Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: Xw8sbo2ohvtO6Kr1+CTJzDZoa3pl3a65lkIybNHdSoE=
Subject key identifier: 1E:B2:72:78:0A:E1:14:B0:B3:F6:83:3F:19:45:AB:E1:FF:5D:43:CD
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 0194BD4EC9E8C234957026868A355D24325E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 05A5
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: 91HVfxM64yro1EDkDm/6lHxSdJDRgnIZWJfBh1rX54c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:e8:c2:34:95:70:26:86:8a:35:5d:24:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=1eb272780ae114b0b3f6833f1945abe1ff5d43cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:f8:2b:93:23:ec:00:b2:1f:fe:33:0d:69:
40:60:81:d9:ef:0f:25:58:c1:b8:d8:c7:75:f6:38:
fc:bd:1d:55:20:2d:65:cd:d6:22:15:7f:ea:7d:00:
3d:4b:00:d4:e2:1a:da:4c:ae:07:3d:13:89:e3:3f:
f7:12:1f:02:4b:1d:15:2d:56:41:39:69:e2:0f:8d:
77:87:a5:7d:24:fe:d9:53:f5:6c:7e:28:60:fd:ea:
71:d6:de:c5:5e:30:cd:a4:04:3c:91:9b:2a:22:e4:
9b:9d:d4:27:31:a2:e2:71:bf:0f:23:f9:f8:e7:a1:
65:f2:0e:0d:45:73:7c:7e:6d:f1:e8:b1:0e:35:62:
cd:d3:bd:d7:18:20:a2:80:5a:c6:53:a7:5f:ff:af:
cd:b6:95:0f:12:89:10:1a:de:0b:53:a1:ae:53:db:
f0:b2:23:31:0a:e7:3b:38:00:54:82:58:1a:ac:49:
90:90:67:23:aa:ce:4b:88:6e:e0:6f:de:4a:bf:27:
2c:3c:af:88:13:54:03:9f:4f:24:37:83:93:28:19:
70:70:ac:0c:d8:4f:b0:50:e2:fb:aa:e7:ba:5d:42:
a6:fe:8f:55:ef:ee:7b:ea:f9:dc:03:e4:fd:26:95:
4f:5a:d9:16:0b:33:e7:0f:00:0b:a4:54:7c:b2:2a:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:72:78:0A:E1:14:B0:B3:F6:83:3F:19:45:AB:E1:FF:5D:43:CD
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:4f:f0:14:5c:b0:48:bb:10:8e:5f:fa:65:93:95:38:99:
57:13:b0:ef:81:93:28:cd:b7:b4:f0:4d:37:0d:10:0f:ca:ea:
d0:71:65:2b:1a:51:f3:04:51:ff:57:b2:8a:b7:81:03:8d:1b:
d1:cb:3c:d9:0a:6e:cf:02:28:51:60:34:d0:2a:ec:a1:9d:cf:
2e:59:e8:71:a6:1a:e5:5f:c6:d1:96:06:de:95:31:62:78:4e:
53:4b:43:83:d8:25:63:64:fa:7f:c5:b4:2a:1d:cf:82:a9:47:
ba:58:d6:a4:84:f8:0d:6b:ae:d9:80:d4:78:3a:a0:c0:3e:0a:
60:04:7c:d0:71:5f:cd:ea:dc:0a:96:17:30:65:2a:ad:3a:df:
cf:ac:5a:82:86:1b:f6:18:20:32:53:1e:ba:8c:a1:fc:d8:6a:
6f:d0:67:7c:8b:a8:e6:9f:7c:b7:3c:69:03:d7:82:eb:91:d0:
c4:f9:c2:26:cf:ac:4f:06:0d:d7:a8:20:36:00:aa:ef:d0:ac:
d9:54:00:d9:14:3d:3a:e4:bc:99:e0:e8:19:bd:3a:57:6f:24:
3c:16:de:a3:44:fc:0c:6f:37:a6:9d:6c:08:b1:19:89:e5:9f:
3c:79:52:73:1b:df:b9:14:c8:15:00:65:e7:72:ce:8c:08:a9:
11:8f:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:05 2025 by rpki-client