Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: xDgS5y0toaKgRtyqrEIs1UT8Z2+qFWNGzuq9uW7KBTc=
Subject key identifier: E4:65:15:1C:37:34:D0:65:4D:E8:FB:EA:43:89:A8:BE:7A:6C:B2:2C
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 0194BBCEB10630BDF5AF19FC4F24FF3F0952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0371
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: o0oMTAuKIGHPPUAOzZr4Sk6LJKE.roa (hash: ZRg0HV5OEgSBlVNEZwtUfyiQ+K7sHVEJu9FVy+59lsM=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: rXVLbqez0ypk1p4Sm1FOYMVpwXyNWCMaJGgynyUNi8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:06:30:bd:f5:af:19:fc:4f:24:ff:3f:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=e465151c3734d0654de8fbea4389a8be7a6cb22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:ac:d8:a5:52:f1:0d:2f:c7:d1:52:0e:fc:
04:02:fd:a0:7b:5b:e8:e9:f1:90:ba:b3:35:15:a7:
4d:40:2d:45:57:84:cc:c7:ff:7d:a6:3f:75:f9:76:
b7:27:2e:9d:80:21:10:77:1f:dc:7f:c6:3d:d2:46:
57:ba:10:96:6d:89:b8:3d:e8:9d:d4:7c:10:62:52:
96:fa:5e:37:27:6d:8f:e9:7f:19:a9:e0:d9:d5:ce:
af:96:1b:8e:ea:63:c8:04:35:13:5a:31:58:cb:e5:
90:12:2e:02:15:59:a3:a7:ef:80:d5:35:5d:09:75:
ac:16:c6:25:b2:4e:de:15:cc:9f:47:59:6b:d9:96:
e3:c1:ff:de:46:90:de:49:e2:b9:3b:1e:dd:65:18:
84:ca:38:89:a3:9e:bd:d2:0c:22:b5:5d:17:0a:3e:
e4:fe:14:cd:b7:43:50:be:08:a6:57:1a:56:70:0d:
ae:f9:97:5d:06:f0:bc:9b:c1:47:79:87:25:38:fa:
af:6e:a9:bd:d6:9b:dd:af:7c:8f:35:72:08:4d:29:
bb:0c:b0:29:32:60:1c:b3:c2:ac:46:f6:b4:6c:5f:
bc:b7:c6:1c:85:63:b0:99:e0:2d:bb:d7:13:2e:5b:
d8:fa:20:07:12:03:ab:2f:ac:6f:94:a3:5a:b8:09:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:15:1C:37:34:D0:65:4D:E8:FB:EA:43:89:A8:BE:7A:6C:B2:2C
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:00:8e:fd:d2:f3:99:82:d6:57:28:58:24:1f:b8:58:05:8c:
c2:6a:f4:65:8f:5f:28:ec:43:c3:8a:35:dd:55:12:cb:2f:65:
7a:45:6e:92:32:62:57:d0:20:a7:76:7c:e9:8d:e2:1b:4c:b8:
37:ca:78:33:d0:c6:34:a0:09:d8:c0:9e:60:6a:f9:b6:18:69:
4c:a2:0a:09:ca:2f:84:4c:71:09:e9:4b:e0:b6:55:f5:21:6a:
25:ee:d6:c0:d3:e2:38:be:f0:1e:b5:2a:1c:a7:82:4f:a2:f9:
a5:85:48:56:9f:99:9d:63:44:7a:7c:e2:c0:6d:c4:84:34:7c:
c2:74:57:8e:e1:86:3b:ed:a2:7e:d1:ef:15:91:b0:13:aa:19:
5d:d3:45:b3:a2:c3:6f:d5:17:f7:c7:ea:ea:4b:fd:79:15:f4:
ea:56:d6:0b:bb:a6:8a:7a:fa:90:99:45:1f:5a:0f:bc:2c:3a:
d6:23:49:49:82:f6:75:ff:1c:d0:be:99:12:58:4a:9a:ef:4c:
f3:b3:10:b6:7a:78:0c:88:65:a2:b1:1b:c6:d3:68:74:70:59:
91:bc:e1:e1:7c:bb:40:f0:b5:b6:75:e9:e9:c2:87:7c:f8:10:
d6:41:b4:20:7d:f4:71:0e:cb:98:61:04:10:55:f6:23:58:02:
8b:36:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:32 2025 by rpki-client