Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: 3GCyzLsciGF/gAKxuGna+5VKdJfaiMyIMn6jYOqz/ow=
Subject key identifier: 97:1F:C7:6B:4A:80:B6:64:C9:A0:D7:0C:73:C7:97:01:D2:6D:84:77
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 0194BC730FD46066E6030EBF828B1226EE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: Vb/7ISyEabrlUgAW4QhXmRMR7JeTRnhP2EHZPrtN0Es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:d4:60:66:e6:03:0e:bf:82:8b:12:26:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=971fc76b4a80b664c9a0d70c73c79701d26d8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:66:0a:fd:e6:82:ca:40:c6:fd:79:8e:46:8f:
97:ae:5b:94:41:9b:3f:42:01:45:5e:06:d1:50:57:
93:76:c1:4f:c9:4a:6d:8b:ab:61:fa:75:90:44:23:
6e:61:d3:45:68:55:b3:aa:cb:80:99:ba:02:ab:c1:
21:db:18:a7:6f:85:1d:d8:1a:a9:e3:6b:23:7d:d0:
f8:4f:ac:b1:47:9c:e5:39:3b:b1:ce:11:00:40:af:
0d:8c:1a:5c:af:65:ce:61:9d:a9:54:95:12:3a:97:
e6:56:2c:3e:08:4c:16:6a:09:41:07:7a:fe:cf:36:
f6:19:ef:64:c4:b1:9a:57:78:ec:6d:f6:06:63:ab:
c0:b9:59:96:c3:85:c9:bb:74:86:4d:eb:d5:7d:47:
e4:e8:8a:f2:a3:b8:9c:95:8a:00:38:50:a5:a6:2d:
aa:f9:fd:4e:5d:81:58:e4:4a:d1:0e:be:85:07:2e:
95:e5:0c:1d:7f:7d:48:f5:42:54:f7:32:25:b1:29:
7d:69:b4:72:aa:aa:a9:88:56:7a:50:d7:e7:68:3a:
31:66:c0:e4:ba:17:0f:ca:dd:3c:3b:ca:fb:9e:90:
b4:1f:88:4e:e5:61:e5:8e:19:6a:3a:ae:6c:c4:10:
0b:f6:5b:5e:42:9b:22:a3:93:40:df:f1:81:ef:a3:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:C7:6B:4A:80:B6:64:C9:A0:D7:0C:73:C7:97:01:D2:6D:84:77
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:9b:d9:3f:c8:90:7c:20:e9:59:2e:b3:58:91:95:8b:21:
d7:a7:56:7b:f3:a5:27:95:e6:c6:b6:67:1b:72:c0:4c:d8:6a:
a2:de:ad:94:a1:f1:64:cb:89:f4:e0:40:30:ec:19:5b:f1:6b:
33:48:e2:0d:8a:a9:5d:7f:aa:e2:58:85:9f:fa:d8:9d:b4:fd:
79:4a:0b:6d:aa:c9:b8:59:7e:fd:9f:45:1f:fa:f6:e3:90:af:
0b:f7:00:63:77:e1:20:72:b0:1b:e7:0e:e8:67:9d:f2:28:91:
85:00:07:dd:21:ba:d4:f8:10:2a:c3:ce:83:3e:51:a9:35:39:
90:3e:a1:73:e4:d8:e6:20:70:5e:7d:f3:64:73:a2:ce:45:87:
5e:6b:87:3c:84:a7:86:c3:ce:41:4b:ec:00:22:7b:d4:20:f6:
ca:0d:30:9e:95:57:b1:ff:6e:9f:23:d9:88:2b:94:1f:63:09:
b4:2b:e0:22:58:2e:8e:c1:e9:e8:b3:d3:c5:8a:98:a9:84:24:
e1:1b:e5:01:6f:f1:25:39:87:86:9b:2f:63:82:b9:58:09:5b:
3e:da:4f:6d:1d:7c:d6:f2:2c:f7:c7:db:06:96:8c:89:c9:62:
88:36:a5:a7:19:51:e0:03:f7:77:4f:ed:63:37:1c:cf:22:8d:
3a:49:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:36 2025 by rpki-client