Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: bgVDJQF6M+QhRaT1z3LJQgzHKRwzGO+tWupbbgnnjkI=
Subject key identifier: DB:20:21:A4:6A:9E:FC:A1:70:4B:01:87:0F:92:85:4E:12:AD:5F:A6
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0194BD856EDCD3E579FA56322D2637779F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: XGDGnVydNkVbvWbrjK9Whp/V0W4QUNjResUf6MgUjT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:dc:d3:e5:79:fa:56:32:2d:26:37:77:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=db2021a46a9efca1704b01870f92854e12ad5fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:11:b3:d4:38:29:86:7e:7a:26:32:29:0f:
0d:09:87:54:83:99:84:43:83:56:33:c8:e6:64:a7:
57:65:2e:80:b7:10:74:0a:a2:a5:d2:de:2a:8e:de:
33:a8:43:f2:d5:eb:fe:83:b6:c1:d6:6f:64:d3:89:
68:f6:7d:95:a2:c5:c9:3c:85:d8:26:8b:3f:16:0e:
68:c4:1b:3f:43:ad:bc:88:5f:17:4c:fa:3d:42:97:
c7:ce:8d:7a:a9:c7:93:dc:7c:79:de:d6:79:b8:ae:
90:26:65:f2:26:d7:2e:4a:85:fd:c1:f4:51:7a:ff:
db:e3:b8:15:c0:30:65:0f:70:46:5f:56:7e:b9:58:
20:65:02:6d:86:eb:38:ba:5e:4b:84:57:68:ba:4f:
71:fd:7b:06:41:a5:e7:1c:b5:8a:e3:09:be:f8:b6:
de:1a:95:b8:92:09:da:d0:75:0b:41:cc:fd:4b:0c:
b9:7c:d5:f6:e9:b2:9c:8b:1f:8e:c5:06:0e:8c:31:
11:0a:b5:23:97:81:d1:e6:df:f0:a0:7e:4e:1d:a1:
e5:c0:24:00:f2:ee:09:08:66:e5:d6:2c:18:51:2b:
6d:67:e8:f1:00:8a:19:b0:c3:b5:61:ca:88:ad:e9:
fa:a9:62:42:9c:35:2e:52:a6:ef:f2:1d:6d:49:b7:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:21:A4:6A:9E:FC:A1:70:4B:01:87:0F:92:85:4E:12:AD:5F:A6
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:99:ff:d7:d8:b1:80:a9:2a:16:ca:fa:4a:75:4b:f1:fc:
0e:6d:dc:e2:e1:80:f3:dc:d8:ff:35:af:3e:ef:5d:29:a6:23:
40:21:b7:14:ef:27:4f:a4:3e:2a:f6:b0:be:ef:9b:c6:89:b2:
c1:96:14:8b:a6:0a:ae:57:64:dc:0f:51:21:c0:60:09:50:e7:
ab:53:d2:d5:2b:10:cb:c0:f4:14:5b:c7:83:9e:49:44:84:fe:
e0:28:f0:05:32:d4:4b:c1:f4:b8:09:ea:90:32:af:8c:4b:07:
40:3f:d5:3a:e4:c0:7b:0c:03:29:7e:07:6b:ef:8c:84:57:42:
c5:00:e8:5b:38:24:94:14:2d:e4:ad:9d:a5:00:5c:27:4a:b7:
62:cc:61:58:e5:dc:f7:13:8f:9a:df:02:cf:c4:46:03:00:2a:
1a:30:be:71:98:6f:4c:25:b6:04:20:7c:d6:54:a6:6a:8b:3a:
fe:22:3d:39:cc:91:be:43:51:48:eb:fe:0e:6e:21:ce:36:54:
1c:48:61:da:a8:c9:a7:43:5d:c2:37:19:96:4b:7b:da:76:23:
b2:41:65:b4:ab:95:a3:84:7d:d0:3a:5e:71:dc:df:64:ed:96:
a9:f0:5d:df:63:a5:dc:bb:b4:a8:f2:a7:27:7c:7e:98:9b:67:
c8:f2:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:14 2025 by rpki-client