Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: gkT3TLnKm3NXYr+wvlmq9L8TG8RWgjrQyz0xgPQDG6M=
Subject key identifier: CD:19:E2:A2:6E:59:9E:A7:7A:D8:96:5E:A5:58:2B:67:30:BE:23:D3
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 0194BD4E62D6718BADD14BFCAE342EB41D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: KMkhqFolWdiP3sbCHHJGx+0a6W9WnKwJCsubXVxzBVM=)
2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:d6:71:8b:ad:d1:4b:fc:ae:34:2e:b4:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=cd19e2a26e599ea77ad8965ea5582b6730be23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:83:0f:a5:80:6e:9b:99:94:be:be:67:40:
74:cf:5e:70:0f:37:ef:12:76:3b:f5:51:69:c0:22:
2f:8f:85:f2:6e:6a:00:79:33:8d:97:9c:38:18:96:
f6:9d:51:45:40:80:27:bd:15:88:75:35:23:3e:9d:
a1:26:a1:e6:80:1f:46:dc:e3:c1:18:b9:22:2f:d3:
6b:83:12:0f:17:b0:67:5a:8e:0c:78:9b:f9:1a:cc:
2b:7d:24:64:2d:fd:c2:64:71:43:09:00:f1:d5:6d:
4f:19:12:fd:f9:d5:19:44:bc:60:a9:fa:b2:97:77:
07:26:b4:29:ad:79:73:8f:cd:2a:69:f3:bf:2e:3c:
ea:dd:ae:4e:57:76:47:d2:37:63:fd:ce:32:4a:02:
d8:8e:3c:e0:ce:01:f3:bc:60:cb:b3:30:e9:3c:36:
06:38:b9:70:93:1f:cb:9f:27:cb:60:5f:72:5d:88:
b6:7c:30:5c:8e:41:67:5c:ca:bc:7e:9e:eb:5a:d5:
ef:e6:93:94:5b:9e:e2:e1:a5:11:5c:82:3d:f5:a2:
b9:57:71:bd:ca:6e:26:a0:48:b1:0e:13:d1:ce:9c:
32:f6:9d:47:c0:2c:61:9d:24:a4:1d:15:90:21:64:
9b:15:bc:5f:04:6b:bc:6e:6b:31:35:7d:ea:ab:6d:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:E2:A2:6E:59:9E:A7:7A:D8:96:5E:A5:58:2B:67:30:BE:23:D3
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:af:b7:93:6d:1d:a5:df:0b:76:52:0a:c2:22:8e:fc:b6:33:
da:cf:c2:78:08:dc:5a:10:72:c3:af:9d:28:ac:d6:2e:36:14:
bc:f6:d9:a5:98:40:ec:47:48:b9:b9:af:d4:24:db:22:31:ce:
3a:b1:e4:ac:91:f9:3c:cb:57:d1:c6:9a:54:68:09:a9:16:bf:
2a:48:f2:c1:2c:c5:ad:7e:f4:d5:4c:12:27:ca:b5:66:ae:15:
9f:4b:c4:de:10:ba:a0:62:2c:ef:d6:9b:23:9d:f6:f8:5d:d3:
7f:07:70:0c:7d:08:d4:fc:d2:de:60:e7:99:0c:dc:13:5b:fa:
07:9c:52:38:5e:0c:67:12:c7:9b:a7:89:f3:c3:cd:b0:60:85:
21:90:3f:f5:4f:1c:57:43:70:4b:18:13:dc:cf:db:aa:59:4f:
5e:6c:bc:0b:aa:d7:e6:1e:fe:a8:31:6a:ad:7b:d5:fa:fe:3e:
d8:5f:f9:88:86:bf:fc:61:ab:e5:53:fa:97:d4:4a:e8:85:50:
2b:3f:d8:2f:d9:27:d1:47:bb:40:e7:14:bd:07:8f:fb:1c:9c:
2c:2a:61:2c:1f:77:af:95:b6:ce:26:c3:90:a4:e0:19:64:a9:
9c:82:b9:d8:1f:3c:24:a1:d3:1b:4e:d4:68:ca:a5:48:59:38:
94:c7:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:23 2025 by rpki-client