c:
a8:6d:1e:52:5d:00:7b:ce:cf:51:ec:78:16:73:e9:
09:99:f4:3d:72:0c:51:62:0e:de:f1:4a:2e:aa:95:
3b:86:e0:ad:01:a2:08:30:7d:24:63:52:e3:e7:fd:
65:7a:3e:6e:57:ed:05:a1:25:90:94:46:12:79:16:
8b:8d:ef:75:83:67:fd:65:88:69:46:ff:87:54:de:
4a:32:cd:42:2e:53:60:2d:af:98:ef:42:0d:99:1e:
30:10:16:e9:8e:30:38:96:ba:2d:ef:dc:7b:9b:f6:
af:25:26:ce:89:b7:0f:9c:31:ec:9d:40:d8:24:0f:
30:06:e3:42:8b:3e:2b:75:38:d9:24:ec:a8:9e:37:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:3F:1B:17:2E:A9:22:96:5D:A6:CB:70:1D:98:2D:E5:E2:AE:20
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e0:08:0f:72:60:94:bc:2d:70:38:0e:d2:8a:e9:83:26:a1:
65:ac:c5:96:df:98:2c:87:3a:2b:69:be:bb:da:2c:2e:b3:82:
1c:8b:e6:47:72:8a:59:0c:17:fd:18:8c:e7:de:56:92:96:97:
fb:28:3d:60:0a:bc:8d:dd:55:f5:0d:97:fd:99:6a:df:d6:99:
fd:7e:9e:51:7d:91:65:a2:6f:48:0b:2e:70:c9:73:a9:d8:4a:
0d:9f:4c:05:11:0b:07:d0:4e:41:36:40:4d:92:95:05:3a:a6:
6f:27:c4:72:b2:6e:c9:6c:c9:8e:2e:ca:3f:99:a6:30:2d:3e:
c3:a2:18:b9:19:e0:27:d8:09:35:91:f0:9f:4e:60:84:13:a6:
d6:91:f9:67:6b:8d:c7:1a:1c:dd:ab:8a:ca:8c:f7:f1:02:59:
0e:2f:6d:5a:ef:2c:50:82:55:c9:a8:57:65:5c:11:ae:9b:8d:
7d:e9:fe:2e:b8:22:eb:e1:d7:6c:87:c1:d8:99:1b:e7:10:6c:
c1:25:13:e0:df:22:31:11:19:e2:c6:4e:25:c7:68:5b:43:6c:
97:64:c4:b5:39:d5:0a:af:0a:39:46:be:2b:46:e2:97:51:95:
e2:53:8f:5e:14:3a:b7:e0:be:df:f7:c8:13:ab:7e:56:bd:b2:
ec:d8:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client