Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: yoOPdx/DU3NmUe24ILzLnJRN0Gj3WVbaRTWpio4fziE=
Subject key identifier: BF:25:DB:36:DD:AF:DC:89:6D:3B:AA:28:BE:C9:47:8F:01:62:39:79
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 0194BBCE60477976D751F6C23FE18F85C15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: vxLtDv2ZuwH4H9ACbRY+QaPuPsU4X8/g+cQz53/e1xw=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:47:79:76:d7:51:f6:c2:3f:e1:8f:85:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=bf25db36ddafdc896d3baa28bec9478f01623979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:9d:0c:e5:ba:31:8b:7a:fc:89:0a:1e:28:
c5:3a:6f:7f:64:29:af:1f:e8:c2:13:96:80:69:58:
ed:d1:cb:33:0f:9f:42:7d:c1:74:da:0b:b1:27:00:
50:87:53:df:6e:25:72:1a:2e:fb:12:21:f7:12:ba:
65:22:89:4f:ab:55:91:b9:78:ca:01:b0:20:f5:e4:
ee:ad:37:95:1f:2c:43:35:75:63:6f:81:55:a3:ab:
24:18:83:a9:cb:6c:c2:fd:ea:c8:1f:80:65:3e:a0:
a8:6f:53:26:15:5f:c4:0e:66:78:40:9a:09:24:07:
a8:80:b6:ef:04:85:3c:cf:6a:16:7d:1b:a2:38:0a:
54:c6:fd:a2:33:b4:6c:b5:2c:22:96:c7:d5:42:be:
18:9e:b8:17:b7:21:1c:6c:f0:60:cd:6c:d2:90:dd:
f2:05:d1:19:58:24:55:d7:67:ed:25:a6:0b:40:ef:
31:93:50:c1:7f:33:96:f9:14:de:67:f7:c8:db:c6:
4c:53:81:6d:09:d6:88:01:b8:e4:26:ef:66:2e:7c:
70:80:f9:77:6b:9c:3b:c9:0b:df:1b:df:0e:3b:03:
01:84:82:2d:9e:b3:ce:e4:18:62:96:ee:b8:2f:9a:
b8:44:30:82:04:88:12:9f:19:7c:1b:fe:1c:d3:55:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:DB:36:DD:AF:DC:89:6D:3B:AA:28:BE:C9:47:8F:01:62:39:79
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:70:5e:6e:04:a5:b2:de:35:de:ca:36:e8:e0:0b:54:9c:8f:
5b:24:32:41:6a:df:ad:41:53:9c:96:53:61:3e:be:42:41:28:
ab:15:d1:e0:ee:74:a9:8e:cb:66:e3:8c:07:f7:6b:ab:b0:bf:
c1:99:a8:62:97:a3:7e:7a:4d:6d:22:5e:84:8b:08:f2:48:51:
0a:0e:a2:9c:0f:96:38:a9:1c:08:ac:80:e2:82:f2:35:79:96:
92:b2:dc:32:ba:3b:c6:98:5c:71:bd:25:72:34:ac:2b:06:e8:
c1:c9:d0:62:db:a5:8a:8f:69:14:f9:fa:9d:c7:f7:a6:03:53:
44:d6:b5:ef:97:2c:b9:89:3c:24:af:52:8b:6e:16:42:83:6f:
23:dd:66:a5:3e:f8:16:ef:2e:8d:a1:7e:c7:9e:3e:4b:57:4b:
bb:1c:f8:68:e3:cd:0f:82:fc:ae:67:bd:b3:88:4e:62:23:f8:
cc:a4:9c:ba:bf:d6:17:c6:4c:37:e2:52:38:6b:f4:6f:71:b0:
3f:c9:61:fe:ce:7d:eb:b9:c0:f7:fe:c1:2a:76:6c:4a:21:29:
1e:eb:d0:ea:de:6e:16:48:da:f4:f7:bb:81:65:87:ea:ee:e7:
5a:72:33:a4:54:81:8b:2d:a8:4c:20:2f:f4:cb:c9:df:ab:c9:
cd:2d:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:33 2025 by rpki-client