Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: pmT29CcZ5Yse5zprjPw6edqOHi3cOjhdrIC5r8gmFW0=
Subject key identifier: 30:65:F1:BC:9A:5E:55:83:0C:67:32:98:C2:EB:A3:F1:8C:A0:C3:5F
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 0194BC3C2192277EB5170D91FCB05CD286FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: otKOPzVC721cLW3SHIZSTeNuvrBXzkrv7S8fCDgV1rw=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:92:27:7e:b5:17:0d:91:fc:b0:5c:d2:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=3065f1bc9a5e55830c673298c2eba3f18ca0c35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:94:96:96:77:7b:35:d6:53:c9:0f:53:b3:
33:3c:36:96:4f:55:a3:21:8f:19:c4:3b:c6:91:d7:
3c:47:f0:74:73:35:9e:9f:f4:3c:01:8c:9b:4a:e5:
0b:42:5d:d8:85:16:81:11:d3:a1:2d:42:4c:b1:ba:
d4:b2:d2:58:e9:e9:ae:c4:db:f4:18:06:d6:91:d8:
e8:d8:54:80:04:08:64:15:ef:3f:ec:b4:e5:03:07:
19:8c:e0:6f:47:fc:6d:63:38:3a:20:24:37:ad:34:
71:77:d6:12:68:53:10:37:91:96:35:a9:fc:1a:5f:
66:e4:c3:70:be:71:db:7a:f6:ea:1c:c3:36:f5:ce:
38:fa:b6:91:db:58:21:5b:cf:b5:88:ba:b0:69:ab:
18:d5:34:59:90:1b:ac:58:9e:6d:53:cf:61:ff:b2:
c7:64:79:73:1b:f8:1d:8c:5c:ed:49:31:33:53:61:
ce:aa:fa:90:69:96:73:c1:6b:1c:33:0b:29:58:d0:
48:9d:31:ab:f3:82:18:a8:db:c7:1a:b7:f8:52:62:
90:04:73:7d:4e:dd:68:36:c1:bb:e3:fb:7c:c8:5b:
4c:12:40:1f:69:57:0d:1b:8f:de:f6:2f:d8:54:4c:
5d:3d:94:52:30:3b:56:b8:31:c6:4b:de:2a:92:91:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:F1:BC:9A:5E:55:83:0C:67:32:98:C2:EB:A3:F1:8C:A0:C3:5F
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:c9:92:ce:b2:64:03:bd:45:d0:e4:44:29:39:f9:cb:cf:
26:c2:bc:fd:e8:fe:ce:66:4c:30:d0:4f:f4:f7:48:3e:1b:aa:
46:4e:e6:55:4e:2c:b2:55:71:92:fa:a6:be:a3:c8:d0:eb:18:
c0:7b:83:e6:11:4e:51:e1:9a:9a:23:22:b0:77:69:0d:17:6e:
a9:2f:e6:1e:a9:96:ff:00:23:09:fc:0f:7a:b2:db:35:2c:7e:
e9:a1:de:90:28:e1:a5:c7:e5:43:eb:ec:a4:0f:12:68:c3:a6:
02:2d:67:ca:57:4c:90:da:d5:8a:45:9c:ef:e5:13:e9:c6:e3:
a8:2c:a0:00:2c:f6:f2:4a:8e:28:a1:61:d3:4d:bd:63:c5:4b:
77:1d:51:cb:1e:fa:79:9f:74:05:f1:c0:71:75:6f:ac:48:c8:
d7:c7:be:87:c3:40:3d:31:d9:2e:da:e6:0e:cf:90:28:89:19:
12:55:5f:c5:52:c7:d4:c2:f2:69:11:72:13:47:2e:ea:bc:5a:
c6:53:3a:45:71:36:e2:39:e8:2e:fa:74:7e:b7:f8:09:e7:fb:
e6:c6:6a:da:cb:92:8e:7a:7e:e0:a3:a8:be:ed:e4:5c:f2:c1:
a0:10:85:6a:e8:4d:20:b5:b3:68:1f:9f:5f:21:61:e3:36:d9:
7d:06:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client