Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: 8sRvAXKvzwe01fnAd8AmQWhtW3XOxKorZI25vWfCZrs=
Subject key identifier: 7C:ED:F3:83:D2:D5:FD:FC:82:1D:35:F0:9E:FA:78:F6:BB:E5:14:02
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 0194BD4E6876ED5932D0F081C10A77061D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: 5AVrUxKH3qmCM+chQi/gXzGiJk+FchgsmmOTOah3BhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:76:ed:59:32:d0:f0:81:c1:0a:77:06:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=7cedf383d2d5fdfc821d35f09efa78f6bbe51402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:0d:ee:72:d4:5a:5b:f8:54:3a:35:b2:ec:
dd:bc:22:05:81:d6:e2:52:e3:38:8a:d5:88:15:ed:
2f:8d:31:d9:ce:20:39:83:b6:56:50:6b:12:39:9a:
70:17:c4:8d:8c:01:1a:5b:89:4b:4a:25:ed:5b:8f:
b9:87:90:d2:4b:ad:26:5c:90:89:0c:5e:d5:43:98:
fe:31:69:68:f7:f0:3c:26:8a:96:01:63:fa:4e:32:
e5:75:cb:c6:b1:f3:7e:cc:ca:eb:a9:67:f3:91:b2:
34:cb:32:f1:94:d4:c5:13:df:6d:28:63:f0:8b:f1:
a8:19:52:71:ec:1f:24:95:8b:f3:93:1f:54:c5:df:
3e:48:5c:b5:ab:16:a7:4e:f4:38:51:58:5a:c8:24:
5a:a9:34:c5:1c:1b:5a:3e:ae:fb:bd:2a:82:f5:62:
47:af:51:9d:47:bd:cd:23:f9:69:a1:23:7d:84:fe:
d1:57:e7:b5:2c:5d:75:42:cd:c5:29:32:9b:3b:c3:
48:2b:3e:90:51:6c:9b:3b:b1:3c:9c:d7:98:07:53:
2a:0e:f6:a6:73:7a:7a:ba:e1:22:47:38:19:42:7b:
ae:0b:63:f3:78:bf:07:ac:cd:a2:a2:91:1c:dd:77:
1e:7f:e5:e9:f3:25:f9:cf:2f:df:99:26:4f:ee:50:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:F3:83:D2:D5:FD:FC:82:1D:35:F0:9E:FA:78:F6:BB:E5:14:02
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:e5:da:9b:3d:34:36:e4:4e:49:8a:f4:74:2d:7c:5a:ee:
e4:f5:06:ac:54:4a:cc:8c:98:45:e2:e0:78:26:b8:3b:3e:91:
1d:c8:11:cb:4a:29:60:38:28:38:6f:9d:d4:e5:b9:42:3c:5e:
14:4d:bd:1f:e8:2d:dc:2a:5c:cc:06:9a:df:86:49:4e:ce:d9:
1c:eb:e5:57:d2:8a:31:b7:d0:1b:07:62:b0:50:26:1c:6b:61:
ea:e7:d0:37:df:4c:43:3e:0a:97:fd:8a:79:b8:d2:ea:61:d9:
7a:ff:b6:a6:6c:77:57:17:84:07:e4:45:a1:48:d6:b1:f5:0e:
35:b5:9b:b7:42:f5:60:ff:10:06:a3:0e:a5:89:7d:03:b3:a8:
82:4e:e0:93:94:50:6a:93:63:5b:71:ea:d1:b5:5c:5a:8b:bf:
6d:9f:b3:ca:9e:2f:98:59:48:fa:1a:4a:a6:be:47:8c:3a:37:
67:08:b5:35:05:67:5a:4e:b6:d1:16:28:7a:54:36:f2:82:ea:
a4:d9:2d:04:c4:bd:14:05:49:68:87:41:22:1f:b5:d7:c2:e4:
a3:ce:f9:44:b7:96:cc:b9:57:e2:1b:21:b2:ae:e1:57:1b:b6:
30:b9:1f:55:d3:20:56:ed:7f:84:c4:32:b7:c6:69:52:a9:12:
64:cc:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:03 2025 by rpki-client