Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: y5DNmPrAjrG+AL+w2OdhOZinOa7upMbZzHN6FUz9LX8=
Subject key identifier: 0B:7C:19:16:29:C0:2A:AA:A2:DA:30:8E:D9:04:50:D3:30:C0:39:25
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 0194BC04D10FF71936931440A24BBC723EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 024B
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: u83N822eHjwfKFkvFB3iG4x6tzUPEe3a96ZfRt+kSAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:0f:f7:19:36:93:14:40:a2:4b:bc:72:3e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=0b7c191629c02aaaa2da308ed90450d330c03925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:20:90:39:a5:b2:23:43:a6:9b:57:1c:2d:
05:0a:ef:0d:aa:52:28:aa:dd:1d:2f:81:78:01:8d:
75:35:9f:de:67:47:0b:79:0d:03:75:55:0e:10:27:
9c:6b:f2:b7:98:93:40:20:c1:4a:aa:e0:b6:60:89:
27:a8:7f:82:10:98:8b:6c:75:e7:13:1c:0a:3f:b4:
2e:c9:4b:9a:14:54:fc:9a:e2:02:89:c6:05:9e:1a:
09:80:af:67:fd:b6:25:d1:3d:98:76:4c:fd:7b:2a:
db:ce:57:4c:c6:f9:49:ed:3e:d6:87:01:f0:54:69:
8c:93:4d:30:6f:1c:cf:35:ff:f3:1c:98:71:92:50:
7f:3e:29:9c:ab:a0:99:d1:7c:ca:28:90:e9:ae:0b:
d6:2b:2a:e2:ff:f4:2b:03:d6:dd:5b:f3:28:ff:83:
7a:ce:29:2f:74:1c:b3:46:2b:3d:2e:d8:7b:25:62:
75:c7:7b:a2:13:14:a7:82:f5:97:91:d4:54:ab:b3:
fe:ca:24:b7:13:05:58:7c:c0:6e:6d:b3:b8:0f:0f:
38:d5:0c:10:7a:48:47:62:fc:31:57:29:5d:e7:4d:
bc:dc:97:cd:76:c4:ec:16:cb:c4:56:ef:18:c6:75:
8e:43:25:fa:98:1d:84:a5:85:3f:3c:35:fd:fd:71:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:19:16:29:C0:2A:AA:A2:DA:30:8E:D9:04:50:D3:30:C0:39:25
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a1:ee:51:0b:f8:9b:b8:cf:d6:04:b2:0a:d6:62:e6:01:65:
ae:01:04:ec:89:37:c6:81:f9:6e:f7:0b:91:55:17:76:93:ab:
ca:b9:55:1c:a0:bc:be:26:a1:e7:a2:b2:27:ec:d1:03:e3:74:
67:30:5c:33:a7:21:bc:58:a3:b5:e3:31:a6:ca:a5:85:5a:e1:
39:71:c7:91:d3:a2:fe:ab:77:d4:99:49:3d:84:42:a3:3c:82:
ee:b9:fc:52:26:5c:f0:e4:2e:35:51:f1:ce:0d:36:a8:d1:cb:
83:03:e8:f8:fa:ac:ae:85:cd:1d:b8:d0:77:4a:e8:80:c5:1f:
64:29:65:2e:b6:d3:ed:8e:80:15:bc:a9:cd:e6:f8:b2:74:d7:
e0:ed:27:8c:d7:d1:e5:02:83:fd:44:2a:d0:b0:95:9f:3c:e2:
4c:09:97:be:24:fa:1f:dd:86:f7:95:69:1c:aa:6f:d4:76:5e:
95:61:c0:ea:1a:03:a2:08:36:82:e8:1c:70:79:38:cb:3e:f7:
a0:08:5a:f0:7d:9f:98:c6:2a:0a:97:e9:cb:49:61:eb:a3:79:
77:35:d4:95:e9:ad:3d:fc:d8:55:52:cf:7b:30:8f:36:06:64:
61:9a:0a:2e:6c:40:04:4a:d3:1d:eb:af:16:df:56:bb:3e:3b:
99:b8:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client